Different SQL injection method?

[zaproxy]

Different SQL injection method?

[zapbot]

(No text was entered with this change)

Original issue reported on code.google.com by psiinon on 2010-12-18 10:19:53

• Labels added: Type-Enhancement
• Labels removed: Type-Defect

[zapbot]

(No text was entered with this change)

Original issue reported on code.google.com by psiinon on 2011-07-06 12:13:51

• Labels added: AutomatedTools

[zapbot]

Assigned to Colm, as he's going to be looking into the SQLi tests

Original issue reported on code.google.com by psiinon on 2012-08-09 08:43:29

[zapbot]

See this page for further explanation of how sqlmap does it
https://github.com/sqlmapproject/sqlmap/wiki/Scenario
I've had lots of what I think to be false positives as well with the 1=1 injextion

Original issue reported on code.google.com by bagnap on 2012-08-17 20:23:19

[zapbot]

I don't think the 1=1 stuff is actually the problem.   That logic looks well implemented
and sane.  The problem is that the base check is quite permissive, so it will pick
up lots of false positives by default.  I hope to be able to spend a little time working
on that this week.  It's never going to be as thorough as sqlmap (I love that tool),
but it should do the basics using a number of the types of SQL injection.

Original issue reported on code.google.com by colm.p.oflaherty on 2012-08-18 20:09:55

[zapbot]

Changes committed via new SQL Injection scanner, and stable (alpha 3, no reported issues)

Original issue reported on code.google.com by colm.p.oflaherty on 2012-09-21 23:55:29

[lock]

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.