sqlmapproject/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-10-12 02:22:55 +00:00
Code Issues Packages Projects Releases Wiki Activity

Adding support for --hql

Browse Source
This commit is contained in:
Miroslav Štampar
2026-07-10 10:38:20 +02:00
parent 346c9d9f03
commit d0f16b284d
10 changed files with 901 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
lib/controller/controller.py
+7 -2
View File
@@ -529,8 +529,8 @@ def start():
checkWaf()
if any((conf.graphql, conf.nosql, conf.ldap, conf.xpath, conf.ssti, conf.xxe)) and (conf.reportJson or conf.resultsFile):
singleTimeWarnMessage("'--report-json'/'--results-file' do not (yet) capture non-SQL technique (--graphql/--nosql/--ldap/--xpath/--ssti/--xxe) findings; these are reported on the console only")
if any((conf.graphql, conf.nosql, conf.ldap, conf.xpath, conf.ssti, conf.xxe, conf.hql)) and (conf.reportJson or conf.resultsFile):
singleTimeWarnMessage("'--report-json'/'--results-file' do not (yet) capture non-SQL technique (--graphql/--nosql/--ldap/--xpath/--ssti/--xxe/--hql) findings; these are reported on the console only")
if conf.graphql:
from lib.techniques.graphql.inject import graphqlScan
@@ -562,6 +562,11 @@ def start():
xxeScan()
continue
if conf.hql:
from lib.techniques.hql.inject import hqlScan
hqlScan()
continue
if conf.nullConnection:
checkNullConnection()