def run(self):
""" run """
info('Checking Blind SQL Injection...')
URL = None
DATA = None
CONTENT = None
PAYLOAD = None
# first request
if self.data:
req = self.Send(url=self.url, method=self.post, data=self.data)
CONTENT = req.content
else:
req = self.Send(url=self.url, method=self.get)
CONTENT = req.content
# second request with payload
for payload in bsql():
# post method
if self.data:
# data add payload
addPayload = padd(self.url, payload, self.data)
for data in addPayload.run():
# send request
req = self.Send(url=self.url, method=self.post, data=data)
# compare 2 request (content) with 1 request (content)
if len(req.content) != len(CONTENT):
URL = req.url
DATA = data
PAYLOAD = payload
break
# get method
else:
# url and payload
urls = padd(self.url, payload, None)
for url in urls.run():
# send request
req = self.Send(url=url, method=self.get)
# compare 2 request (content) with 1 request (content)
if len(req.content) != len(CONTENT):
URL = url
PAYLOAD = payload
break
# break if URL and PAYLOAD not empty
if URL and PAYLOAD:
# print
if DATA != None:
plus("A potential \"Blind SQL Injection\" was found at:")
more("URL: {}".format(URL))
more("POST DATA: {}".format(DATA))
more("PAYLOAD: {}".format(PAYLOAD))
return True, PAYLOAD
elif DATA == None:
plus("A potential \"Blind SQL Injection\" was found at:")
more("URL: {}".format(URL))
more("PAYLOAD: {}".format(PAYLOAD))
return True, PAYLOAD
# break
break
def run(self):
""" run """
info('Checking Blind SQL Injection...')
URL = None
DATA = None
CONTENT = None
PAYLOAD = None
# first request
if self.data:
req = self.Send(url=self.url, method=self.post, data=self.data)
CONTENT = req.content
else:
req = self.Send(url=self.url, method=self.get)
CONTENT = req.content
# second request with payload
for payload in bsql():
# post method
if self.data:
# data add payload
addPayload = padd(self.url, payload, self.data)
for data in addPayload.run():
# send request
req = self.Send(url=self.url, method=self.post, data=data)
# compare 2 request (content) with 1 request (content)
if len(req.content) != len(CONTENT):
URL = req.url
DATA = data
PAYLOAD = payload
break
# get method
else:
# url and payload
urls = padd(self.url, payload, None)
for url in urls.run():
# send request
req = self.Send(url=url, method=self.get)
# compare 2 request (content) with 1 request (content)
if len(req.content) != len(CONTENT):
URL = url
PAYLOAD = payload
break
# break if URL and PAYLOAD not empty
if URL and PAYLOAD:
return True