ron190

Results 28 comments of ron190

### 1. [...] trying this payload OR and AND in blind injection [...] `' ${boolean.mode} 3*2*1=6 AND ${test}` First let's take a high level example and assume that the server...

- ### [...] when testing manually they are injectable but not in jsql [...] About blind payload which one will be the most efficient You can define the list of...

Currently experimenting based on the discussion to add colors to the logs, making easier the debugging of Truthy/Falsy checks and of Boolean queries. - Visual feedback in logs when a...

Yes, because the tool tests automatically all the strategies that exist first, then it enables the strategies that are confirmed. Currently what is considered is that the user shouldn't waste...

> But! i need to reduce requests. You can reduce traffic using the option `Limit processing threads`, also you may enable some options in tab `Injection` if only the strategy...

Google trad seems legit, I'll see to prepare i18n for the panel About.

1. > Although I entered the referer information, the scanner does not appear The `http://url` syntax of the referer is messing with the `key:value` for field `Header`, you may urlencode...

I prefer to manually validate OOB fully on local, in order next to integrate related tests to CI pipeline on Docker. Still I haven't managed to make OOB work properly...

Usually login pages are not meant to extract data by injection but only to be forced by always true SQL conditions like 'or 1=1'. Instead you should use jSQL on...

I guess jsql lacks boolean OR injection for login pages, I'll implement it for the next release.