https://wiki.owasp.org/api.php?action=feedcontributions&feedformat=atom&user=Hcaldwell 2026-04-28T01:29:25Z User contributions MediaWiki 1.27.2 https://wiki.owasp.org/index.php?title=Category_talk:OWASP_SQLiX_Project&diff=48271 2008-12-10T15:33:29Z

<p>Hcaldwell: </p> <hr /> <div>Several Perl modules are required for SQLix to work, which aren't necessarily installed by default on your OS of choice.<br /> <br /> For my install (Fedora Core 6) here's the commands I used to setup<br /> <br /> perl -MCPAN -e shell<br /> <br /> cpan&gt;install WWW::CheckSite<br /> <br /> cpan&gt;install HTML::TreeBuilder<br /> <br /> cpan&gt;install Tie::CharArray<br /> <br /> cpan&gt;install Algorithm::Diff<br /> <br /> == Using URL files ==<br /> <br /> It isn't explained that the URL file e.g. crawler should be of the form: method URL queryparams &lt;lf&gt;<br /> <br /> For example<br /> <br /> GET http://www.example.com/hello/<br /> <br /> POST http://www.example.com/hello/myform.php qs1=val1&amp;qs2=val2<br /> <br /> == cedri.cc down ==<br /> <br /> cedri.cc appears to be having DNS issues. Is it possible to have this code mirrored on the sourceforge or something similar for times like these? :)<br /> <br /> == This is NOT open source / available for us to use? ==<br /> <br /> The source code of SQLiX.pl says<br /> Copyright 2006 Cedric COCHIN, All Rights Reserved.<br /> which would mean, especially in the absence of any GPL or other license, that we do not have the right to download much less use or modify this tool. So why bother listing it here? (Of course, you can't '''see''' the copyright message until after you already made a copy and unzipped it.)<br /> <br /> I can not get the -file option to work. I've created a text file with the following line<br /> GET http://test.accunetix.com<br /> <br /> But it does not return any results and the program ends much too quickly for any scanning to take place.<br /> <br /> If I run <br /> perl SQLiX.pl -crawl http://test.acunetix.com -exploit -all -v=2<br /> <br /> The program works as expected. Any ideas?</div>

Hcaldwell