Category talk:OWASP SQLiX Project - Revision history

Kingthorin: /* If you're porting anyway why not add to an existing project? */ new section

2014-03-19T13:36:47Z

‎If you're porting anyway why not add to an existing project?: new section

Hcaldwell at 15:33, 10 December 2008

2008-12-10T15:33:29Z

Weaver39 at 21:13, 12 September 2008

2008-09-12T21:13:28Z

MarkPiper: New section: cedri.cc down

2008-05-24T09:36:41Z

New section: cedri.cc down

Mlyons: /* Using URL files */

2007-10-31T13:27:28Z

‎Using URL files

Mlyons: /* Using URL files */

2007-10-31T13:27:12Z

‎Using URL files

Mlyons: /* Using URL files */

2007-10-30T13:59:14Z

‎Using URL files

Mlyons: New section: Using URL files

2007-10-30T13:58:49Z

New section: Using URL files

Raesene: New page: Several Perl modules are required for SQLix to work, which aren't necessarily installed by default on your OS of choice. For my install (Fedora Core 6) here's the commands I used to setup...

2007-05-25T18:52:20Z

New page: Several Perl modules are required for SQLix to work, which aren't necessarily installed by default on your OS of choice. For my install (Fedora Core 6) here's the commands I used to setup...

New page

Several Perl modules are required for SQLix to work, which aren't necessarily installed by default on your OS of choice.

For my install (Fedora Core 6) here's the commands I used to setup

perl -MCPAN -e shell

cpan>install WWW::CheckSite

cpan>install HTML::TreeBuilder

cpan>install Tie::CharArray

cpan>install Algorithm::Diff

← Older revision		Revision as of 13:36, 19 March 2014
Line 42:		Line 42:

	The program works as expected. Any ideas?		The program works as expected. Any ideas?
		+
		+	== If you're porting anyway why not add to an existing project? ==
		+
		+	If you're working on porting perl to python why not integrate this functionality into OWASP ZAP?
		+
		+	https://groups.google.com/forum/#!topic/zaproxy-develop/AIUd6MVS1PU
		+
		+	Either as an extension or base addition to the project. I know it would mean java development instead of python but it would get this out to a wider community and improve things for everyone. [[User:Kingthorin\|Kingthorin]] ([[User talk:Kingthorin\|talk]]) 08:36, 19 March 2014 (CDT)

← Older revision		Revision as of 15:33, 10 December 2008
Line 32:		Line 32:
	Copyright 2006 Cedric COCHIN, All Rights Reserved.		Copyright 2006 Cedric COCHIN, All Rights Reserved.
	which would mean, especially in the absence of any GPL or other license, that we do not have the right to download much less use or modify this tool. So why bother listing it here? (Of course, you can't '''see''' the copyright message until after you already made a copy and unzipped it.)		which would mean, especially in the absence of any GPL or other license, that we do not have the right to download much less use or modify this tool. So why bother listing it here? (Of course, you can't '''see''' the copyright message until after you already made a copy and unzipped it.)
		+
		+	I can not get the -file option to work. I've created a text file with the following line
		+	GET http://test.accunetix.com
		+
		+	But it does not return any results and the program ends much too quickly for any scanning to take place.
		+
		+	If I run
		+	perl SQLiX.pl -crawl http://test.acunetix.com -exploit -all -v=2
		+
		+	The program works as expected. Any ideas?

← Older revision		Revision as of 21:13, 12 September 2008
Line 26:		Line 26:

	cedri.cc appears to be having DNS issues. Is it possible to have this code mirrored on the sourceforge or something similar for times like these? :)		cedri.cc appears to be having DNS issues. Is it possible to have this code mirrored on the sourceforge or something similar for times like these? :)
		+
		+	== This is NOT open source / available for us to use? ==
		+
		+	The source code of SQLiX.pl says
		+	Copyright 2006 Cedric COCHIN, All Rights Reserved.
		+	which would mean, especially in the absence of any GPL or other license, that we do not have the right to download much less use or modify this tool. So why bother listing it here? (Of course, you can't '''see''' the copyright message until after you already made a copy and unzipped it.)

← Older revision		Revision as of 09:36, 24 May 2008
Line 22:		Line 22:

	POST http://www.example.com/hello/myform.php qs1=val1&qs2=val2		POST http://www.example.com/hello/myform.php qs1=val1&qs2=val2
		+
		+	== cedri.cc down ==
		+
		+	cedri.cc appears to be having DNS issues. Is it possible to have this code mirrored on the sourceforge or something similar for times like these? :)

@@ Line 15: / Line 15: @@
 == Using URL files ==
-It isn't explained that the URL file e.g. crawler should be of the form: method URL <lf>
+It isn't explained that the URL file e.g. crawler should be of the form: method URL queryparams <lf>
 For example

← Older revision		Revision as of 13:27, 31 October 2007
Line 21:		Line 21:
	GET http://www.example.com/hello/		GET http://www.example.com/hello/

−	POST http://www.example.com/hello/myform.php	+	POST http://www.example.com/hello/myform.php qs1=val1&qs2=val2

← Older revision		Revision as of 13:59, 30 October 2007
Line 20:		Line 20:

	GET http://www.example.com/hello/		GET http://www.example.com/hello/
		+
	POST http://www.example.com/hello/myform.php		POST http://www.example.com/hello/myform.php

← Older revision		Revision as of 13:58, 30 October 2007
Line 12:		Line 12:

	cpan>install Algorithm::Diff		cpan>install Algorithm::Diff
		+
		+	== Using URL files ==
		+
		+	It isn't explained that the URL file e.g. crawler should be of the form: method URL <lf>
		+
		+	For example
		+
		+	GET http://www.example.com/hello/
		+	POST http://www.example.com/hello/myform.php