Ejemplo n.º 1
0
        public static async Task <bool> DoInjection(string baseUrl, List <string> paths)
        {
            Injection.baseUrl = baseUrl;
            Injection.paths   = paths;

            Dotter("Testing injection via query parameter");
            Console.WriteLine("\n");
            bool canQueryParameterInjection = await InjectionViaQueryParameter.Test(false);

            //Extendable by adding other SQLi points.

            if (canQueryParameterInjection == false)
            {
                return(false);
            }

            dbms = await GetDbms(baseUrl, (await InjectionViaQueryParameter.GetInjectablePaths())[0]);

            //If other SQLi points are injectable, test them by sending one of its paths.
            Color("Database information\n" + dbms.ToString(), ConsoleColor.Blue);
            Console.WriteLine();
            Line();

            Console.WriteLine("Performing injection via query parameter:");
            Console.WriteLine();
            bool isQueryParameterInjectionSuccessful = await InjectionViaQueryParameter.Test();

            return(true);
        }