J.Z.Y

false positive in XSS

1

XSS library seems to be blocking anything that begins with "

Fix for MySQL, MSSQL whitespace evasion

2

Quick fix for http://www.websec.ca/blog/view/Bypassing_WAFs_with_SQLMap#sthash.uNJMATB3.dpuf%27= where it states: "MySQL allows characters 09, 0A-0D, A0 to be used as whitespaces while MSSQL allows a much wider range, from 01-1F.".

MSSQL non-ascii code in SQL

2

Hey Nick, From recent Sqlmap test, saw lots of Url-encoded payloads contains non-printable Ascii code(%05, %09...). If I convert those non-printable code all to space(%20), libinjection detects them correctly. Would...

False positives

2

Nick, any idea why string (in the quotes) "on=x" is flagged as XSS?

Integer overflow(hs.token_len)

1

Test case: libinjection_xss("

libinjection flag this following message, which is believed to be FP: [quote="Admin"]select \* from mysql.users where id=1; delete table mysql.users;[/quote]

https://libinjection.client9.com/diagnostics?id=1%2C%281%29&type=fingerprints https://libinjection.client9.com/diagnostics?id=Toronto%2C+ON%2C+Canada+-+%28YYZ%29&type=fingerprints https://libinjection.client9.com/diagnostics?id=1%2C1--&type=fingerprints https://libinjection.client9.com/diagnostics?id=%281%29-x&type=fingerprints https://libinjection.client9.com/diagnostics?id=1+function+%281%29+&type=fingerprints https://libinjection.client9.com/diagnostics?id=%27%2F1x-&type=fingerprints https://libinjection.client9.com/diagnostics?id=x|x||1&type=fingerprints https://libinjection.client9.com/diagnostics?id=%22%2F%22&type=fingerprints https://libinjection.client9.com/diagnostics?id=select+%27and%27&type=fingerprints https://libinjection.client9.com/diagnostics?id=x%2Fvoid%281%29&type=fingerprints https://libinjection.client9.com/diagnostics?id=select+x+from+y+where&type=fingerprints https://libinjection.client9.com/diagnostics?id=x%2F*&type=fingerprints https://libinjection.client9.com/diagnostics?id=1x%28%28%28&type=fingerprints https://libinjection.client9.com/diagnostics?id=1%29%2C%281&type=fingerprints https://libinjection.client9.com/diagnostics?id=x%2C+%40x%2C+%40x&type=fingerprints

add support to specify bucket list

2

Add support to specify an optional list for targeted buckets instead of including all buckets in the account.

Add argument default value support

1

Hi, Just tested a sample code below, found whenever a function specifies default argument value, then the value inference process would failed to perform analysis. Would you share your insight...

Hi, I've been exploring this tool, seeking for ability to infer value of function arguments such as value of "foo" in sample#1, as well as inferring values of implicit variables,...