adding new switch '--smart' by request

stamparm · stamparm · commit 0d6afca7db9e · 2011-07-10T15:16:58.000Z
diff --git a/lib/controller/controller.py b/lib/controller/controller.py
@@ -440,9 +440,11 @@ def start():
                         if testSqlInj:
                             check = heuristicCheckSqlInjection(place, parameter)
 
-                            if not check and conf.realTest and \
-                               not simpletonCheckSqlInjection(place, parameter, value):
-                                continue
+                            if not check:
+                                if conf.smart or conf.realTest and not simpletonCheckSqlInjection(place, parameter, value):
+                                    infoMsg = "skipping %s parameter '%s'" % (place, parameter)
+                                    logger.info(infoMsg)
+                                    continue
 
                             infoMsg = "testing sql injection on %s " % place
                             infoMsg += "parameter '%s'" % parameter
diff --git a/lib/core/optiondict.py b/lib/core/optiondict.py
@@ -175,6 +175,7 @@
                                "googlePage":        "integer",
                                "mobile":            "boolean",
                                "pageRank":          "boolean",
+                               "smart":             "boolean",
                                "wizard":            "boolean",
                                "verbose":           "integer"
                              },
diff --git a/lib/parse/cmdline.py b/lib/parse/cmdline.py
@@ -549,6 +549,10 @@ def cmdLineParser():
                                   action="store_true",
                                   help="Display page rank (PR) for Google dork results")
 
+        miscellaneous.add_option("--smart", dest="smart",
+                                  action="store_true",
+                                  help="Conduct through tests only if positive heuristic(s)")
+
         miscellaneous.add_option("--wizard", dest="wizard",
                                   action="store_true",
                                   help="Simple wizard interface for beginner users")
diff --git a/sqlmap.conf b/sqlmap.conf
@@ -584,6 +584,10 @@ mobile = False
 # Valid: True or False
 pageRank = False
 
+# Conduct through tests only if positive heuristic(s).
+# Valid: True or False
+smart = False
+
 # Simple wizard interface for beginner users.
 # Valid: True or False
 wizard = False
