Re: [sqlmap-users] --check-payload
Brought to you by:
inquisb
From: Miroslav S. <mir...@gm...> - 2010-10-25 15:54:32
|
...also, if you have any great idea, but need a help with implementation, give us a hint and we'll try to help you as much as we can. kind regards. On Mon, Oct 25, 2010 at 5:53 PM, Miroslav Stampar <mir...@gm...> wrote: > Hi. > > We've implemented IDS detection testing with switch '--check-payload'. > It uses PHPIDS set of rules for detection purposes and only warns a > user (not changing anything in the program's workflow). > > Now, as you all know there is also --tamper switch, and couple of > tampering modules in "./tamper" directory. > > Right now we are calling talented security experts/programmers/hackers > who will implement tamper script(s) passing --check-payload. Use any > method you like and consult other tampering scripts for sample of > implementation. If you succeed (no need to be DBMS independent) you'll > get a HUGE thanks in doc/THANKS and will help other users as well. > > Kind regards. > > -- > Miroslav Stampar > > E-mail / Jabber: miroslav.stampar (at) gmail.com > Mobile: +385921010204 (HR 0921010204) > PGP Key ID: 0xB5397B1B > Location: Zagreb, Croatia > -- Miroslav Stampar E-mail / Jabber: miroslav.stampar (at) gmail.com Mobile: +385921010204 (HR 0921010204) PGP Key ID: 0xB5397B1B Location: Zagreb, Croatia |