Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Already on GitHub? Sign in to your account

Make option --alert for custom alerting on SQLi found #293

Closed
stamparm opened this Issue Dec 11, 2012 · 4 comments

Comments

Projects
None yet
2 participants
Owner

stamparm commented Dec 11, 2012

...make the switch to run an external program and send it to the variable message, example:
--alert="/path/to/command --msg='my notify %message%' --mp3 '/path/to/sound_file.mp3'"
%message% - found injection/error/other (lime or red color messages) print sqlmap in console

xmpp notifications or email is simple to implement on bash and is a great function!

@stamparm stamparm was assigned Dec 11, 2012

@stamparm stamparm added a commit that referenced this issue Dec 11, 2012

@stamparm stamparm Implementation for an Issue #293 5c2451d
Owner

stamparm commented Dec 11, 2012

Write commands into --alert the same way you would type into your shell/console (e.g. --alert="xdg-open ~/Desktop/tada.wav")

@stamparm stamparm closed this Dec 11, 2012

mrunc commented Aug 4, 2014

Can't we throw some useful output info for the SQLI into the external script I'm using pushover bash script wrapper https://github.com/jnwatts/pushover.sh

Owner

stamparm commented Aug 4, 2014

@AhmedMG it would be hard to store a potentially large quantity of console output text for one person to use it via --alert. Whole console output is not an option. Maybe a content of log file or similar?

mrunc commented Aug 4, 2014

Yes, I mean just info for the discovered SQL Injection bug like
URI: http://localhost/index.php?page=1&par=2
Parameter: page
Type: inline query
Title: MySQL inline queries
Payload: page=(SELECT CONCAT(0x7171697471,(SELECT (CASE WHEN (7585=7585) THEN 1 ELSE 0 END)),0x7164666171))

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment