diff --git a/BappDescription.html b/BappDescription.html index 3955497..74b0483 100644 --- a/BappDescription.html +++ b/BappDescription.html @@ -1,23 +1,22 @@ -

This extension integrates Burp Suite with SQLMap.

+

SQLiPy integrates SQLMap using its API, enabling SQL injection scans directly within Burp Suite. The plugin connects to a running instance of the SQLMap API server to perform scans on requests.

-

Requirements:

+

Features

-

SQLMap comes with a RESTful based server that will execute SQLMap scans. You can manually start the server -with:

-
 python sqlmapapi.py -s -H <ip> -p <port>
-
-

Alternatively, you can use the SQLMap API tab to select the IP/Port on which to run, as well as the path to python and sqlmapapi.py on your system. -

-

Once the SQLMap API is running, you just need to right-click in the 'Request' -sub tab of either the Target or Proxy main tabs and choose 'SQLiPy Scan' from -the context menu. +

Usage

+
    +
  1. Start the SQLMap API server manually with the following command:
    +
    python sqlmapapi.py -s -H <ip> -p <port>
    +
  2. +
  3. Alternatively, use the "SQLMap API" tab to select the IP/Port and provide the path to your sqlmapapi.py and Python installations.
  4. +
  5. Once the SQLMap API is active, right-click a request in the "Request" sub-tab of the "Target" or "Proxy" tabs and select "SQLiPy Scan".
  6. +
  7. The request details will populate the SQLMap Scanner tab. Click the "Start Scan" button to initiate the scan.
  8. +
  9. If the page is vulnerable to SQL injection, the plugin will poll the results and add them to the "Scanner Results" tab.
  10. +
-This will populate the SQLMap Scanner tab with information about that request. Clicking the 'Start Scan' button will execute a scan. - -If the page is vulnerable to SQL injection, then these will be added to the Scanner Results tab. -

+

Note: Jython 2.7-2.7.2 is supported. DO NOT USE Jython 2.7.3, as it has a bug that will cause the extension to fail.

diff --git a/BappManifest.bmf b/BappManifest.bmf index f3a5851..97c8273 100644 --- a/BappManifest.bmf +++ b/BappManifest.bmf @@ -3,9 +3,11 @@ ExtensionType: 2 Name: SQLiPy Sqlmap Integration RepoName: sqli-py ScreenVersion: 0.8.6 -SerialVersion: 19 +SerialVersion: 24 MinPlatformVersion: 0 ProOnly: False Author: Josh Berry @ CodeWatch ShortDescription: Initiates SQLMap scans directly from within Burp. EntryPoint: SQLiPy.py +BuildCommand: +SupportedProducts: Pro, Community