diff --git a/BappDescription.html b/BappDescription.html index 3955497..74b0483 100644 --- a/BappDescription.html +++ b/BappDescription.html @@ -1,23 +1,22 @@ -
This extension integrates Burp Suite with SQLMap.
+SQLiPy integrates SQLMap using its API, enabling SQL injection scans directly within Burp Suite. The plugin connects to a running instance of the SQLMap API server to perform scans on requests.
-Requirements:
+SQLMap comes with a RESTful based server that will execute SQLMap scans. You can manually start the server -with:
-python sqlmapapi.py -s -H <ip> -p <port> --
Alternatively, you can use the SQLMap API tab to select the IP/Port on which to run, as well as the path to python and sqlmapapi.py on your system. -
-Once the SQLMap API is running, you just need to right-click in the 'Request' -sub tab of either the Target or Proxy main tabs and choose 'SQLiPy Scan' from -the context menu. +
python sqlmapapi.py -s -H <ip> -p <port>
+ sqlmapapi.py and Python installations.Note: Jython 2.7-2.7.2 is supported. DO NOT USE Jython 2.7.3, as it has a bug that will cause the extension to fail.
diff --git a/BappManifest.bmf b/BappManifest.bmf index f3a5851..97c8273 100644 --- a/BappManifest.bmf +++ b/BappManifest.bmf @@ -3,9 +3,11 @@ ExtensionType: 2 Name: SQLiPy Sqlmap Integration RepoName: sqli-py ScreenVersion: 0.8.6 -SerialVersion: 19 +SerialVersion: 24 MinPlatformVersion: 0 ProOnly: False Author: Josh Berry @ CodeWatch ShortDescription: Initiates SQLMap scans directly from within Burp. EntryPoint: SQLiPy.py +BuildCommand: +SupportedProducts: Pro, Community