Sqli-Vuln-Params.yaml

id: Sqli-Vuln-Params

info:
  name: detect possible sqli parameters 
  author: super403
  severity: info
  tags: sqli,top10

file:
  - extensions:
      - all

    extractors:
      - type: regex
        regex:
          - "(?i)(\\?|\\&|\\/)(((([a-z0-9-_])+(-|_)+))|(-|_))?(id|select|report|client|role|update|query|username|user|name|sort|where|params|process|row|view|table|from|sel|results|sleep|fetch|order|keyword|column|field|delete|string|number|filter|cat)((=)|(\\/[0-9]+\\/?))"