rhinosecuritylabs / sleuthql Goto Github PK

[Desktop Entry]
Name=SleuthQL
GenericName=SleuthQL-cli
Exec=xterm -E /usr/bin/sleuthql
#/opt/SleuthQL/sleuthql.py @ SYM /usr/bin/sleuthql
StartupNotify=true
X-Enlightenment-WaitExit=false
Icon=/usr/share/icons/SleuthQL.PNG
Type=Application
Comment=Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap.
Path=/opt/sitebroker
Terminal=false
Exec=sudo -E 
Categories=Pentoo;X-Exploit;

def is_64(string):
    if len(string) % 4 == 0:
        try:
            base64.b64decode(string)
        except:
            return False
    return False;

[+] Loading data from x/sleuthql.xml...
[+] Found 575 requests from proxy history.
[+] Found 540 requests matching x.com hostname.
[+] Found 11 requests matching x.org hostname.
[+] Found 5 requests matching x.net hostname.


[+] Sorting...
Traceback (most recent call last):
  File "sleuthql.py", line 815, in <module>
    main()
  File "sleuthql.py", line 788, in main
    results = createResults(parsed_xml_results)
  File "sleuthql.py", line 704, in createResults
    sqlData = findSQLParams(params)
  File "sleuthql.py", line 628, in findSQLParams
    insertion_point, req = getSQLInsertionPoint(req, loc, key=key)
  File "sleuthql.py", line 526, in getSQLInsertionPoint
    if lines[i][-1] != "*":
IndexError: string index out of range

find . -name "*.txt" -exec sqlmap --batch -r {} \;