fix sql injection panic

yhy0 · Mar 26, 2024 · d17dbd8 · d17dbd8
1 parent 87d77d6
commit d17dbd8
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/scan/PerFile/sql/heuristic.go b/scan/PerFile/sql/heuristic.go
@@ -95,6 +95,11 @@ func (sql *Sqlmap) HeuristicCheckSqlInjection() {
                     res, err = sql.Client.Request(sql.Url, sql.Method, payload, sql.Headers)
                 }
 
+                if err != nil {
+                    logging.Logger.Errorln(sql.Url, "宽字节注入出现错误", err)
+                    continue
+                }
+
                 time.Sleep(time.Millisecond * 500)
                 sql.DBMS = checkDBMSError(sql.Url, p.Name, payload, res)
                 if sql.DBMS != "" {