Original Post: Next Generation Nuclei: Detecting SQLi with Logic | by Serhat ÇİÇEK | May, 2024
This article, authored by Serhat ÇİÇEK, introduces a new Nuclei plugin to detect Boolean-based SQL Injection (SQLi) vulnerabilities in web applications. Nuclei is an open-source, customizable security scanning tool that uses templates to detect various vulnerabilities through HTTP requests and response analysis.
The article explains Boolean-based SQLi, a technique involving manipulating SQL queries to elicit true or false responses, thereby revealing database structure information. With the release of Nuclei version 3.2, fuzzing support has been added, allowing more sophisticated testing analogous to other fuzzing tools.
A Proof of Concept (POC) is provided, demonstrating how the Nuclei template operates by targeting a specific URL with an SQLi vulnerability and using logical expressions to expose vulnerabilities. The POC underscores that the main purpose is to showcase how Nuclei templates can perform logical operations rather than fully simulating a Boolean-based scenario.
The article concludes by highlighting Nuclei’s enhanced versatility following the addition of the fuzzing feature and how it introduces a novel perspective to automated Dynamic Application Security Testing (DAST) checks. Custom templates can be developed for tailored scenarios, enhancing automated DAST tool development. The author thanks the Project Discovery team for this technology. References are provided for further reading.
Go here to read the Original Post