scan_urls_batch
Batch scan URLs for SQL injection vulnerabilities with configurable injection types, database types, and quick mode to prevent timeouts. Supports concurrency and WAF bypass.
Instructions
Scan multiple URLs for SQL injection vulnerabilities in batch. Use quick_mode=True (default) for faster scans that won't timeout.
Args: urls: Newline-separated list of URLs to scan method: HTTP method - GET or POST injection_types: Comma-separated injection types (default: error_based only in quick_mode) database_types: Comma-separated database types (default: generic,mysql in quick_mode) headers: Custom headers as key:value pairs separated by | cookies: Cookies as key=value pairs separated by ; bearer_token: Bearer token for Authorization header proxy_url: Proxy URL for Burp Suite or other proxies verify_ssl: Verify SSL certificates waf_bypass: WAF bypass technique concurrency: Number of concurrent scans (1-10, default 3) timeout: Request timeout in seconds per URL (default 5) quick_mode: Use quick scan with fewer payloads (default True, recommended for many URLs) max_urls_per_batch: Max URLs to scan in one call (default 10, use continue_batch for more)
Returns: Batch scan results. If more URLs remain, use continue_batch with the batch_id.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| urls | Yes | ||
| method | No | GET | |
| injection_types | No | ||
| database_types | No | ||
| headers | No | ||
| cookies | No | ||
| bearer_token | No | ||
| proxy_url | No | ||
| verify_ssl | No | ||
| waf_bypass | No | none | |
| concurrency | No | ||
| timeout | No | ||
| quick_mode | No | ||
| max_urls_per_batch | No |