Spanner DBMS Support

[djhedges]

Have you considered adding support for Spanner? I might be interested in contributing if you can point me in the right direction.

[stamparm]

oh man, chances that you do a SATISFYING job that i'll just merge are approx. 0. just stating the obvious.

though, you could contribute for sure. if you could spin somewhere some DEMO instance with some demo vulnerable page (e.g. having ?id=1) where I could just run sqlmap against, I could/would do the support for it

[djhedges]

Alternatively I could write a Dockerfile based on the google/cloud-sdk:emulators image and run the cloud-spanner-emulator if you don't mind working with Docker. Which could be reused for testing in the future.

[stamparm]

"if you don't mind working with Docker." <- oh man, if you would know the shit i've seen till now :))))

i don't mind docker (compose). if you create a perfect DEMO setup with that Spanner + PHP or whatever to expose some shitty web app doing the SQLi (e.g. ?id=....), i would be grateful and I could work on it

[djhedges]

Haha, I bet we could exchange some stories.

Here's a super simple webapp that is vulnerable to SQL injection along with a couple of example curl commands. There is also a table "EngineSpecs" you can use to test for blind SQL injection. Let me know if you need anything.
https://github.com/djhedges/spanner_sqli_sqlmap