False Positive SQL

[sundarv85]

Hello

test string = "select count() as count FROM payment.stock where eventDate >= toDate(2023-04-18 11:36:00) AND eventDate <= toDate(2023-04-25 11:36:39) AND id = 63fc87ef9ed8e23d4dc9a74c AND wid = 66013ad78c09ae7e5d2f0f01 AND eventDateTime >= 2023-04-18 11:36:00 AND eventDateTime <= 2023-04-25 11:36:39 FORMAT JSON&session_timeout=60&output_format_json_quote_64bit_integers=0&enable_http_compression=0"

→ go run libsqli.go 
=========result==========:  true
=======fingerprint=======:  Ef()k

Any idea why this is reported as true

[fzipi]

Sorry, what is your question here?

[jptosso]

this is a SQL query, so technically it's an sql injection

[fzipi]

this is a SQL query, so technically it's an sql injection

100%. Hence my question. 😄

[fzipi]

ping @sundarv85