Thursday, 2 May 2019
0 comments

SQLi Scanner- To Detect SQL Injection Vulnerability


SQLi Scanner- To Detect SQL Injection Vulnerability


ScanQLi is a simple SQL injection scanner with some additional features. 


This tool can't exploit the SQLi, it just detect them. Tested on Debian 9

Features


  • Classic
  • Blind
  • Time based
  • GBK (soon)
  • Recursive scan (follow all hrefs of the scanned web site)
  • Cookies integration
  • Adjustable wait delay between requests
  • Ignore given URLs

Prerequisites

1. Install git tool

apt update
apt install git

2. Clone the repo.

git clone https://github.com/bambish/ScanQLi

3. Install python required libs

apt install python-pip
cd ScanQLi
pip install -r requirements.txt

For python3 please install python3-pip and use pip3

Usage

./scanqli -u [URL] [OPTIONS]

Examples

Simple url scan with output file

python scanqli.py -u 'http://127.0.0.1/test/?p=news' -o output.log

Recursive URL scanning with cookies

python scanqli.py -u 'https://127.0.0.1/test/' -r -c '{"PHPSESSID":"4bn7uro8qq62ol4o667bejbqo3" , "Session":"Mzo6YWMwZGRmOWU2

Download SQLi Scanner

0 comments:

Post a Comment

Note: only a member of this blog may post a comment.

 
Toggle Footer
Top