All Projects → damit5 → sqli_scan

damit5 / sqli_scan

Licence: other
SQL注入扫描器

Programming Languages

python
139335 projects - #7 most used programming language

Projects that are alternatives of or similar to sqli scan

Cracker-Tool
All in One CRACKER911181's Tool. This Tool For Hacking and Pentesting. 🎭
Stars: ✭ 181 (+1031.25%)
Mutual labels:  sqli, sqlinjection
SQLi-Query-Tampering
SQLi Query Tampering extends and adds custom Payload Generator/Processor in Burp Suite's Intruder. This extension gives you the flexibility of manual testing with many powerful evasion techniques.
Stars: ✭ 123 (+668.75%)
Mutual labels:  sqli, sqlinjection
Reconftw
reconFTW is a tool designed to perform automated recon on a target domain by running the best set of tools to perform scanning and finding out vulnerabilities
Stars: ✭ 974 (+5987.5%)
Mutual labels:  sqli
web-cheats
Exploit web-vulnerabilities
Stars: ✭ 23 (+43.75%)
Mutual labels:  sqli
Xrcross
XRCross is a Reconstruction, Scanner, and a tool for penetration / BugBounty testing. This tool was built to test (XSS|SSRF|CORS|SSTI|IDOR|RCE|LFI|SQLI) vulnerabilities
Stars: ✭ 175 (+993.75%)
Mutual labels:  sqli
Xwaf
xWAF 3.0 - Free Web Application Firewall, Open-Source.
Stars: ✭ 48 (+200%)
Mutual labels:  sqli
Inject Some Sql
Have fun injecting SQL into a Ruby on Rails application!
Stars: ✭ 211 (+1218.75%)
Mutual labels:  sqli
V3n0m Scanner
Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns
Stars: ✭ 847 (+5193.75%)
Mutual labels:  sqli
Offensive Dockerfiles
Offensive tools as Dockerfiles. Lightweight & Ready to go
Stars: ✭ 150 (+837.5%)
Mutual labels:  sqli
Phpvuln
Audit tool to find common vulnerabilities in PHP source code
Stars: ✭ 146 (+812.5%)
Mutual labels:  sqli
Cazador unr
Hacking tools
Stars: ✭ 95 (+493.75%)
Mutual labels:  sqli
Klik Socialmediawebsite
Complete PHP-based Login/Registration system, Profile system, Chat room, Forum system and Blog/Polls/Event Management System.
Stars: ✭ 129 (+706.25%)
Mutual labels:  sqli
Payloads
Git All the Payloads! A collection of web attack payloads.
Stars: ✭ 2,862 (+17787.5%)
Mutual labels:  sqli
Java Sec Code
Java web common vulnerabilities and security code which is base on springboot and spring security
Stars: ✭ 1,033 (+6356.25%)
Mutual labels:  sqli
Pinaak
A vulnerability fuzzing tool written in bash, it contains the most commonly used tools to perform vulnerability scan
Stars: ✭ 69 (+331.25%)
Mutual labels:  sqlinjection
Blackwidow
A Python based web application scanner to gather OSINT and fuzz for OWASP vulnerabilities on a target website.
Stars: ✭ 887 (+5443.75%)
Mutual labels:  sqli
Berserker
A list of useful payloads for Web Application Security and Pentest/CTF
Stars: ✭ 212 (+1225%)
Mutual labels:  sqli
SecExample
JAVA 漏洞靶场 (Vulnerability Environment For Java)
Stars: ✭ 228 (+1325%)
Mutual labels:  sqlinjection
SQL-Injection-cheat-sheet
Cheatsheet to exploit and learn SQL Injection.
Stars: ✭ 69 (+331.25%)
Mutual labels:  sqlinjection
sqli
A Laravel Artisan SQL Interactive Interface
Stars: ✭ 60 (+275%)
Mutual labels:  sqli

SQLI SCAN

Sqli_Scan , 批量sql注入扫描器

首先从浏览器(Bing、Google、Yahoo)上根据关键词搜索符合条件的链接,再根据链接进行自动判断是否可能存在注入

依赖

  • python3
    • requests
    • bs4

下载

git clone https://github.com/damit5/sqli_scan.git

cd sqli_scan

pip install -r requirements.txt

基本使用


    ===============================================================================

    _________________   .____    .___    _________
    /   _____/\_____  \ |    |   |   |  /   _____/ ____ _____    ____
    \_____  \  /  / \  \|    |   |   |  \_____  \_/ ___\\__  \  /    \
    /        \/   \_/.  \    |___|   |  /        \  \___ / __ \|   |  \
   /_______  /\_____\ \_/_______ \___| /_______  /\___  >____  /___|  /
           \/        \__>       \/             \/     \/     \/     \/
                                                                        d4m1ts
    ===============================================================================

usage: sqli_scan.py [-h] [-k inurl:example] [-p 5] [-e search engine]

optional arguments:
  -h, --help        show this help message and exit
  -k inurl:example  sql injection keyword
  -p 5              page of websites to look for in search engine
  -e search engine  the search engine you want to use. bing,yahoo,google

执行 python sqli_scan.py -k inurl:php?id= -p 3 -e bing

image

演示视频

Demo

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].