Skip to content

Latest commit

 

History

History
95 lines (73 loc) · 3.24 KB

README.md

File metadata and controls

95 lines (73 loc) · 3.24 KB

GoInjection

GoInjection Banner

🔧 Features | 🛡️ WAF Identification | 🔍 Fingerprinting | 💥 Injection Types | 🎨 GUI | ⚙️ SQL Query Builder

CI Status License Stars

🚀 Features

🛡️ WAF Identification

  • Detect Web Application Firewalls (WAFs) by analyzing HTTP headers and server responses.
  • Identifies potential WAFs based on changes in response status codes and content patterns.

🔍 Fingerprinting

  • Automatically detects the type of database by analyzing errors and executing advanced SQL injection techniques like UNION and stacked queries.
  • Custom tool-generated queries ensure precise fingerprinting.

⚙️ Interpreter

  • Automatically selects the correct SQL dialect (MySQL, PostgreSQL, MSSQL, etc.) based on the target DBMS.
  • Ensures the right syntax for effective SQL injections.

🧩 Resolver

  • In development, this feature helps identify table columns and the name of the current database for more advanced injections.
  • Essential for gaining deeper access to database structures.

💥 Injection Types

  • Supports Blind Injections (Boolean and Time-based), Error-based Injections, and UNION-based Injections.
  • Queries for these injection types are automatically created by the tool’s custom query generator.

🎨 GUI (Graphical User Interface)

  • Modern, user-friendly interface designed to simplify the process, making it accessible for both experienced pentesters and beginners.
  • Features intuitive controls for both new and experienced users.

⚙️ SQL Query Builder

  • Generates tailored SQL payloads for each DBMS, optimizing query structure, including custom openings, endings, and elements.
  • Fully automated query builder for each injection type.

📦 Installation

Prerequisites:

Ensure you have Python 3.x installed and the required dependencies:

pip install flask pymysql

Setup:

Clone the repository and install dependencies:

git clone https://github.com/Axion-Security/GoInjection.git
pip install flask pymysql

📝 Usage Example

Set up a basic SQL Injection Lab for testing:

USE sql_injection_lab;

CREATE TABLE IF NOT EXISTS products (
    id INT AUTO_INCREMENT PRIMARY KEY,
    name VARCHAR(100) NOT NULL,
    price DECIMAL(10, 2) NOT NULL
);

INSERT INTO products (name, price) VALUES
('Laptop', 799.99),
('Smartphone', 599.99),
('Tablet', 399.99),
('Headphones', 49.99),
('Smartwatch', 199.99);

🔑 License

This project is licensed under the License. See the LICENSE file for more details.