SQLiScan

An open-source SQL injection Scanner.

Developer

This tool was developed by Kumaraguru (www.kumaraguru.tech) (www.linkedin.com/in/kumaraguru7)

Disclaimer

This tool is developed only for educational purposes. The developer is not responsible if you use this tool for any illegal activities.

How It Works

The python script examines the header responses from the search results of google and based on the response , the tool classifies the vulnerable and non-vulnerable sites.

Features:

• Automatically find vulnerable sites using Google Dorks.
• Automatic filtering of irrelevant sites.
• Text file with vulnerable site list can be obtained.
• Automatic VPN Detection.
• Can be useful for mass defacement attacks.
• Useful for bug bounties.
• Easy to use.
• Light weight.
• User friendly.

Instructions to use:

Run these commands to use SQLi

> For Termux:

To use the SQLiScan type the following commands in Termux:

pkg install git
pkg install python
git clone https://github.com/hackyguru/SQLiScan
cd SQLiScan
pip install -r requirements.txt
python3 SQLiScan.py

> For Linux/Windows:

Notice:

To use the scanner type the following commands in Linux/Bash terminal:

git clone https://github.com/hackyguru/SQLiScan
cd SQLiScan
pip install -r requirements.txt
python3 SQLiScan.py

Whats next for SQLiScan

I will be probably adding a GUI for this project in the near future in SQLiScan 2.0. Please hang on until that :D I hope it works well in CLI.

CONTACT ME:

You can hit me up anytime 😀

Instagram : www.instagram.com/guru.317 Portfolio : www.kumaraguru.tech LinkedIn : www.linkedin.com/in/kumaraguru7