This tool is designed to detect SQL injection vulnerabilities in web forms on a given website or URL. It scans the HTML forms present on the webpage, manipulates input fields, and analyzes server responses to determine potential vulnerabilities.
- Python 3.x
pip
package managervirtualenv
(optional but recommended)
-
Clone this repository to your local machine:
git clone https://github.com/code-1819/SQL-Injection-Detection-Tool.git
-
Navigate to the project directory:
cd Sql-Injection-Detection-Tool
-
(Optional) Set up a virtual environment:
python3 -m venv myenv source myenv/bin/activate # On Windows, use venv\Scripts\activate
-
To deactivate the virtual environment do this:
deactivate # On Windows, it's the same
-
Run the
scan.py
script:python scan.py
-
The tool will scan all forms present on the provided URL and display whether any vulnerabilities are detected.
python scan.py
Enter the URL to scan: <Enter the url which you want to scan>
Contributions are welcome! If you find any issues or have suggestions for improvements, feel free to open an issue or create a pull request.
This project is licensed under the MIT License - see the LICENSE file for details.