An open-source SQL injection Scanner.
This tool was developed by Kumaraguru (www.kumaraguru.tech) (www.linkedin.com/in/kumaraguru7)
This tool is developed only for educational purposes. The developer is not responsible if you use this tool for any illegal activities.
The python script examines the header responses from the search results of google and based on the response , the tool classifies the vulnerable and non-vulnerable sites.
- Automatically find vulnerable sites using Google Dorks.
- Automatic filtering of irrelevant sites.
- Text file with vulnerable site list can be obtained.
- Automatic VPN Detection.
- Can be useful for mass defacement attacks.
- Useful for bug bounties.
- Easy to use.
- Light weight.
- User friendly.
Run these commands to use SQLi
To use the SQLiScan type the following commands in Termux:
pkg install git
pkg install python
git clone https://github.com/hackyguru/SQLiScan
cd SQLiScan
pip install -r requirements.txt
python3 SQLiScan.py
Notice:
To use the scanner type the following commands in Linux/Bash terminal:
git clone https://github.com/hackyguru/SQLiScan
cd SQLiScan
pip install -r requirements.txt
python3 SQLiScan.py
I will be probably adding a GUI for this project in the near future in SQLiScan 2.0. Please hang on until that :D I hope it works well in CLI.
You can hit me up anytime 😀
Instagram : www.instagram.com/guru.317 Portfolio : www.kumaraguru.tech LinkedIn : www.linkedin.com/in/kumaraguru7