SQLiSpotter is a Bash script designed to automate the testing of URLs for error-based SQL injection vulnerabilities. It appends some common SQL injection payloads to each URL and checks the responses for common error patterns indicative of a SQL vulnerability. I have included common error resposnes of all possible DBMSes.
Clone the repository:
git clone https://github.com/iamthefrogy/SQLiProbe.git
cd SQLiProbe
chmod +x sqli_probe.sh
./sqli_probe.sh urls.txt
curl
Python 3 (for URL encoding)