/SQL_injections

This project contains Python scripts to detect and exploit SQL injection vulnerabilities in web apps. The scanner injects quotes to identify flaws. The exploit tool extracts data using payloads. For educational purposes only. Do not use illegally. Contributions welcome.

Primary LanguagePythonMIT LicenseMIT

SQL Injection Scanner and Exploit 🛡️

Files

SQLi_scanner.py - Detects if a website is vulnerable to SQL injection by inserting single quotes in form inputs and analyzing the response. 🔍 SQL_injection_tool.py - Exploits detected SQL injection vulnerabilities by injecting payloads to extract data from the database. 🗝️

A powerful SQL injection scanner and exploit tool for testing web applications' security. 🔍

Features 🚀

  • 🎯 Automatic SQL injection detection
  • 🌐 Support for various web application frameworks
  • 📋 Detailed scan reports
  • 💥 Exploit module for vulnerable applications
  • 📦 Easy-to-use command-line interface

Installation 📥

  1. Clone the repository:
git clone https://github.com/yourusername/your-repo.git
  1. Navigate to the project directory:
cd your-repo
  1. Install the required dependencies:
pip install -r requirements.txt

Usage 🧰

Scanning

python scan.py -u <target_url>

Exploiting

python exploit.py -u <target_url> -p <payload_file>

For more detailed usage instructions, check out our Wiki.

Contributing 🤝

Feel free to submit pull requests with any improvements to the scripts. Some ideas:

  • 💣 Additional payloads and exploits
  • ✅ Better vulnerability verification
  • 🛡️ Input validation and error handling
  • ⚡ Multithreading for faster scanning
  • 💾 Output to file/database rather than printing

License 📜

This project is licensed under the MIT License.

Acknowledgements 🙌

We would like to thank all the contributors and users who have helped improve this project!

Contact Us 📧

If you have any questions or need assistance, feel free to reach out to us at itsdg19@gmail.com(mailto:itsdg19@gmail.com).

Happy hacking! 💻🌐