{"id":27884291,"url":"https://github.com/lpcodes/sql-injection-testing-app","last_synced_at":"2025-05-05T06:35:53.971Z","repository":{"id":275259963,"uuid":"859956969","full_name":"LpCodes/SQL-Injection-Testing-app","owner":"LpCodes","description":"This app tests a given URL for SQL injection vulnerabilities. It uses a list of common SQL injection payloads to inject into the URL and checks if the response contains any SQL errors or vulnerabilities.","archived":false,"fork":false,"pushed_at":"2025-02-01T07:32:30.000Z","size":5,"stargazers_count":1,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-02-01T08:25:28.418Z","etag":null,"topics":["ethical-hacking","ethical-hacking-tools","pentesting","sql-injection"],"latest_commit_sha":null,"homepage":"https://lpcodes.github.io/SQL-Injection-Testing-app/","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/LpCodes.png","metadata":{"files":{"readme":"readme.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-09-19T15:08:08.000Z","updated_at":"2025-02-01T07:32:33.000Z","dependencies_parsed_at":"2025-02-01T08:36:06.165Z","dependency_job_id":null,"html_url":"https://github.com/LpCodes/SQL-Injection-Testing-app","commit_stats":null,"previous_names":["lpcodes/sql-injection-testing-app"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/LpCodes%2FSQL-Injection-Testing-app","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/LpCodes%2FSQL-Injection-Testing-app/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/LpCodes%2FSQL-Injection-Testing-app/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/LpCodes%2FSQL-Injection-Testing-app/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/LpCodes","download_url":"https://codeload.github.com/LpCodes/SQL-Injection-Testing-app/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":252454571,"owners_count":21750492,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["ethical-hacking","ethical-hacking-tools","pentesting","sql-injection"],"created_at":"2025-05-05T06:35:53.363Z","updated_at":"2025-05-05T06:35:53.959Z","avatar_url":"https://github.com/LpCodes.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"# ⚠️ SQL Injection Testing Tool\r\n\r\nThis tool is designed to test a given URL for SQL injection vulnerabilities. It uses a list of common SQL injection payloads to inject into the URL and checks if the response contains any SQL errors or vulnerabilities. The tool is intended for educational purposes and ethical security testing.\r\n\r\n## 📝 Disclaimer\r\n\r\nThis tool is intended for **educational purposes and ethical security testing only**. Do not use it to attack websites without proper authorization. Unauthorized testing may violate local laws and could result in legal consequences. The author assumes no responsibility for any misuse or damage caused by this tool. Use responsibly and with proper authorization.\r\n\r\n---\r\n\r\n## 🚀 Features\r\n\r\n- Tests for SQL injection vulnerabilities using a comprehensive list of payloads.\r\n- Detects common SQL error messages in responses.\r\n- Supports customizable timeout and delay between requests.\r\n- Verbose mode for detailed debugging output.\r\n- Randomized User-Agent headers to avoid detection.\r\n- Interactive mode to pause and continue testing.\r\n\r\n---\r\n\r\n## 🛠️ Installation\r\n\r\n1. Ensure you have Python 3.x installed on your system.\r\n2. Install the required dependencies by running the following command:\r\n   ```bash\r\n   pip install requests\r\n   ```\r\n\r\n---\r\n\r\n## 🖥️ Usage\r\n\r\nRun the tool by passing the target URL as an argument. Additional options are available for customization.\r\n\r\n### Basic Usage\r\n```bash\r\npython app.py \"http://example.com/vulnerable_page.php?id=\"\r\n```\r\n\r\n### Advanced Usage\r\n```bash\r\npython app.py \"http://example.com/vulnerable_page.php?id=\" --timeout 10 --delay 1 --verbose\r\n```\r\n\r\n### Command-Line Options\r\n| Option          | Description                                                                 |\r\n|-----------------|-----------------------------------------------------------------------------|\r\n| `url`           | The target URL to test for SQL injection vulnerabilities.                   |\r\n| `-t`, `--timeout`| Request timeout in seconds (default: 5).                                   |\r\n| `-d`, `--delay`  | Delay between requests in seconds (default: 0.5).                          |\r\n| `-v`, `--verbose`| Enable verbose output for detailed debugging.                              |\r\n\r\n---\r\n\r\n## 💻 Example\r\n\r\n### Testing a URL\r\n```bash\r\npython app.py \"http://example.com/vulnerable_page.php?id=\"\r\n```\r\n\r\n### Output\r\n```\r\n2023-10-15 12:34:56,789 - INFO - Testing payload: ' OR 1=1--\r\n2023-10-15 12:34:57,123 - WARNING - Vulnerable to SQL injection with payload: ' OR 1=1--\r\nContinue testing? (y/n): y\r\n2023-10-15 12:34:57,456 - INFO - Testing payload: ' OR '1'='1\r\n2023-10-15 12:34:57,789 - INFO - No vulnerabilities detected.\r\n```\r\n\r\n---\r\n\r\n## ⚠️ Notes\r\n\r\n- This tool is a **basic example** and may not cover all possible SQL injection scenarios. It is important to use it responsibly and with proper authorization.\r\n- Always replace `\"http://example.com/vulnerable_page.php?id=\"` with the actual URL you want to test.\r\n- Be cautious when testing production systems. Use this tool only in environments where you have explicit permission to conduct security testing.\r\n\r\n---\r\n\r\n## 🤝 Contributing\r\n\r\nContributions are welcome! If you would like to contribute to this repository, please follow these steps:\r\n\r\n1. Fork the repository.\r\n2. Create a new branch for your feature or bugfix.\r\n3. Make your changes and ensure they are well-documented and thoroughly tested.\r\n4. Submit a pull request with a clear description of your changes.\r\n\r\n---\r\n\r\n## 📜 License\r\n\r\nThis project is licensed under the MIT License. See the [LICENSE](LICENSE) file for details.\r\n\r\n---\r\n\r\n## 🙏 Acknowledgments\r\n\r\n- Inspired by various open-source security tools and educational resources.\r\n\r\n\r\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flpcodes%2Fsql-injection-testing-app","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Flpcodes%2Fsql-injection-testing-app","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flpcodes%2Fsql-injection-testing-app/lists"}