Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

https://github.com/0xbug/SQLiScanner

Automatic SQL injection with Charles and sqlmap api
https://github.com/0xbug/SQLiScanner

autoscan scanner security security-audit security-vulnerability sqlmap sqlmap-webui sqlmapapi

Last synced: 7 days ago
JSON representation

Automatic SQL injection with Charles and sqlmap api

Host: GitHub
URL: https://github.com/0xbug/SQLiScanner
Owner: 0xbug
License: gpl-3.0
Archived: true
Created: 2016-08-28T06:06:32.000Z (almost 8 years ago)
Default Branch: master
Last Pushed: 2018-05-01T09:59:47.000Z (about 6 years ago)
Last Synced: 2024-02-27T23:35:17.654Z (4 months ago)
Topics: autoscan, scanner, security, security-audit, security-vulnerability, sqlmap, sqlmap-webui, sqlmapapi
Language: Python
Homepage:
Size: 587 KB
Stars: 771
Watchers: 34
Forks: 297
Open Issues: 18
Metadata Files:
- Readme: README.md
- License: LICENSE

Lists

awesome-bugbounty-tools - SQLiScanner - Automatic SQL injection with Charles and sqlmap api (Exploitation / SQL Injection)
awesome-hacking-lists - SQLiScanner - Automatic SQL injection with Charles and sqlmap api (Python (1887))
awesome-bugbounty-tools - SQLiScanner - Automatic SQL injection with Charles and sqlmap api (Exploitation / SQL Injection)
awesome-bugbounty-tools - SQLiScanner - Automatic SQL injection with Charles and sqlmap api (Exploitation / SQL Injection)
awesome-hacking-lists - 0xbug/SQLiScanner - Automatic SQL injection with Charles and sqlmap api (Python)
awesome-hacking-lists - SQLiScanner - Automatic SQL injection with Charles and sqlmap api (Python)
awesome-stars - 0xbug/SQLiScanner - `★785` Automatic SQL injection with Charles and sqlmap api (Python)

README

        # SQLiScanner

[![GitHub issues](https://img.shields.io/github/issues/0xbug/SQLiScanner.svg)](https://github.com/0xbug/SQLiScanner/issues)

[![GitHub forks](https://img.shields.io/github/forks/0xbug/SQLiScanner.svg)](https://github.com/0xbug/SQLiScanner/network)

[![GitHub stars](https://img.shields.io/github/stars/0xbug/SQLiScanner.svg)](https://github.com/0xbug/SQLiScanner/stargazers)

[![Python 3.x](https://img.shields.io/badge/python-3.x-yellow.svg)](https://www.python.org/) 

[![GitHub license](https://img.shields.io/badge/license-GPLv3-blue.svg)](https://raw.githubusercontent.com/0xbug/SQLiScanner/master/LICENSE)

> Automatic SQL injection with Charles and sqlmapapi

中文版说明文档[点这里](https://github.com/0xbug/SQLiScanner/blob/master/README_zh.md)

## Introduction

> Automatic SQL injection with Charles and sqlmapapi

## Dependencies

- Django

- PostgreSQL

- Celery

- sqlmap

- redis

## Supported platforms

- Linux

- osx

## Screenshots

![](http://obfxuk8r6.bkt.clouddn.com/sqliscanner-upload.png)

![](http://obfxuk8r6.bkt.clouddn.com/sqliscanner-stat.png)

![](http://obfxuk8r6.bkt.clouddn.com/sqliscanner-allresults.png)

![](http://obfxuk8r6.bkt.clouddn.com/sqliscanner-detail.png)

![](http://obfxuk8r6.bkt.clouddn.com/sqliscanner-vulns.png)

## Installation

Preferably, you can download SQLiScanner by cloning the Git repository:

```

git clone https://github.com/0xbug/SQLiScanner.git --depth 1

```

You can download sqlmap by cloning the Git repository:

```

git clone https://github.com/sqlmapproject/sqlmap.git --depth 1

```

SQLiScanner works with Python version 3.x on Linux and osx.

Create virtualenv and install requirements

```

cd SQLiScanner/

virtualenv --python=/usr/local/bin/python3.5 venv

source venv/bin/activate

pip install -r requirements.txt

```

## Setting

DATABASES Setting

```

SQLiScanner/settings.py:85

```

```

DATABASES = {

    'default': {

        'ENGINE': 'django.db.backends.postgresql',

        'NAME': '',

        'USER': '',

        'PASSWORD': '',

        'HOST': '127.0.0.1',

        'PORT': '5432',

    }

}

```

SendEmail Setting

```

SQLiScanner/settings.py:158

```

```

# Email

EMAIL_BACKEND = 'django.core.mail.backends.smtp.EmailBackend'

EMAIL_USE_TLS = False

EMAIL_HOST = ''

EMAIL_PORT = 25

EMAIL_HOST_USER = ''

EMAIL_HOST_PASSWORD = ''

DEFAULT_FROM_EMAIL = ''

```

```

scanner/tasks.py:14

```

```

class SqlScanTask(object):

    def __init__(self, sqli_obj):

        self.api_url = "http://127.0.0.1:8775"

        self.mail_from = ""

        self.mail_to = [""]

```

## Syncdb

```

python manage.py makemigrations scanner

python manage.py migrate

```

## Create superuser

```

python manage.py createsuperuser

```

## Run

```

redis-server

python sqlmapapi.py -s -p 8775

python manage.py celery worker --loglevel=info

python manage.py runserver

```