https://github.com/0xbug/SQLiScanner

Automatic SQL injection with Charles and sqlmap api
https://github.com/0xbug/SQLiScanner

autoscan scanner security security-audit security-vulnerability sqlmap sqlmap-webui sqlmapapi

Last synced: about 1 month ago
JSON representation

Automatic SQL injection with Charles and sqlmap api

• Host: GitHub
• URL: https://github.com/0xbug/SQLiScanner
• Owner: 0xbug
• License: gpl-3.0
• Archived: true
• Created: 2016-08-28T06:06:32.000Z (over 8 years ago)
• Default Branch: master
• Last Pushed: 2018-05-01T09:59:47.000Z (over 6 years ago)
• Last Synced: 2024-08-01T10:17:04.356Z (4 months ago)
• Topics: autoscan, scanner, security, security-audit, security-vulnerability, sqlmap, sqlmap-webui, sqlmapapi
• Language: Python
• Homepage:
• Size: 587 KB
• Stars: 790
• Watchers: 34
• Forks: 284
• Open Issues: 18
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-bugbounty-tools - SQLiScanner - Automatic SQL injection with Charles and sqlmap api (Exploitation / SQL Injection)
• awesome-hacking-lists - 0xbug/SQLiScanner - Automatic SQL injection with Charles and sqlmap api (Python)

README

        
# SQLiScanner

[![GitHub issues](https://img.shields.io/github/issues/0xbug/SQLiScanner.svg)](https://github.com/0xbug/SQLiScanner/issues)

[![GitHub forks](https://img.shields.io/github/forks/0xbug/SQLiScanner.svg)](https://github.com/0xbug/SQLiScanner/network)

[![GitHub stars](https://img.shields.io/github/stars/0xbug/SQLiScanner.svg)](https://github.com/0xbug/SQLiScanner/stargazers)

[![Python 3.x](https://img.shields.io/badge/python-3.x-yellow.svg)](https://www.python.org/) 

[![GitHub license](https://img.shields.io/badge/license-GPLv3-blue.svg)](https://raw.githubusercontent.com/0xbug/SQLiScanner/master/LICENSE)

> Automatic SQL injection with Charles and sqlmapapi

中文版说明文档[点这里](https://github.com/0xbug/SQLiScanner/blob/master/README_zh.md)

## Introduction

> Automatic SQL injection with Charles and sqlmapapi

## Dependencies

- Django

- PostgreSQL

- Celery

- sqlmap

- redis

## Supported platforms

- Linux

- osx

## Screenshots

![](http://obfxuk8r6.bkt.clouddn.com/sqliscanner-upload.png)

![](http://obfxuk8r6.bkt.clouddn.com/sqliscanner-stat.png)

![](http://obfxuk8r6.bkt.clouddn.com/sqliscanner-allresults.png)

![](http://obfxuk8r6.bkt.clouddn.com/sqliscanner-detail.png)

![](http://obfxuk8r6.bkt.clouddn.com/sqliscanner-vulns.png)

## Installation

Preferably, you can download SQLiScanner by cloning the Git repository:

```

git clone https://github.com/0xbug/SQLiScanner.git --depth 1

```

You can download sqlmap by cloning the Git repository:

```

git clone https://github.com/sqlmapproject/sqlmap.git --depth 1

```

SQLiScanner works with Python version 3.x on Linux and osx.

Create virtualenv and install requirements

```

cd SQLiScanner/

virtualenv --python=/usr/local/bin/python3.5 venv

source venv/bin/activate

pip install -r requirements.txt

```

## Setting

DATABASES Setting

```

SQLiScanner/settings.py:85

```

```

DATABASES = {

    'default': {

        'ENGINE': 'django.db.backends.postgresql',

        'NAME': '',

        'USER': '',

        'PASSWORD': '',

        'HOST': '127.0.0.1',

        'PORT': '5432',

    }

}

```

SendEmail Setting

```

SQLiScanner/settings.py:158

```

```

# Email

EMAIL_BACKEND = 'django.core.mail.backends.smtp.EmailBackend'

EMAIL_USE_TLS = False

EMAIL_HOST = ''

EMAIL_PORT = 25

EMAIL_HOST_USER = ''

EMAIL_HOST_PASSWORD = ''

DEFAULT_FROM_EMAIL = ''

```

```

scanner/tasks.py:14

```

```

class SqlScanTask(object):

    def __init__(self, sqli_obj):

        self.api_url = "http://127.0.0.1:8775"

        self.mail_from = ""

        self.mail_to = [""]

```

## Syncdb

```

python manage.py makemigrations scanner

python manage.py migrate

```

## Create superuser

```

python manage.py createsuperuser

```

## Run

```

redis-server

python sqlmapapi.py -s -p 8775

python manage.py celery worker --loglevel=info

python manage.py runserver

```