https://github.com/blackhatethicalhacking/sqlmutant

SQLMutant is a powerful SQL injection testing tool that includes both passive and active reconnaissance processes for any given domain. It filters URLs to identify those with parameters susceptible to SQL injection formats and then performs injection attacks. These attacks include pattern matching, error analysis, and timing attacks.
https://github.com/blackhatethicalhacking/sqlmutant

arjun hacking offensivesecurity pentesting redteam sqlinjection sqlmap subdomain-enumeration waybackurls

Last synced: 3 days ago
JSON representation

SQLMutant is a powerful SQL injection testing tool that includes both passive and active reconnaissance processes for any given domain. It filters URLs to identify those with parameters susceptible to SQL injection formats and then performs injection attacks. These attacks include pattern matching, error analysis, and timing attacks.

• Host: GitHub
• URL: https://github.com/blackhatethicalhacking/sqlmutant
• Owner: blackhatethicalhacking
• License: gpl-3.0
• Created: 2023-02-16T23:21:31.000Z (almost 2 years ago)
• Default Branch: main
• Last Pushed: 2024-11-28T20:06:35.000Z (27 days ago)
• Last Synced: 2024-12-15T16:08:25.061Z (11 days ago)
• Topics: arjun, hacking, offensivesecurity, pentesting, redteam, sqlinjection, sqlmap, subdomain-enumeration, waybackurls
• Language: Shell
• Homepage: https://www.blackhatethicalhacking.com
• Size: 2.34 MB
• Stars: 128
• Watchers: 3
• Forks: 32
• Open Issues: 1
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# BHEH's SQLMutant









**Unleash the power of mutation testing on SQL queries with SQLMutant.**

SQLMutant is written by Chris "SaintDruG" Abou-Chabke from Black Hat Ethical Hacking and is designed for Red Teams and Bug Bounty Hunters!



# Description

SQLMutant will perform domain enumeration in various ways from passive to active and filter them based on patterns that contain parameters specifically for SQL injection based testing from a given domain, utilizing several tools including waybackurls, httpx, Arjun, and sqlmap. It begins with a Sun Tzu quote and checks if the user is connected to the internet. Then it prompts the user to enter a domain to scan and creates a directory for the output files. It fetches URLs from Wayback Machine and filters them using HTTPX, and informs the user about the number of URLs found. Then it finds more parameters using Arjun with 20 threads and extracts URLs with parameters from Arjun's output. The script merges the URLs found by Arjun with the ones ready for SQL injection and informs the user about the new number of URLs ready for SQL injection testing. Finally, it tests SQL injection on the new list of URLs using SQLMAP with a tweaked aggressive approach.

# The Flow Behind it

- Displays an ASCII art and a random quote by Sun Tzu related to offensive security.

- Asks the user for the domain to scan.

- Checks if the user is connected to the internet. If not, it prompts the user to connect before running the script.

- Creates a directory for the output files.

- Fetches URLs from Wayback Machine and filters them using HTTPX, then saves the results to the all_urls.txt file.

- Filters the URLs from all_urls.txt that are ready for SQL injection testing by applying magic regex patterns, and saves the results to the sql_ready_urls.txt file.

- Runs Arjun with 20 threads to find more parameters.

- Extracts URLs with parameters from Arjun's output and saves them to the arjun_urls.txt file.

- Merges the URLs found by Arjun with the ones ready for SQL injection, and saves the results to the sql_ready_urls2.txt file.

- Tests SQL injection on the URLs in sql_ready_urls2.txt using SQLMAP with a tweaked aggressive approach.

# Features:

- URL Fuzzer: This feature allows the user to specify a target URL and then perform a fuzzing attack to find any vulnerable parameters that can be exploited for SQL injection. SQLMutant uses a variety of techniques to detect SQL injection vulnerabilities, including time-based blind injection, error-based injection, and boolean-based injection.

- SQL Payloads: SQLMutant provides a set of pre-defined SQL injection payloads that can be used to test for vulnerabilities. The payloads are designed to exploit different types of SQL injection vulnerabilities, including union-based, error-based, boolean-based, and time-based attacks.

- Header Fuzzer: This feature allows the user to fuzz HTTP headers in order to test for SQL injection vulnerabilities. The tool provides a set of pre-defined payloads that can be used to test for different types of injection attacks.

- Data Fuzzer: This feature allows the user to test for SQL injection vulnerabilities in form data submitted by the user. The tool can be used to test for vulnerabilities in both POST and GET requests.

- Waybackurls Integration: SQLMutant has integrated the Waybackurls tool, which is used to find historical versions of a web page. This feature can be used to find pages that are no longer available but may contain vulnerabilities that were present in the past. The tool can also be used to find additional pages on the target website that may be vulnerable to SQL injection attacks.

- Arjun Integration: SQLMutant also integrates the Arjun tool, which is used to find hidden parameters and directories on a web server. This feature can be used to find additional pages on the target website that may be vulnerable to SQL injection attacks.

# Requirements:

To use SQLMutant, you need to have the following tools installed:

- uro: pip3 install uro or pipx install uro

- go install github.com/tomnomnom/waybackurls@latest

- apt-get install arjun

- go install -v github.com/projectdiscovery/httpx/cmd/httpx@latest

- apt-get install jq

- apt-get intall toilet

- Make sure SQLMap is installed

# Installation

`git clone https://github.com/blackhatethicalhacking/SQLMutant.git`

`cd SQLMutant`

`chmod +x SQLMutant.sh`

`./SQLMutant.sh`

# Screenshot

**Main Menu**



# Compatibility: 

This tool has been tested on Kali Linux, Ubuntu and MacOS.

# Disclaimer

This tool is provided for educational and research purpose only. The author of this project are no way responsible for any misuse of this tool. 

We use it to test under NDA agreements with clients and their consents for pentesting purposes and we never encourage to misuse or take responsibility for any damage caused !



  BHEH Official Merch





Introducing our Merch Store, designed for the Offensive Security community. Explore a curated collection of apparel and drinkware, perfect for both professionals and enthusiasts. Our selection includes premium t-shirts, hoodies, and mugs, each featuring bold hacking-themed slogans and graphics that embody the spirit of red teaming and offensive security. 

Hack with style and showcase your dedication to hacker culture with gear that’s as dynamic and resilient as you are. 😊