Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/malvads/sqlmc
Official Kali Linux tool to check all urls of a domain for SQL injections :)
https://github.com/malvads/sqlmc
database pentest-tool pentesting python3 sql sqlinjection
Last synced: 2 days ago
JSON representation
Official Kali Linux tool to check all urls of a domain for SQL injections :)
- Host: GitHub
- URL: https://github.com/malvads/sqlmc
- Owner: malvads
- License: agpl-3.0
- Created: 2024-05-05T22:32:37.000Z (5 months ago)
- Default Branch: main
- Last Pushed: 2024-06-02T22:35:23.000Z (4 months ago)
- Last Synced: 2024-09-05T07:51:06.228Z (29 days ago)
- Topics: database, pentest-tool, pentesting, python3, sql, sqlinjection
- Language: Python
- Homepage: https://www.kali.org/tools/sqlmc/
- Size: 10 MB
- Stars: 217
- Watchers: 1
- Forks: 31
- Open Issues: 3
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
Awesome Lists containing this project
README
# SQLMC - SQL Injection Massive Checker
## Demo
## Information
This tool is for educational purpose only, usage of SQLMC for attacking targets without prior mutual consent is illegal. Developers assume no liability and are not responsible for any misuse or damage cause by this program.
## Overview
SQLMC (SQL Injection Massive Checker) is a tool designed to scan a domain for SQL injection vulnerabilities. It crawls the given URL up to a specified depth, checks each link for SQL injection vulnerabilities, and reports its findings.
## Features
- Scans a domain for SQL injection vulnerabilities
- Crawls the given URL up to a specified depth
- Checks each link for SQL injection vulnerabilities in all GET params
- Reports vulnerabilities along with server information and depth
## Installation
1. Install the required dependencies:
```bash
pip3 install sqlmc
```
## Usage
Run `sqlmc` with the following command-line arguments:
- `-u, --url`: The URL to scan (required)
- `-d, --depth`: The depth to scan (required)
- `-o, --output`: The output file to save the results
Example usage:
```bash
sqlmc -u http://example.com -d 2
```
Replace http://example.com with the URL you want to scan and 3 with the desired depth of the scan. You can also specify an output file using the -o or --output flag followed by the desired filename.
The tool will then perform the scan and display the results.
## ToDo
~~- Check for multiple GET params~~ - Done in [#3](https://github.com/malvads/sqlmc/pull/3)
- Better injection checker trigger methods
- Allow to use cookies like sessions to auth requests
## Credits
- Developed by [Miguel Álvarez](https://github.com/malvads)
## License
This project is licensed under the [GNU Affero General Public License v3.0](LICENSE).