ScanQLi is a simple SQL injection scanner with somes additional features. This tool can’t exploit the SQLi, it just detect them. Tested on Debian 9.
ScanQLi is a SQLi scanner to detect SQL vulns.
Features
Prerequisites
Install git tool
apt update
apt install git
Clone the repo.
git clone https://github.com/bambish/ScanQLi
Install python required libs
apt install python-pip
cd ScanQLi
pip install -r requirements.txt
For python3 please install python3-pip and use pip3
Also Read : ParamPamPam : Tool For Brute Discover Parameters
Usage
./scanqli -u [URL] [OPTIONS]
Examples
Simple URL scan with output file
python scanqli.py -u ‘http://127.0.0.1/test/?p=news’ -o output.log
Recursive URL scanning with cookies
python scanqli.py -u ‘https://127.0.0.1/test/’ -r -c ‘{“PHPSESSID”:”4bn7uro8qq62ol4o667bejbqo3″ , “Session”:”Mzo6YWMwZGRmOWU2NWQ1N2I2YTU2YjI0NTMzODZjZDVkYjU=”}’
The xargs command in Linux reads items from standard input and passes them as arguments to another…
The locate command in Linux searches for files and directories by name. It queries a pre-built database…
Most modern Linux distributions use systemd as the default service manager. Knowing how to list…
Truncating a file in Linux means removing its contents while leaving the file itself in…
The ss command in Linux lists open sockets and active network connections. It replaced the deprecated netstat command and…
The ftp command in Linux connects to a remote FTP server and transfers files. FTP transmits everything…