Skip to content

README.md

Latest commit

 

History

History
65 lines (53 loc) · 1.91 KB

README.md

File metadata and controls

65 lines (53 loc) · 1.91 KB
Raw

SQLiv

Massive SQL injection scanner

old project (sqlivulscan)

Features

  1. multiple domain scanning with SQL injection dork
  2. targetted scanning by providing specific domain (with crawling)
  3. reverse domain scanning

Installation

  1. git clone https://github.com/Hadesy2k/sqlivulscan.git
  2. sudo pip install -r requirements.txt
  3. python sqliv.py --help

Dependencies

Pre-installed Systems

Quick Tutorial

1. Multiple domain scanning with SQLi dork

  • it simply search multiple websites from given dork and scan the results one by one
python sqliv.py -d <SQLI DORK> -e <SEARCH ENGINE>  
python sqliv.py -d "inurl:index.php?id=" -e google

2. Targetted scanning

  • can provide only domain name or specifc url with query params
  • if only domain name is provided, it will crawl and get urls with query
  • then scan the urls one by one
python sqliv.py -t <URL>  
python sqliv.py -t www.example.com  
python sqliv.py -t www.example.com/index.php?id=1

3. Reverse domain and scanning

  • do reverse domain and look for websites that hosted on same server as target url
python sqliv.py -t <URL> -r

View help

python sqliv.py --help

usage: sqliv.py [-h] [-d D] [-e E] [-p P] [-t T] [-r]

optional arguments:
  -h, --help  show this help message and exit
  -d D        SQL injection dork
  -e E        search engine [Google only for now]
  -p P        number of websites to look for in search engine
  -t T        scan target website
  -r          reverse domain