ScanQLi is a simple SQL injection scanner with somes additionals features. This tool can't exploit the SQLi, it just detect them. Tested on Debian 9
Features
- Classic
- Blind
- Time based
- GBK (soon)
- Recursive scan (follow all hrefs of the scanned web site)
- Cookies integration
- Adjustable wait delay between requests
- Ignore given URLs
1. Install git tool
Code:
apt update
apt install git
2. Clone the repo.
Code:
git clone https://github.com/bambish/ScanQLi
https://github.com/bambish/ScanQLi
3. Install python required libs
Code:
apt install python-pip
cd ScanQLi
pip install -r requirements.txt
For python3 please install python3-pip and use pip3
Usage
Code:
./scanqli -u [OPTIONS] Examples Simple url scan.../github.com/bambish/ScanQLi']Download ScanQLi