SQL注入网站批量扫描器

[d4m1ts]

SQLI SCAN

Sqli_Scan , 批量sql注入扫描器

首先从浏览器（Bing、Google、Yahoo）上根据关键词搜索符合条件的链接，再根据链接进行自动判断是否可能存在注入

依赖

• python3

下载

git clone https://github.com/damit5/sqli_scan.git

cd sqli_scan

pip install -r requirements.txt

基本使用

    ===============================================================================

    _________________   .____    .___    _________
    /   _____/\_____  \ |    |   |   |  /   _____/ ____ _____    ____
    \_____  \  /  / \  \|    |   |   |  \_____  \_/ ___\\__  \  /    \
    /        \/   \_/.  \    |___|   |  /        \  \___ / __ \|   |  \
   /_______  /\_____\ \_/_______ \___| /_______  /\___  >____  /___|  /
           \/        \__>       \/             \/     \/     \/     \/
                                                                        d4m1ts
    ===============================================================================

usage: sqli_scan.py [-h] [-k inurl:example] [-p 5] [-e search engine]

optional arguments:
  -h, --help        show this help message and exit
  -k inurl:example  sql injection keyword
  -p 5              page of websites to look for in search engine
  -e search engine  the search engine you want to use. bing,yahoo,google

执行 python sqli_scan.py -k inurl:php?id= -p 3 -e bing

演示视频

项目地址

[Akira]

没有用随机header 扫描多了bing会不会封？

[d4m1ts]

bing没见封过，google和Yahoo到是会封

[mumu]

666666666很很溜