SQLyzer is a powerful and user-friendly SQL Injection Vulnerability Scanner designed to help developers, security researchers, and bug hunters identify SQL injection vulnerabilities in web applications. With advanced crawling capabilities, multi-threading support, and a modern terminal UI, SQLyzer makes vulnerability scanning efficient and intuitive.
- Advanced Crawling: Crawls JavaScript-heavy websites using Selenium for dynamic content.
- Multi-Threading: Speeds up scanning by testing multiple URLs simultaneously.
- Custom Payloads: Supports custom SQL injection payloads for tailored testing.
- Proxy Support: Allows scanning through proxies for anonymity.
- Verbose Mode: Provides detailed output for debugging and analysis.
- Modern UI: Uses
richandcoloramafor a clean and colorful terminal interface. - Save Results: Generates well-formatted reports in a text file.
- Emoji Support: Adds visual flair to the terminal and output files.
-
Clone the repository:
git clone https://github.com/darkstarbdx/SQLyzer cd SQLyzer -
Install dependencies:
pip install -r requirements.txt
Run SQLyzer with the following command:
python3 sqlyzer.py -u https://example.com-u, --url: Target URL to scan.-p, --payloads: Path to a file containing custom payloads.-x, --proxy: Proxy to use for requests (e.g.,http://127.0.0.1:8080).-v, --verbose: Enable verbose output.-t, --threads: Number of threads to use (default: 10).-o, --output: Save results to a file.-a, --advanced: Use advanced crawling for JavaScript-heavy sites.-h, --help: Show the help menu.
python3 sqlyzer.py -u https://testphp.vulnweb.com -p payloads.txt -x http://127.0.0.1:8080 -v -t 20 -o results.txt -a
If you encounter any issues or have questions, reach out to me ASAP! ✨ Want to get in touch? 🌟 Join our vibrant Telegram community! 👉 Click here to connect: Telegram Group
This project is licensed under the MIT License. See the LICENSE file for details.
- Selenium: For advanced crawling of JavaScript-heavy websites.
- Rich: For creating a modern and colorful terminal UI.
- Colorama: For cross-platform colored terminal text.
- Tqdm: For progress bars during scanning.
SQLyzer is here to make your SQL injection vulnerability scanning easier and more efficient. If you find this tool useful, don’t forget to ⭐ the repository and share it with others!