eslam3kl/sqlidetector

Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error based" by sending multiple requests with 14 payloads and checking for 152 regex patterns for different databases.

sqlidetector's Issues

Bug: workers option type

the worker's option is returning a string type so it will be raising an error with the concurrent module

fix: #5

workers misbehaves

When I set workers to somewhat like high numbers, it gets locked to (Scanning 0/total_urls) and doesn't start scanning. Sometimes it happens even if I set workers to 30 while without workers it works fine.

it doesn't work

always outputting empy array, although despite sql injection
select * from sys_user where user_name = ${param}

"-header" parameter

Hello!

You tool is awesome! Could you try to add a feature where we can insert custom header into all the HTTP Request? for example: sqlidetector -H "hacker1"

Output: []

The output is just:

[]

is this mean empty list? or it's one the payloads?

❤

promising bro, waiting 4 more