Jump to content
  • Entries

    16114
  • Comments

    7952
  • Views

    86388256

Contributors to this blog

  • HireHackking 16114

About this blog

Hacking techniques include penetration testing, network security, reverse cracking, malware analysis, vulnerability exploitation, encryption cracking, social engineering, etc., used to identify and fix security flaws in systems.

SQLMC(SQL注入大量检查器)是一种旨在扫描SQL注入漏洞的域的工具。它将给定的URL爬到指定的深度,检查每个链接是否有SQL注入漏洞,并报告其发现。

功能

Scans a domain for SQL injection vulnerabilities Crawls the given URL up to a specified depth Checks each link for SQL injection vulnerabilities Reports vulnerabilities along with server information and depth

安装

Install the required dependencies: bash pip3 install sqlmc

用法

Run sqlmc with the following command-line参数:

-U,-URL:要扫描的URL(必需)-d,-depth:扫描的深度(必需)-o,-ox -output:输出文件以保存结果示例示例:

SQLMC -U http://Example.com -D 2用您要扫描的URL替换http://Example.com,并在扫描的所需深度中扫描3。您还可以使用-o或-utput标志,然后是所需的文件名来指定输出文件。

然后,该工具将执行扫描并显示结果。

todo

检查多个GET参数的检查更好的注射检查器触发方法

信用

由Miguelálvarez开发的

许可证

此项目已根据GNU Affero通用公共许可证v3.0许可。