Download
SQLiv is a command-line security tool designed to identify SQL injection vulnerabilities in web applications through automated scanning techniques. Written primarily in Python, the project focuses on discovering potentially vulnerable web pages by analyzing URLs that contain database query parameters. It can perform large-scale scanning by using search engine queries known as SQL injection dorks to collect candidate websites and then test them for vulnerabilities. In addition to bulk scanning, SQLiv supports targeted analysis of specific domains or individual URLs, allowing security researchers to focus on particular web applications. When a domain is supplied, the scanner can crawl the site to gather URLs with parameters and evaluate them for potential SQL injection weaknesses. SQLiv also supports reverse domain scanning to locate other websites hosted on the same server, which can then be examined for similar vulnerabilities.
Features
- Bulk scanning of multiple domains using SQL injection dorks from search engines
- Targeted scanning of specific websites or parameterized URLs
- Automatic crawling of domains to discover URLs with query parameters
- Reverse domain scanning to identify other sites hosted on the same server
- Multiprocessing-based scanning for faster analysis of large numbers of URLs
- Ability to export scanning results to JSON format for later analysis
Project Samples
