SQID - SQL Injection digger
SQL injection digger is a command line program that looks for SQL injections and common errors in websites. It can perform the following operations:
* Look for SQL injection in a webpage, by looking for links.
* Submit forms in a webpage to look for SQL injection.
* Crawl a website to perform the above listed operations.
* Perform a Google search for a query and look for SQL injections in the urls found.
sqid is written in ruby and additionally requires http-access2 module for operation. sqid is extensible by adding more signatures to its database (sqid.db). The signatures simply use regular expressions.
2485 views
Post new comment