Friday, 22 December 2006

SQL injection digger

SQL injection digger is a command line program that looks for SQL injections and common errors in websites.
It can perform the follwing operations:

* Look for SQL injection in a webpage, by looking for links.
* Submit forms in a webpage to look for SQL injection.
* Crawl a website to perform the above listed operations.
* Perform a google search for a query and look for SQL injections in the urls found.

sqid is wrtten in ruby and additionally requires http-access2 and ruby-google

LINK: <http://sqid.rubyforge.org/>

No comments: