sqli-tester

What problem does it solve?

sqli-tester helps you quickly determine whether a web input is vulnerable to SQL injection, then confirm impact safely with minimal, non-destructive evidence.

Core Features & Use Cases

• Injection discovery workflow: Pinpoints likely injection points from URL parameters, path-based endpoints, and stored recon notes.
• Multi-method confirmation: Performs error-based, boolean blind, and time-based tests with explicit “hard stop” safety rules to avoid noisy or destructive attempts.
• DB fingerprinting and constrained sqlmap use: Identifies likely DBMS and runs sqlmap only after manual confirmation to reduce WAF triggering.
• Impact-focused PoCs: Supports minimal extraction (e.g., schema or one-row PoC) and authentication bypass testing with clear stopping guidance.

Quick Start

Use sqli-tester on your target URL or recon directory path to confirm or rule out SQL injection for a candidate parameter.