SQLiv – SQL Injection Dork Scanning Tool


SQLiv is a Python-based massive SQL Injection dork scanning tool which uses Google, Bing or Yahoo for targetted scanning, multiple-domain scanning or reverse domain scanning.

SQLiv - SQL Injection Dork Scanning Tool


SQLiv Massive SQL Injection Scanner Features

Both the SQLi scanning and domain info checking are done in a multiprocess manner so the script is super fast at scanning a lot of URLs. It’s a fairly new tool and there are plans for more features and to add support for other search engines like DuckDuckGo.

  • Multiple domain scanning with SQL injection dork by Bing, Google, or Yahoo
  • Targetted scanning by providing specific domain (with crawling)
  • Reverse domain scanning

Using SQLiv For SQL Injection Dorks Scanning

Multiple domain scanning with SQLi dork

Simply search multiple websites from given dork and scan the results one by one:

Targetted scanning

You can provide just the domain name or specific URLs with query parameters. If only the domain name is provided, it will crawl and get URLs with queries then scan the URLs one by one.

Reverse domain and scanning

Reverse domain scan and look for websites that are hosted on the same server as target URL.


SQLiv Dork SQL Injection Tool Usage

There is nothing else exactly like this, there are tools for information gathering via dorks like:

snitch – Information Gathering Tool Via Dorks
dork-cli – Command-line Google Dork Tool

And SQL Injection tools like:

jSQL – Automatic SQL Injection Tool In Java
BSQLinjector – Blind SQL Injection Tool Download in Ruby

You can download SQLiv here:

sqliv-2.0.zip

Or read more here.

Posted in: Hacking Tools

, , ,


Latest Posts:


zBang - Privileged Account Threat Detection Tool zBang – Privileged Account Threat Detection Tool
zBang is a risk assessment tool for Privileged Account Threat Detection on a scanned network, organizations & red teams can use it to identify attack vectors
Memhunter - Automated Memory Resident Malware Detection Memhunter – Automated Memory Resident Malware Detection
Memhunter is an Automated Memory Resident Malware Detection tool for the hunting of memory resident malware at scale, improving threat hunter analysis process.
Sandcastle - AWS S3 Bucket Enumeration Tool Sandcastle – AWS S3 Bucket Enumeration Tool
Sandcastle is an Amazon AWS S3 Bucket Enumeration Tool, formerly known as bucketCrawler. The script takes a target's name as the stem argument (e.g. shopify).
Astra - API Automated Security Testing For REST Astra – API Automated Security Testing For REST
Astra is a Python-based tool for API Automated Security Testing, REST API penetration testing is complex due to continuous changes in existing APIs.
Judas DNS - Nameserver DNS Poisoning Attack Tool Judas DNS – Nameserver DNS Poisoning Attack Tool
Judas DNS is a Nameserver DNS Poisoning Attack Tool which functions as a DNS proxy server built to be deployed in place of a taken over nameserver to perform targeted exploitation.
dsniff Download - Tools for Network Auditing & Password Sniffing dsniff Download – Tools for Network Auditing & Password Sniffing
Dsniff download is a collection of tools for network auditing & penetration testing. Dsniff, filesnarf, mailsnarf, msgsnarf, URLsnarf, and WebSpy passively monitor a network


2 Responses to SQLiv – SQL Injection Dork Scanning Tool

  1. Virus23 November 2, 2017 at 2:04 am #

    Amazing, might try one of these some days, looking into learning Python after I grad. this Military Academy!

    • Darknet November 2, 2017 at 2:58 pm #

      Totally recommend Python as a good way into infosec, plenty of tools to examine and a solid set of libraries.