SQLiv – SQL Injection Dork Scanning Tool

Use Netsparker


SQLiv is a Python-based massive SQL Injection dork scanning tool which uses Google, Bing or Yahoo for targetted scanning, multiple-domain scanning or reverse domain scanning.

SQLiv - SQL Injection Dork Scanning Tool


SQLiv Massive SQL Injection Scanner Features

Both the SQLi scanning and domain info checking are done in a multiprocess manner so the script is super fast at scanning a lot of URLs. It’s a fairly new tool and there are plans for more features and to add support for other search engines like DuckDuckGo.

  • Multiple domain scanning with SQL injection dork by Bing, Google, or Yahoo
  • Targetted scanning by providing specific domain (with crawling)
  • Reverse domain scanning

Using SQLiv For SQL Injection Dorks Scanning

Multiple domain scanning with SQLi dork

Simply search multiple websites from given dork and scan the results one by one:

Targetted scanning

You can provide just the domain name or specific URLs with query parameters. If only the domain name is provided, it will crawl and get URLs with queries then scan the URLs one by one.

Reverse domain and scanning

Reverse domain scan and look for websites that are hosted on the same server as target URL.


SQLiv Dork SQL Injection Tool Usage

There is nothing else exactly like this, there are tools for information gathering via dorks like:

snitch – Information Gathering Tool Via Dorks
dork-cli – Command-line Google Dork Tool

And SQL Injection tools like:

jSQL – Automatic SQL Injection Tool In Java
BSQLinjector – Blind SQL Injection Tool Download in Ruby

You can download SQLiv here:

sqliv-2.0.zip

Or read more here.

Posted in: Hacking Tools

, , ,


Latest Posts:


snallygaster - Scan For Secret Files On HTTP Servers snallygaster – Scan For Secret Files On HTTP Servers
snallygaster is a Python-based tool that can help you to scan for secret files on HTTP servers, files that are accessible that shouldn't be public and can pose a s
Portspoof - Spoof All Ports Open & Emulate Valid Services Portspoof – Spoof All Ports Open & Emulate Valid Services
The primary goal of the Portspoof program is to enhance your system security through a set of new camouflage techniques which spoof all ports open and also emulate valid services on every port.
Cambridge Analytica Facebook Data Scandal Cambridge Analytica Facebook Data Scandal
One of the biggest stories of the year so far has been the scandal surrounding Cambridge Analytica that came out after a Channel 4 expose that demonstrated the depths they are willing to go to profile voters, manipulate elections and much more.
GetAltName - Discover Sub-Domains From SSL Certificates GetAltName – Discover Sub-Domains From SSL Certificates
GetAltName it's a little script to discover sub-domains that can extract Subject Alt Names for SSL Certificates directly from HTTPS websites which can provide you with DNS names or virtual servers.
Memcrashed - Memcached DDoS Exploit Tool Memcrashed – Memcached DDoS Exploit Tool
Memcrashed is a Memcached DDoS exploit tool written in Python that allows you to send forged UDP packets to a list of Memcached servers obtained from Shodan.
QualysGuard - Vulnerability Management Tool QualysGuard – Vulnerability Management Tool
QualysGuard is a web-based vulnerability management tool provided by Qualys, Inc, which was the first company to deliver vulnerability management services as a SaaS-based web-service.


2 Responses to SQLiv – SQL Injection Dork Scanning Tool

  1. Virus23 November 2, 2017 at 2:04 am #

    Amazing, might try one of these some days, looking into learning Python after I grad. this Military Academy!

    • Darknet November 2, 2017 at 2:58 pm #

      Totally recommend Python as a good way into infosec, plenty of tools to examine and a solid set of libraries.