SQLiv – SQL Injection Dork Scanning Tool


SQLiv is a Python-based massive SQL Injection dork scanning tool which uses Google, Bing or Yahoo for targetted scanning, multiple-domain scanning or reverse domain scanning.

SQLiv - SQL Injection Dork Scanning Tool


SQLiv Massive SQL Injection Scanner Features

Both the SQLi scanning and domain info checking are done in a multiprocess manner so the script is super fast at scanning a lot of URLs. It’s a fairly new tool and there are plans for more features and to add support for other search engines like DuckDuckGo.

  • Multiple domain scanning with SQL injection dork by Bing, Google, or Yahoo
  • Targetted scanning by providing specific domain (with crawling)
  • Reverse domain scanning

Using SQLiv For SQL Injection Dorks Scanning

Multiple domain scanning with SQLi dork

Simply search multiple websites from given dork and scan the results one by one:

Targetted scanning

You can provide just the domain name or specific URLs with query parameters. If only the domain name is provided, it will crawl and get URLs with queries then scan the URLs one by one.

Reverse domain and scanning

Reverse domain scan and look for websites that are hosted on the same server as target URL.


SQLiv Dork SQL Injection Tool Usage

There is nothing else exactly like this, there are tools for information gathering via dorks like:

snitch – Information Gathering Tool Via Dorks
dork-cli – Command-line Google Dork Tool

And SQL Injection tools like:

jSQL – Automatic SQL Injection Tool In Java
BSQLinjector – Blind SQL Injection Tool Download in Ruby

You can download SQLiv here:

sqliv-2.0.zip

Or read more here.

Posted in: Hacking Tools

, , ,


Latest Posts:


HELK - Open Source Threat Hunting Platform HELK – Open Source Threat Hunting Platform
The Hunting ELK or simply the HELK is an Open-Source Threat Hunting Platform with advanced analytics capabilities such as SQL declarative language, graphing etc
trape - OSINT Analysis Tool For People Tracking Trape – OSINT Analysis Tool For People Tracking
Trape is an OSINT analysis tool, which allows people to track and execute intelligent social engineering attacks in real-time.
Fuzzilli - JavaScript Engine Fuzzing Library Fuzzilli – JavaScript Engine Fuzzing Library
Fuzzilii is a JavaScript engine fuzzing library, it's a coverage-guided fuzzer for dynamic language interpreters based on a custom intermediate language.
OWASP APICheck - HTTP API DevSecOps Toolset OWASP APICheck – HTTP API DevSecOps Toolset
APICheck is an HTTP API DevSecOps toolset, it integrates existing tools, creates execution chains easily and is designed for integration with 3rd parties.
trident - Automated Password Spraying Tool trident – Automated Password Spraying Tool
The Trident project is an automated password spraying tool developed to be deployed on multiple cloud providers and provides advanced options around scheduling
tko-subs - Detect & Takeover Subdomains With Dead DNS Records tko-subs – Detect & Takeover Subdomains With Dead DNS Records
tko-subs is a tool that helps you to detect & takeover subdomains with dead DNS records, this could be dangling CNAMEs point to hosting services and more.


2 Responses to SQLiv – SQL Injection Dork Scanning Tool

  1. Virus23 November 2, 2017 at 2:04 am #

    Amazing, might try one of these some days, looking into learning Python after I grad. this Military Academy!

    • Darknet November 2, 2017 at 2:58 pm #

      Totally recommend Python as a good way into infosec, plenty of tools to examine and a solid set of libraries.