Damn Small SQLi Scanner (DSSS): An Efficient SQL Injection Vulnerability Scanner
Introduction
The Damn Small SQLi Scanner (DSSS) is a powerful and efficient SQL injection vulnerability scanner written in Python 3.x. Despite being under 100 lines of code, DSSS is fully functional and supports both GET and POST parameters. This tool is ideal for penetration testers and security researchers looking for a lightweight and effective SQL injection scanner.
Features
- Supports GET and POST parameters for SQL injection scanning
- Optional settings for HTTP proxy
- Supports HTTP header values such as User-Agent, Referer, and Cookie
- Compact and efficient, written in under 100 lines of code
Requirements
DSSS requires Python 3.x to run. Ensure you have Python 3.x installed on your system before proceeding with the installation.
Installation and Usage
Follow these steps to download, install, and run DSSS:
Step 1: Update Your System
$ sudo apt update
Step 2: Install Git
$ sudo apt install git
Step 3: Clone the DSSS Repository
$ git clone https://github.com/stamparm/DSSS
Step 4: Navigate to the DSSS Directory
$ cd DSSS
Step 5: Run the DSSS Script
$ python dsss.py
Usage Examples
To display the help message with all available options, run:
$ python3 dsss.py -h
To scan a URL for SQL injection vulnerabilities, use the following command:
$ python3 dsss.py -u "http://testphp.vulnweb.com/artists.php?artist=1"
Conclusion
Damn Small SQLi Scanner (DSSS) is a compact yet powerful tool for detecting SQL injection vulnerabilities. Its simplicity and efficiency make it an excellent choice for security professionals and researchers. Remember to use this tool responsibly and only test systems you have permission to test.
Stay safe and secure!