darkc0de has written this python script that will attempt to gain information from a URL known to be vulnerable to SQL injections by feeding it a list of common table and column names. This script does require that you know the vulnerable URL along with the query strings. Proper syntax is listed in the opening comments. This should be a great tool to see if your code is properly sanitizing URLs.

Must be logged in to post comments