Damn Small SQLi Scanner (DSSS) v0.1b - 100 Lines Python Code
Jul 18, 2011
Damn Small SQLi Scanner (DSSS) v0.1b - 100 Lines Python Code SQL injection is a code injection technique that exploits a security vulnerability occurring in the database layer of an application (like queries). The vulnerability is present when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and thereby unexpectedly executed. It happens from using Microsoft SQL or other poorly designed query language interpreters. Source Code : #!/usr/bin/env python
import difflib, httplib, optparse, random, re, sys, urllib2, urlparse
NAME = "Damn Small SQLi Scanner (DSSS) < 100 LOC (Lines of Code)"
VERSION = "0.1b"
AUTHOR = "Miroslav Stampar (http://unconciousmind.blogspot.com | @stamparm)"
LICENSE = "GPLv2 (www.gnu.org/licenses/gpl-2.0.html)"
NOTE = "This is a fully working PoC proving that commercial (SQLi) scanners can be beaten under 100 li...
Wiz
