Detect Error Based SQLI injection

SQLiDetector:-

Simple python script supported with BurpBouty 

profile that helps you to detect SQL injection

"Error based" by sending multiple requests 

with 14 payloads and checking for 152 regex 

patterns for different databases.

Description:-

The main idea for the tool is scanning for Error

Based SQL Injection by using different payloads like

'123 ''123 `123 ")123 "))123 `)123 `))123 '))123 ')123"123 []123 ""123 '"123 "'123 \123 

And match for 152 error regex patterns for different databases. 

How does it work?

Use your subdomain grabber script or tools.
Pass all collected subdomains to httpx or httprobe to get only live subs.
Use your links and URLs tools to grab all waybackurls like waybackurls, gau, gauplus, etc.
Use URO tool to filter them and reduce the noise.
Grep to get all the links that contain parameters only. You can use Grep or GF tool.
Pass the final URLs file to the tool, and it will test them.
The final schema of URLs that you will pass to the tool must be like this one

https://aykalam.com?x=test&y=fortest
http://test.com?parameter=ayhaga
Installation and Usage:-

Just run the following command to install the required libraries.

git clone https://github.com/eslam3kl/SQLiDetector.git
pip3 install -r requirements.txt 
To run 

python3 sqlidetector.py -h