ghauri
SQL injection detection and exploitation tool with a lighter footprint than sqlmap. Still a lab/owned-row tool on bounty programs: tight -p, no --batch spray.
Tags: sqli, blind, inject
- Category
- inject
- Maintenance signal
- active
Use this when: SQLi. Same boundary as the SQLi hunt: one parameter, a response you can compare.
Install
pipx
pipx install ghauriCommand templates
Single parameter, owned row
ghauri -u {url} -p {param} --level 1 --risk 1