Database Scanner is a professional Python tool designed to evaluate the security of databases. This tool performs various tests to identify SQL injection vulnerabilities, weak passwords, and other security issues.
- Python 3.x
pymysql
library (Install usingpip install pymysql
)psycopg2
library (Install usingpip install psycopg2
)colorama
library (Install usingpip install colorama
)
-
Clone the repository.
-
Install the required libraries:
pip install -r requirements.txt
The
requirements.txt
file includes the following dependencies:pymysql psycopg2 colorama
-
Run the tool:
python main.py
-
Start the Database Scanner:
python main.py
-
Choose a database type:
1
= MySQL2
= PostgreSQL3
= SQLite
-
Enter the database information:
- MySQL: Host, username, password, and database name.
- PostgreSQL: Host, username, password, and database name.
- SQLite: Path to the database file.
-
The tool will perform the following tests:
- Check for SQL injection vulnerabilities.
- Test for weak passwords.
- SQL Injection Testing: Detects SQL injection vulnerabilities in the database.
- Weak Password Testing: Checks for weak passwords used by database users.
- Support for Multiple Databases: Allows scanning of MySQL, PostgreSQL, and SQLite databases.
Database Scanner
=================
Choose a database type to scan (type 'exit' to quit):
1 = MySQL
2 = PostgreSQL
3 = SQLite
root@you:~$ 1
[Database Scanner]: Enter MySQL host: localhost
[Database Scanner]: Enter MySQL user: root
[Database Scanner]: Enter MySQL password: mypassword
[Database Scanner]: Enter MySQL database: testdb
[Database Scanner]: Testing for SQL injection vulnerabilities...
[Database Scanner]: Testing for weak passwords...
- For educational or testing purposes only.
- Do not use for malicious activities.
- Follow ethical standards while using this tool.