Ghauri

Ghauri detects and exploits SQL injection with an emphasis on getting past web application firewalls and input filters, confirming injectable parameters that a more obvious probe would miss.

Confirmed SQL-injection findings, the technique that succeeded, and the database details behind the vulnerable parameter.

A firewall in front of your site can hide injection flaws from basic tests while a determined attacker slips past it. This checks whether your protection holds against evasive payloads.