Ghauri
Modern SQL-injection detection built to bypass defences.
What it does
Ghauri detects and exploits SQL injection with an emphasis on getting past web application firewalls and input filters, confirming injectable parameters that a more obvious probe would miss.
What data you get
Confirmed SQL-injection findings, the technique that succeeded, and the database details behind the vulnerable parameter.
Why it matters to your site
A firewall in front of your site can hide injection flaws from basic tests while a determined attacker slips past it. This checks whether your protection actually holds against evasive payloads.
More in this category
Other specialised tools
sqlmap
★ FeaturedThe definitive tool for detecting and confirming SQL injection.
XSStrike
Advanced detection and confirmation of cross-site scripting.
Dalfox
Fast, parameter-focused XSS scanner and verifier.