# SQLMC | Check All Urls Of A Domain For SQL Injections

**URL:** <https://onehack.st/t/sqlmc-check-all-urls-of-a-domain-for-sql-injections/282668>\
**Category:** Tools & Scripts\
**Tags:** tools, hacking, freebies, data-recovery\
**Created:** [May 11, 2024, 7:54pm UTC](https://onehack.st/t/sqlmc-check-all-urls-of-a-domain-for-sql-injections/282668 "2024-05-11T19:54:13Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![TheStrength](https://onehack.st/user_avatar/onehack.st/thestrength/32/46753_2.png) [@TheStrength](https://onehack.st/u/TheStrength)\
**Post date:** [May 11, 2024, 7:54pm UTC](https://onehack.st/t/sqlmc-check-all-urls-of-a-domain-for-sql-injections/282668/1 "2024-05-11T19:54:14Z")

</div>

[![](https://raw.githubusercontent.com/malvads/sqlmc/main/assets/demo.gif) ](https://raw.githubusercontent.com/malvads/sqlmc/main/assets/demo.gif)

# SQLMC - SQL Injection Massive Checker

## Demo

## Overview

SQLMC (SQL Injection Massive Checker) is a tool designed to scan a domain for SQL injection vulnerabilities. It crawls the given URL up to a specified depth, checks each link for SQL injection vulnerabilities, and reports its findings.

## Features

- Scans a domain for SQL injection vulnerabilities
- Crawls the given URL up to a specified depth
- Checks each link for SQL injection vulnerabilities
- Reports vulnerabilities along with server information and depth

## Installation

1. Install the required dependencies:

pip3 install sqlmc

## Usage

Run `sqlmc` with the following command-line arguments:

- `-u, --url`: The URL to scan (required)
- `-d, --depth`: The depth to scan (required)
- `-o, --output`: The output file to save the results

Example usage:

sqlmc -u [http://example.com](http://example.com) -d 2

Replace [http://example.com](http://example.com/) with the URL you want to scan and 3 with the desired depth of the scan. You can also specify an output file using the -o or --output flag followed by the desired filename.

The tool will then perform the scan and display the results.

## ToDo

- Check for multiple GET params
- Better injection checker trigger methods

## Credits

- Developed by [Miguel Álvarez](https://github.com/malvads)

## License

This project is licensed under the [GNU Affero General Public License v3.0](https://github.com/malvads/sqlmc/blob/main/LICENSE).

## GitHub:

> **[GitHub - malvads/sqlmc: Official Kali Linux tool to check all urls of a...](https://github.com/malvads/sqlmc)**
>
> Official Kali Linux tool to check all urls of a domain for SQL injections :)