r0oth3x49/ghauri
Ghauri
Ghauri is an automated SQL injection scanner and exploitation tool designed to detect and extract data from vulnerable databases. It functions as a database exfiltration framework that identifies security flaws and retrieves system banners, hostnames, and database schemas.
The tool identifies boolean, error, time-based, and stacked query vulnerabilities across multiple input vectors, including HTTP headers, cookies, JSON, SOAP, and XML. It provides capabilities for automated database exfiltration and the processing of bulk target lists to identify flaws across multiple environments.
The system includes network traffic obfuscation through proxy routing and user-agent randomization to bypass security restrictions. It also manages session state persistence to allow the resumption of interrupted data extraction processes and provides controls to limit the volume of retrieved records.
Features
- Automated Database Exfiltration - Extracts structured data from vulnerable databases, including table names, column entries, and system banners, using automated scripts.
- SQL Injection Scanners - Provides automated scanning to detect boolean, error, time-based, and stacked query SQL injection vulnerabilities.
- Database Enumerators - Retrieves system banners, hostnames, current users, and full database schemas including table entries.
- Bulk Vulnerability Scanning - Enables processing bulk vulnerability tests by loading lists of target addresses or HTTP requests from text files.
- Automated Vulnerability Detection - Identifies security flaws by injecting boolean, error, time-based, and stacked query sequences into targeted input vectors.
- Database Exfiltration Frameworks - Implements a system for retrieving database structures, table entries and system banners through various HTTP input vectors.
- Security Vulnerability Scanning - Performs bulk security tests against lists of target addresses to identify SQL injection flaws across multiple environments.
- SQL Injection Tools - Automates the detection and extraction of data from databases by exploiting SQL injection vulnerabilities.
- Vulnerability Analysis - Probes various HTTP input vectors including JSON, SOAP, XML, and cookies to identify exploitable injection points.
- Web Application Penetration Testing - Evaluates the security of web services by probing multiple input vectors like HTTP headers, cookies, and JSON payloads.
- Session State Persistence - Allows the resumption of interrupted exploitation phases by controlling cached results and session file persistence.
- Exploitation State Persisters - Saves exploitation progress to local files to allow resuming data extraction without restarting the discovery phase.
- File-Based Target Loading - Loads sets of target addresses or raw HTTP requests from text files for automated sequential vulnerability testing.
- HTTP Request Customizations - Allows modification of connection parameters including custom user agents, proxy settings, headers, timeouts, and request delays.
- Traffic Masking Proxies - Redirects outbound HTTP requests through a proxy server to mask the origin and bypass network restrictions.
- User Agent Rotation - Rotates the identity string sent in HTTP headers to evade detection by security systems during bulk scanning.
- Network Traffic Obfuscators - Routes security tests through proxies and uses randomized user agents to bypass detection systems.
- Input Type Abstractions - Standardizes payload delivery across various transport formats like JSON, SOAP, XML, cookies, and HTTP headers.
- Exploitation Tools - Automates detection and exploitation of SQL injection.
- Specialized Vulnerability Scanners - Automated tool for detecting and exploiting SQL injection flaws.
- XSS and Injection Testing - Automated SQL injection detection and exploitation tool.
