sqlmap Websocket Proxy

💉Tool to enable blind sql injection attacks against websockets using sqlmap

Heavily based on an excellent writeup from Rayhan Ahmed: Automating Blind SQL injection over WebSocket

Example

sqlmap-websocket-proxy -u ws://sketcy.lol:1337 -p '{"id": "%param%"}'
python3 sqlmap.py -u  http://localhost:8080/?param1=1

Usage

usage: sqlmap-websocket-proxy [-h] -u URL -d DATA [-p PORT]

options:
  -h, --help            show this help message and exit
  -u URL, --url URL     URL to the websocket (example: ws://vuln_server:1337/ws)
  -d DATA, --data DATA  Paylod with injectable fields encoded as '%param%' (example: {"id": "%param%"})
  -p PORT, --port PORT  Proxy Port (default: 8080)

Installation

PyPI

python3 -m pip install sqlmap-websocket-proxy

Manual

python3 -m pip install sqlmap_websocket_proxy-1.1.0-py3-none-any.whl

Git

python3 -m pip install .

Download Latest Release

Demo

License
- OSI Approved :: MIT License
Operating System
- OS Independent
Programming Language
- Python :: 3

Metadata

License
- OSI Approved :: MIT License
Operating System
- OS Independent
Programming Language
- Python :: 3

Release files for sqlmap-websocket-proxy 1.1.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for sqlmap-websocket-proxy 1.1.0
File	Size	Uploaded	Provenance
sqlmap-websocket-proxy-1.1.0.tar.gz	5.1 kB	Nov 4, 2023	Without provenance	Details

Built distribution (wheel)

Table of built distributions (wheels) for sqlmap-websocket-proxy 1.1.0
File	Interpreter	ABI	Platform	Reset
sqlmap_websocket_proxy-1.1.0-py3-none-any.whl 6.3 kB Nov 4, 2023 Without provenance	Python 3	none	any	Details

Total release size: 11.5 kB

Release files / sqlmap-websocket-proxy-1.1.0.tar.gz

Download URL	sqlmap-websocket-proxy-1.1.0.tar.gz
Size	5.1 kB
Tags	Source
SHA-256 checksum How to use checksums	`0b9fdbaf54bc7abd985b07a9a5a6e57c5b91900ee21071e1fdad4fd0dbf5d722`
BLAKE2b-256 checksum How to use checksums	`903400f4f85d4168d23f74a7777d11da7402624ddf4b2771bb9e87e98c5b9bac`
Upload date	Nov 4, 2023
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/4.0.2 CPython/3.12.0`

Release files / sqlmap_websocket_proxy-1.1.0-py3-none-any.whl

Download URL	sqlmap_websocket_proxy-1.1.0-py3-none-any.whl
Size	6.3 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`902f4ab2b72f4cc19de66a3047e7debe820fdd5f34d05f0491dab717078b3144`
BLAKE2b-256 checksum How to use checksums	`01e1243dcda2ee9fec9b9fb33f60ca52504b151ca9634090dd1ae8a66d684797`
Upload date	Nov 4, 2023
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/4.0.2 CPython/3.12.0`

Security for sqlmap-websocket-proxy 1.1.0

Report project as malware

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Release history Release notifications | RSS feed

This release

1.1.0 This release

Nov 4, 2023 2 release files No provenance

1.0.0

Jan 7, 2023 2 release files No provenance

sqlmap-websocket-proxy 1.1.0