Automatic SQL injection with Charles and sqlmap api

自动漏洞扫描器，自动子域名爆破，自动爬取注入，调用sqlmapapi检测注入，端口扫描，目录爆破，子网段服务探测及其端口扫描，常用框架漏洞检测。 Automatic scanner, automatic sub domain blasting, automatic crawl injection, injection, call the sqlmapapi port scan detection, directory service detection and segment blasting, port scanning, vulnerability detection framework commonly used.

a sqlmap extender for burp

Docker image for SQLiScanner

sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database

Burp Suite extension that submits requests to the SQLMap REST API, tracks concurrent scans with live log streaming, and persists all results in the Burp project file. Scoped per engagement, no external database required.

use baidu search url to test sqlinjection, you can use it to get lots of vulnerable urls