r0oth3x49/ghauri

Health v2 · maintenance only

Adoption not part of the score

4070 stars · 422 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Ghauri is a cross-platform Python CLI tool that automates detection and exploitation of SQL injection vulnerabilities in web applications. It supports boolean, error, time-based, and stacked-query injection techniques against MySQL, MSSQL, Postgres, Oracle, and Access, across GET/POST, headers, cookies, JSON, and SOAP/XML inputs.

Use cases

• detect sql injection vulnerabilities in a web app
• automate sql injection testing like sqlmap
• extract database data via blind sql injection
• test json and soap endpoints for sqli
• inject payloads via http headers and cookies
• resume an interrupted sql injection session

When to choose

• you need a modern, actively maintained sqlmap alternative
• you need JSON, SOAP/XML, or multipart form injection support
• you want proxy support and resumable extraction phases

When to avoid

• you need a GUI-based vulnerability scanner
• you need broad DBMS coverage beyond the supported engines
• you need general web vulnerability scanning beyond SQLi

Facets

cli-tool · maturity active

penetration-testing security cli security penetration-testing databases developer-tools python windows cli cross-platform sql-injection sqlmap-alternative exploitation web-security database-exploitation pentesting linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="r0oth3x49/ghauri")