# smxiazi/xia_sql

xia SQL (瞎注)  burp 插件 ，在每个参数后面填加一个单引号，两个单引号，一个简单的判断注入小插件。

Repository: https://github.com/smxiazi/xia_sql
Canonical: https://ross.abutalabs.com/products/xia_sql
Language: Java
License Family: other
Last push: 2023-05-18T11:43:35+00:00

## Health v2 (maintenance only)
Score: 23/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 0, release rhythm 8, longevity 100
- inputs: {"age_days": 1666, "days_push": 1203, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1286, forks 85 (observed 2026-08-28T04:04:14.920867+00:00)

## What it is
A Burp Suite extension (written in Java) that appends single and double quotes to every request parameter to detect possible SQL injection, flagging length differences and database error keywords for manual review. It supports JSON nested parameters, cookies, custom payloads, time-based blind injection hints, and Proxy/Repeater traffic monitoring.

## Use cases
- detect sql injection in burp proxy traffic
- test request parameters for injection with quote payloads
- find database error messages in http responses
- scan json nested parameters for sql injection
- test cookies for sql injection
- run custom payloads for time-based blind injection

## When to choose
- you want a lightweight, quick-pass SQL injection hint tool inside Burp Suite
- you prefer manual verification of injection findings over fully automated scanners
- you need to test JSON, cookies, or numeric parameters with simple quote payloads

## When to avoid
- you need comprehensive automated SQL injection testing with full exploit capabilities
- you want a standalone scanner outside Burp Suite
- you require guaranteed compatibility with the latest Burp/JDK versions without rebuilding

## Facets
- artifact type: plugin
- maturity: maintenance
- function: penetration-testing, security, developer-tools
- domain: security, penetration-testing, web-development, developer-tools
- platform: jvm, cross-platform
- tags: burp-suite-extension, sql-injection, vulnerability-scanning, web-security, manual-testing

## Member repositories
- smxiazi/xia_sql (main) score 23

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:14.920867+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T04:56:36.811337+00:00, confidence not recorded.
  - readme: https://github.com/smxiazi/xia_sql (fetched 2026-08-28T04:04:14.920867+00:00, sha 7eb5e931cbf9)
- Data as of 2026-08-30T08:39:29.467469+00:00.