peter-cui1221 / sqlinjection-detect

SQL injection detection engine built on of SQL tokenizing and syntax analysis written in C

sqlinjection-detect

SQL injection detection engine built on of SQL tokenizing and syntax analysis written in C

Simple example:

#include <stdio.h>
#include <string.h>
#include "sqli_detect.h"

int main(int argc, char* argv[]) {
    char *str = "1' or '1'='1";
    int ret = sqli_detect(str, strlen(str));
    if (ret > 0) {
        printf("sqli found\n");
    }
    return ret;
}

vs libinjection

sqlinjection-detect is a kind of sql injection library based on tokenizing and syntax analysis, which can effectively improve the detection rate and reduce false positives. In contrast, libinjection(https://github.com/client9/libinjection). is base on tokenizing. sqlinjection-detect is the same to sqlshop of chaitin (https://github.com/chaitin/sqlchop).

sqlinjection-detect是一款基于语义分析的SQL注册检测库，能够有效的提高检出率，减少误报。相比之下，libinjection(https://github.com/client9/libinjection) 是一款基于词法分析SQL注入检测库。sqlinjection-detect和长亭的SQLChop(https://github.com/chaitin/sqlchop) 从功能的角度来看是一样的。

usage

$ yum install sqlite-devel.x86_64

$ ./build.sh
$ cmake . -DCMAKE_BUILD_TYPE=Release
$ make

$ gcc -I src/include/ sqli_test.c -o sqli_test -L. -lsqli_detect
$ ./test.sh

thanks

this project is base on https://github.com/winkyao/lemon

sqlinjection-detect's Issues

这个检测方案原理不可行

这个检测方案原理不可行，原因是虽然payload拼装前缀得到的sql出现语法错误，但是并不能说明这个payload不是sql注入，因为payload可能出现在sql的任意位置

可以介绍一下windows的用法嘛？

Is there a usage on windows?

似乎是依赖lemon做语法解析，只支持sqlite数据库？

会支持mysql数据库吗？