hood3drob1n / sqlmap-web-gui

PHP Frontend to work with the SQLMAP JSON API Server (sqlmapapi.py) to allow for a Web GUI to drive near full functionality of SQLMAP!

SQLMAP-Web-GUI

Before anything, this project wouldn't even be possible without the awesome development team behind SQLMAP - hats off to them!

This is a PHP Frontend I made to work with the SQLMAP JSON API Server (sqlmapapi.py) to allow for a Web GUI to drive near full functionality of SQLMAP!

Here is a few quick videos I made to show that almost all of your usual SQLMAP command line functionality is still possible via this Web GUI.

Demo against: Windows 2003 Server, IIS/6.0 + ASP + MS-SQL 2005

• YOUTUBE: http://youtu.be/8MRew20Q1xE

Demo against: Linux (CentOS), Apache, MySQL, PHP

• YOUTUBE: http://youtu.be/cs2Gvss0v-k

Blog Write-Up: http://kaoticcreations.blogspot.com/

Requirements:

• Linux, Apache, PHP (check your favorite distro's wiki or forum pages, or use google)
  • PHP 5.3+ is suggested, older versions not tests so mileage may vary
• Python and any SQLMAP dependencies (refer to their wiki for any help there)
• Clone this repo to your machine
  • Edit the sqlmap/inc/config.php file so the paths all point to the right locations on your system
  • Copy the entire sqlmap/ directory and contents to your web root directory (cd SQLMAP-Web-GUI && cp -R sqlmap/ /var/www/)
  • When you want to use, simply fire up the sqlmap API server (python /home/user/tools/sqlmap/sqlmapapi.py -s)
  • Then you can navigate to the Web GUI address in your Browser to begin (firefox http://127.0.0.1/sqlmap/index.php)

Enjoy!

sqlmap-web-gui's Issues

error while download the result

I can't download the results..

More Features

hey,

Love this project very nice! Could you add user registration and have things like recent targets, un successful, successful attacks etc. I think that would be pretty cool.

Enable TOR

The project is very good indeed, congratulations!
I would love to have an option to enable tor in the sqlmap scan.
In the command line I can use: "--tor"

Basic Auth not working

When enabling "HTTP Authentication" with type Basic I got 401 (Unauthorized)

[INFO] [04:43:33] testing connection to the target URL
[OTHER] [04:43:34] not authorized, try to provide right HTTP authentication type and valid credentials (401)
[WARNING] [04:43:34] HTTP error codes detected during run:
401 (Unauthorized) - 1 times

I had to add a Custom Authorization Header "Authorization: Basic XXXXXXXXXXXXX=" as a workaround to make it work

Web gui setup in osx

I have tried to put the files under /var/www/sqlmap. i can only see nothing here in webgui url created by sqlmapapi.py, that is http://127.0.0.1:8775/. how do i fix this? i am using OSX Sierra.

Docker SQLMAP-Web-GUI

hello I can not find the page 127.0.0.1/sqlmap/index.php
I tried to control your mistletoe in a docker
would you like to help me?

link to the docker https://hub.docker.com/r/alexandreoda/sqlmap/

thank you

missing a manadatory option!

I get this every scan

am i missing somthing?

error in every scan

hi,

i love this project really

but i have an error in every scan but all result is correct:

`Notice: Constant GUI_VERSION already defined in /opt/lampp/htdocs/sqlmap/inc/config.php on line 4

Notice: Constant API_URL already defined in /opt/lampp/htdocs/sqlmap/inc/config.php on line 7

Notice: Constant SQLMAP_BIN_PATH already defined in /opt/lampp/htdocs/sqlmap/inc/config.php on line 11

Notice: Constant SQLMAP_OUTPUT_PATH already defined in /opt/lampp/htdocs/sqlmap/inc/config.php on line 14

Notice: Constant TMP_PATH already defined in /opt/lampp/htdocs/sqlmap/inc/config.php on line 17

Notice: Constant MSF_PATH already defined in /opt/lampp/htdocs/sqlmap/inc/config.php on line 22

Notice: Constant ADMIN_USER already defined in /opt/lampp/htdocs/sqlmap/inc/config.php on line 26

Notice: Constant ADMIN_PASS already defined in /opt/lampp/htdocs/sqlmap/inc/config.php on line 27`

thanks alot bro