nu11secur1ty/chusachusa - 注射 - the new generation of sqlmap
Chusa - 注射 is an open source penetration testing tool based on SQLmap that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switches, including database fingerprinting, over data fetching from the database, accessing the underlying file system, and executing commands on the operating system via out-of-band connections.
Preferably, you can download chusa by cloning the Git repository:
git clone --depth 1 https://github.com/nu11secur1ty/chusa.git chusa-dev
chusa works out of the box with Python version 2.6, 2.7 and 3.x on any platform.
To get a list of basic options and switches use:
python chusa.py -h
To get a list of all options and switches use:
python chusa.py -hh
You can find a demonstration run here here.
To get an overview of chusa capabilities, a list of supported features, and a description of all options and switches, along with examples, you are advised to consult the user's manual.
Disclaimer: Usage of chusa for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program.