FreePBX SQL Injection Checker

🔍 Safe, read-only SQLi detector for FreePBX’s /admin/ajax.php focused on template, model, and brand parameters.
🛡️ Uses error-based, boolean-based, and time-based techniques to flag potential injection without modifying the database.
✍️ Per-parameter verdicts + clean JSON report for CI, alerting, or incident response.

🔗 About CVE-2025-57819

• NVD: CVE-2025-57819
• CVE Record: CVE-2025-57819
• FreePBX Security Advisory: GHSA-m42g-xg4c-5f3h

✨ Highlights

• 🧪 Three techniques: error, boolean, time (SLEEP)
• 🧷 Read-only by design: no INSERT/DELETE/UPDATE
• 🧭 Per-parameter results: template, model, brand
• ⏱️ Baseline latency & deltas for reliable timing checks
• 🧰 Proxy-friendly (Burp/ZAP) & CI-ready output
• 🧾 JSON summary for automation & dashboards

🔒 Safety & Ethics

• ✅ Intended for your own systems or systems you’re authorized to test
• ✅ No data writes; diagnostics only
• ⚠️ Check local law and organizational policy before use

🚀 Quick Start

python3 freepbx_sqli_checker.py -H https://your-freepbx.example
python3 freepbx_sqli_checker.py -L examples/targets.txt --delay 1.5 --out-dir reports

📘 Changelog

[v1.1.0] - 2025-09-19

✨ Added

• 🗂️ -L/--list mode - scan multiple hosts from a .txt file (one host per line, # for comments).
• 📄 Output per-host JSON reports into out/ (configurable via --out-dir).
• 🔴 vulnerable.txt - concise summary of vulnerable hosts and the parameters that are vulnerable.
• ⏱️ --delay option - insert a pause between hosts to reduce load (default 1.5s).

📬 Contacts

• LinkedIn
• SecForgeHub Telegram