loading
Loading content
loading
Vulnerabilities
Tiny SQLi check for GET and POST parameters on one URL.
overview
Run dsss as a confirmation step after URL discovery: feed one parameterized URL and read FOLDER and FILE findings before opening sqlmap.
Reach for it when you already suspect a parameter and want a small error-based or blind SQLi check before opening sqlmap.
Wire -u for the target, --data for POST bodies, plus --cookie, --referer, --user-agent, and --proxy. Use sibling dsxs for XSS on the same URL shape.
source github.com/stamparm/dsss
use cases
Point dsss at a single parameterized URL to verify whether a GET or POST parameter is injectable, without spinning up a heavy scanner.
Set the Cookie, Referer, and User-Agent headers so dsss reaches pages behind a session or a basic filter and tests the parameters there.
Send traffic through an HTTP proxy with --proxy to log every request for review or to chain dsss behind a tool that rewrites traffic.
Fan dsss across URLs collected by an earlier crawling or discovery stage to flag which endpoints deserve a deeper look with sqlmap.
reference
| Name | Type | Flag | Description |
|---|---|---|---|
| url | STRING | -u | Target URL, e.g. http://www.target.com/page.php?id=1. |
| post-data | STRING | --data | POST data to test, e.g. query=test. |
| cookie | STRING | --cookie | HTTP Cookie header value. |
| user-agent | STRING | --user-agent | HTTP User-Agent header value. |
| referer | STRING | --referer | HTTP Referer header value. |
| proxy | STRING | --proxy | HTTP proxy address, e.g. http://127.0.0.1:8080. |
Showing key inputs. dsss exposes 6 inputs in total.
example
# confirm a GET parameter is injectable, routed through a local proxypython dsss.py -u "http://example.com/item.php?id=42" --cookie "PHPSESSID=8f2b1c" --proxy "http://127.0.0.1:8080"Damn Small SQLi Scanner (DSSS) < 100 LOC (Lines of Code) #v0.4c by Miroslav Stampar (@stamparm) * scanning GET parameter 'id'(i) GET parameter 'id' could be error SQLi injectable (possible DBMS: 'MySQL')* scanning GET parameter 'ref'* scanning POST parameter 'query'(i) POST parameter 'query' could be blind SQLi injectableguidance
Use dsss for a lightweight SQLi confirmation on one parameterized URL. Sibling dsxs covers XSS the same way. For exploitation or data extraction, move to sqlmap.
Sibling damn-small scanner for reflected XSS. Same minimal request shape, different vulnerability class.
Full SQLi tool with exploitation and database takeover. dsss stays a tiny confirmation check.
faq
related
Automates OS command injection detection and exploitation.
Subdomain takeover scanner with cloud-zone intake.
Locate public CVE proof-of-concept repositories on GitHub.
Decode, forge, crack, and tamper JWTs for auth checks.
Triage reflected special characters on parameterized URLs.
Detect and exploit SQL injection on authorized web targets.
A target URL feeds dsss, which tests its GET and POST parameters for SQL injection and writes the findings as a queryable output.
Facts on this page come from the live Trickest tool library.