SQLi Exploitation

Discover SQL Injection vulnerabilities in web applications.

note

The selected target will be scanned with the available tools. Select SQLi Exploitation Tool

To scan using SQLi Exploitation, users can follow these steps.

1. Enter the task name in the Task Name textbox
2. Select one of the scan options, namely Domain, Direct, or Request
   • If the user selects Domain, then only fill in the target value in the form of a domain
   • If the user selects Direct, the path filling will appear
   • If the user selects Request, a request (required) and parameters (optional) will appear.
3. Click the agree Terms of Service checkbox
4. Click the Start Scan button to start the scan, click Cancel if you want to cancel

Running an Authenticated Scan with API Scanner

Users can follow the following steps.

1. After enabling the authentication feature

2. Enter the Login Form URL, the authentication endpoint that issues tokens (e.g., https://loginapi.vulnapp.id/tokens)

3. Enter the Login Request Payload, the login request body in the format the API expects (commonly JSON). Example JSON: {"username":"user1","password":"pass1"}

   note

   Helium does not store any data/credentials on this feature, requests are handled in real-time.

4. Enter the Auth Token Location, the location of the token in the login response using dot notation for nested fields (e.g., access.token.id)

5. Enter the Auth Header Name, the HTTP header the scanner will use to send the token (e.g., X-Auth-Token or Authorization)

6. Enter the Auth Prefix (optional), prefix to include before the token if required (e.g., Bearer: token)

7. Check the box "I am authorized to scan this target and I agree to the Terms of Service."

8. Click APPLY button to start the authenticated scan

   note

   If the scan was run using an authenticated session, you will be required to re-enter your authentication credentials before a database dump can be performed.