# 💉 CipherSpear

Advanced database injection analysis and SQL vulnerability detection

## Overview

CipherSpear is a sophisticated database injection analysis tool designed for identifying SQL injection vulnerabilities in web applications and database interfaces. It supports multiple database engines and injection techniques.

## Features

- 💉 SQL injection detection (Union, Boolean, Time-based, Error-based)
- 🗄️ Multi-database support (PostgreSQL, MySQL, MSSQL, Oracle, SQLite)
- 🔍 Automated vulnerability scanning
- 🎯 Custom payload generation
- 📊 Detailed reporting with severity ratings
- 🖥️ GUI interface with real-time feedback
- 🔒 Demo mode for safe testing

## Quick Start

`# Test database connection (demo mode) python -m red-team-tools.cipherspear --demo --json # Test specific database python -m red-team-tools.cipherspear --dsn postgresql://localhost/testdb --demo # GUI mode for interactive testing python -m red-team-tools.cipherspear --gui # Health check python -m red-team-tools.cipherspear --health --json`

## Injection Techniques

- Union-based: Combines results from multiple queries
- Boolean-based: Uses conditional logic to extract data
- Time-based blind: Infers data from response delays
- Error-based: Leverages database error messages
- Stacked queries: Executes multiple statements

⚠️ Authorization Required: Only test databases and applications you own or have explicit written permission to test. Unauthorized SQL injection testing is illegal.

## Best Practices

- Always start with `--demo` mode to understand behavior
- Test against development/staging environments first
- Use read-only database accounts when possible
- Document all findings and report responsibly
- Verify results manually to avoid false positives

← Back to all tools