I'm wondering, if it's possible to discover all the endpoints for any product which is prone to SQL injection.

I want all the endpoints where I can apply SQL injection on my site.

closed as too broad by Conor Mancone, Xander, multithr3at3d, Steffen Ullrich, Graham Hill Aug 12 at 14:00

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • 1
    So you are looking for a tool where you type someTool example.com and it reports all SQL vulnerabilities to you? – MechMK1 Aug 9 at 12:56
  • There are code review tools out there that could do this task for you or if you understand what SQL injection is, you could go through the code of your website yourself in order to determine what is and what is not inject-able. – Jeroen Aug 9 at 13:08

There are quite a few tools out there that can help find vulnerabilities, such as SQL injection points - none of these will find all of them.

Blackbox testing - This is described by Vipul in his answer and involves testing / fuzzing the interfaces exposed in the application (UIs, Services...). These are closer to how an attacker might look at the system, but are limited by how much attack surface they can cover. Examples

Whitebox testing - These analyze the code (Source Code Analyzers), classes, or binaries to do code or data traces. These look at all the code at once, but often don't understand attack surface or mitigations out of the box. Think of these as code review on steroids Examples

There are also tools which combine these two techniques and attempt to look at the code as it's being exercised at runtime.


I'm wondering, if it's possible to discover all the endpoints for any product which is prone to SQL injection.

NO ! Well wouldn't that be a magical tool.

Well there are a lot of scanners that might crawl your site and try inserting sql statements and then check the returned result.Google them and you will find scanners or crawlers.But again you will not discover all end points nor will you beat any experienced attacker with enough time with such a methodology.A human presence will always be required.NOTE:-This answer is for Blackbox perspective

Not the answer you're looking for? Browse other questions tagged or ask your own question.