# sql-injection-detect

**Repository Path**: joyven/sql-injection-detect

## Basic Information

- **Project Name**: sql-injection-detect
- **Description**: No description available
- **Primary Language**: Unknown
- **License**: Not specified
- **Default Branch**: main
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 0
- **Created**: 2026-01-04
- **Last Updated**: 2026-01-04

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

# SQL Injection Detection Tool

This is a set of tools for detecting SQL injection, including implementations in both C and Python.

## Features

- Utilizes lexical and syntactic analysis techniques
- Supports detection of multiple SQL keywords and patterns
- Provides whitelist filtering mechanism
- Supports regular expression matching

## Directory Structure

- `sqli_detect_c/` - C language implementation
- `sqli_detect_py/` - Python implementation

## Installation Requirements

- C compiler (GCC)
- Python 3.x
- Hyperscan library

## Compilation and Execution (C Version)

1. Navigate to the `sqli_detect_c/` directory
2. Run the `make` command to compile the project
3. Execute `./sqli_detect` to run the detection tool

For detailed compilation instructions, refer to `sqli_detect_c/README.md`.

## Compilation and Execution (Python Version)

1. Navigate to the `sqli_detect_py/` directory
2. Install dependencies: `pip install -r requirements.txt`
3. Run tests: `python main.py`

For detailed instructions, refer to `sqli_detect_py/README.md`.

## Configuration Files

Configuration files are located in the `conf/` subdirectory of each version and include:

- Keyword lists
- Pattern rules
- Whitelist rules
- Hyperscan rules

## Usage Instructions

The tool supports multiple detection modes:
- Syntax detection
- Semantic detection
- Pattern matching
- Keyword detection

Input the SQL statement to be detected; the tool will output one of the following results:
- SQLI (potential injection risk)
- SQLI_ERR (semantic error injection)
- NORMAL (normal statement)

## Contributions

Pull requests are welcome to optimize detection rules or improve detection algorithms.

## License

This project is licensed under the MIT License. See the LICENSE file for details.