sqlmap-ai 2.0.0__tar.gz

sqlmap_ai-2.0.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

sqlmap_ai-2.0.0/PKG-INFO

@@ -0,0 +1,415 @@
+Metadata-Version: 2.4
+Name: sqlmap-ai
+Version: 2.0.0
+Summary: AI-powered SQL injection testing tool with multiple AI providers
+Home-page: https://github.com/atiilla/sqlmap-ai
+Author: Atilla
+Author-email: Atilla <attilla@tuta.io>
+Maintainer-email: Atilla <attilla@tuta.io>
+License-Expression: MIT
+Project-URL: Homepage, https://github.com/atiilla/sqlmap-ai
+Project-URL: Documentation, https://github.com/atiilla/sqlmap-ai#readme
+Project-URL: Repository, https://github.com/atiilla/sqlmap-ai.git
+Project-URL: Issues, https://github.com/atiilla/sqlmap-ai/issues
+Keywords: sqlmap,sql-injection,security,ai,penetration-testing,cybersecurity
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Information Technology
+Classifier: Intended Audience :: System Administrators
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.8
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Security
+Classifier: Topic :: System :: Systems Administration
+Classifier: Topic :: Internet :: WWW/HTTP :: HTTP Servers
+Classifier: Topic :: Software Development :: Testing
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: python-dotenv>=1.0.0
+Requires-Dist: groq>=0.4.0
+Requires-Dist: requests>=2.31.0
+Requires-Dist: openai>=1.3.0
+Requires-Dist: anthropic>=0.8.0
+Requires-Dist: pyyaml>=6.0.1
+Requires-Dist: rich>=13.0.0
+Requires-Dist: jinja2>=3.1.2
+Requires-Dist: cryptography>=3.4.0
+Provides-Extra: dev
+Requires-Dist: pytest>=7.0.0; extra == "dev"
+Requires-Dist: pytest-asyncio>=0.21.0; extra == "dev"
+Requires-Dist: black>=23.0.0; extra == "dev"
+Requires-Dist: flake8>=6.0.0; extra == "dev"
+Requires-Dist: mypy>=1.0.0; extra == "dev"
+Provides-Extra: local-llm
+Requires-Dist: transformers>=4.35.0; extra == "local-llm"
+Requires-Dist: torch>=2.1.0; extra == "local-llm"
+Provides-Extra: reporting
+Requires-Dist: plotly>=5.0.0; extra == "reporting"
+Requires-Dist: pandas>=2.0.0; extra == "reporting"
+Provides-Extra: all
+Requires-Dist: pytest>=7.0.0; extra == "all"
+Requires-Dist: pytest-asyncio>=0.21.0; extra == "all"
+Requires-Dist: black>=23.0.0; extra == "all"
+Requires-Dist: flake8>=6.0.0; extra == "all"
+Requires-Dist: mypy>=1.0.0; extra == "all"
+Requires-Dist: transformers>=4.35.0; extra == "all"
+Requires-Dist: torch>=2.1.0; extra == "all"
+Requires-Dist: plotly>=5.0.0; extra == "all"
+Requires-Dist: pandas>=2.0.0; extra == "all"
+Dynamic: author
+Dynamic: home-page
+Dynamic: license-file
+Dynamic: requires-python
+
+# SQLMap AI Assistant
+
+An AI-powered wrapper around SQLMap that makes SQL injection testing more accessible and automated.
+
+## Features
+
+- AI-assisted SQL injection testing
+- Automated result analysis and next step suggestions
+- User-friendly output and reporting
+- **NEW: Adaptive step-by-step testing with DBMS-specific optimizations and WAF bypass**
+- **NEW: Ollama support for local AI analysis**
+
+## Quick Start
+
+### Step 1: Install SQLMap AI
+
+```bash
+# Clone the repository
+git clone https://github.com/yourusername/sqlmap-ai.git
+cd sqlmap-ai
+
+# Install the package
+pip install -e .
+
+# Run installation check (sets up SQLMap and creates config files)
+sqlmap-ai --install-check
+
+pip install sqlmap-ai
+```
+
+### Step 2: Configure AI Providers
+
+Choose one or more AI providers to use:
+
+#### Option A: Groq (Recommended - Fastest)
+1. Get a free API key from [https://console.groq.com](https://console.groq.com)
+2. Add to your `.env` file:
+```bash
+GROQ_API_KEY=your_groq_api_key_here
+```
+
+#### Option B: OpenAI
+1. Get an API key from [https://platform.openai.com](https://platform.openai.com)
+2. Add to your `.env` file:
+```bash
+OPENAI_API_KEY=your_openai_api_key_here
+```
+
+#### Option C: Anthropic (Claude)
+1. Get an API key from [https://console.anthropic.com](https://console.anthropic.com)
+2. Add to your `.env` file:
+```bash
+ANTHROPIC_API_KEY=your_anthropic_api_key_here
+```
+
+#### Option D: Ollama (Local AI - Privacy Focused)
+1. Install Ollama: [https://ollama.ai/download](https://ollama.ai/download)
+2. Start Ollama service:
+```bash
+ollama serve
+```
+3. Download a model:
+```bash
+ollama pull llama3.2
+```
+4. Enable in your `.env` file:
+```bash
+ENABLE_OLLAMA=true
+OLLAMA_MODEL=llama3.2
+```
+
+### Step 3: Run Configuration Wizard
+
+```bash
+# Interactive setup
+sqlmap-ai --config-wizard
+```
+
+This will:
+- Check your AI provider setup
+- Let you select Ollama models (if using Ollama)
+- Configure security settings
+- Set up SQLMap options
+
+### Step 4: Test Your Setup
+
+```bash
+# Check if everything is working
+sqlmap-ai --check-providers
+
+# List available Ollama models (if using Ollama)
+sqlmap-ai --list-ollama-models
+```
+
+## Usage Examples
+
+### Basic SQL Injection Test
+
+```bash
+# Test a vulnerable website
+sqlmap-ai -u "http://example.com/page.php?id=1"
+
+# Use specific AI provider
+sqlmap-ai -u "http://example.com/page.php?id=1" --ai-provider groq
+```
+
+### Advanced Testing
+
+```bash
+# Adaptive testing (recommended)
+sqlmap-ai --adaptive
+
+# Simple mode (basic SQLMap without AI)
+sqlmap-ai --simple -u "http://example.com/page.php?id=1"
+```
+
+### AI Provider Selection
+
+```bash
+# Use Groq (fastest)
+sqlmap-ai -u "http://example.com/page.php?id=1" --ai-provider groq
+
+# Use Ollama (local, private)
+sqlmap-ai -u "http://example.com/page.php?id=1" --ai-provider ollama
+
+# Use OpenAI
+sqlmap-ai -u "http://example.com/page.php?id=1" --ai-provider openai
+
+# Auto-select best available
+sqlmap-ai -u "http://example.com/page.php?id=1" --ai-provider auto
+```
+
+## AI Providers Comparison
+
+| Provider | Setup | Speed | Privacy | Cost |
+|----------|-------|-------|---------|------|
+| **Groq** | API Key | ⚡ Fastest | Cloud | Free tier available |
+| **OpenAI** | API Key | ⚡ Fast | Cloud | Pay per use |
+| **Anthropic** | API Key | ⚡ Fast | Cloud | Pay per use |
+| **Ollama** | Local install | Fast | 🔒 Local | Free |
+
+## Configuration Files
+
+### .env File
+Created automatically by `sqlmap-ai --install-check`:
+
+```bash
+# AI Provider API Keys
+GROQ_API_KEY=your_groq_api_key_here
+OPENAI_API_KEY=your_openai_api_key_here
+ANTHROPIC_API_KEY=your_anthropic_api_key_here
+
+# Ollama Settings (if using local AI)
+ENABLE_OLLAMA=false
+OLLAMA_BASE_URL=http://localhost:11434
+OLLAMA_MODEL=llama3.2
+
+# Security Settings
+MAX_REQUESTS_PER_MINUTE=60
+SAFE_MODE=true
+AUDIT_LOGGING=true
+```
+
+### config.yaml
+Created automatically by `sqlmap-ai --config-wizard`:
+
+```yaml
+version: "2.0"
+security:
+  safe_mode: true
+  max_requests_per_minute: 60
+  audit_logging: true
+
+sqlmap:
+  default_timeout: 120
+  default_risk: 1
+  default_level: 1
+  default_threads: 5
+
+ui:
+  show_banner: true
+  interactive_mode: false
+```
+
+## Troubleshooting
+
+### Common Issues
+
+**1. "No AI providers available"**
+- Check your `.env` file has correct API keys
+- Run `sqlmap-ai --check-providers` to verify
+
+**2. "Ollama not detected"**
+- Make sure Ollama is running: `ollama serve`
+- Check if models are installed: `ollama list`
+- Verify `.env` has `ENABLE_OLLAMA=true`
+
+**3. "SQLMap not found"**
+- Run `sqlmap-ai --install-check` to install SQLMap
+- Or install manually: `pip install sqlmap`
+
+**4. "Configuration issues"**
+- Run `sqlmap-ai --config-wizard` to fix setup
+- Check `sqlmap-ai --validate-config` for issues
+
+### Getting Help
+
+```bash
+# Show all available commands
+sqlmap-ai --help
+
+# Show enhanced mode help
+sqlmap-ai --enhanced --help
+
+# Show simple mode help
+sqlmap-ai --simple --help
+```
+
+## Advanced Features
+
+### Adaptive Testing Mode
+Automatically adapts testing strategy based on target:
+
+```bash
+sqlmap-ai --adaptive
+```
+
+This mode:
+1. **Initial Assessment** - Check for SQL injection vulnerabilities
+2. **DBMS Identification** - Detect database type
+3. **DBMS-Specific Attacks** - Use optimized techniques
+4. **WAF Bypass** - Automatically select tamper scripts
+5. **Data Extraction** - Extract sensitive information
+6. **Alternative Testing** - Test POST, cookies, headers
+
+### Ollama Model Selection
+
+If using Ollama, you can select different models:
+
+```bash
+# List available models
+sqlmap-ai --list-ollama-models
+
+# Interactive model selection
+sqlmap-ai --config-wizard
+```
+
+Popular models:
+- **llama3.2** - Good general performance
+- **codellama** - Specialized for code analysis
+- **mistral** - Fast and efficient
+- **qwen2.5** - Good reasoning capabilities
+
+### Result:
+```json
+{
+  "timestamp": 1755896586,
+  "scan_info": {
+    "vulnerable_parameters": [
+      "cat"
+    ],
+    "techniques": [
+      "MySQL"
+    ],
+    "databases": [],
+    "tables": [],
+    "columns": {},
+    "dbms": "back-end DBMS: MySQL >= 5.6",
+    "os": "Unknown",
+    "waf_detected": false,
+    "web_app": [],
+    "payloads": [],
+    "raw_result": "[+] the following parameters are vulnerable to SQL injection:\n    Parameter: cat (GET)\n[+] back-end DBMS: back-end DBMS: MySQL >= 5.6\n[+] banner: 8.0.22-0ubuntu0.20.04.2",
+    "url": "",
+    "extracted": {}
+  },
+  "scan_history": [
+    {
+      "step": "initial_reconnaissance",
+      "command": "sqlmap -u http://testphp.vulnweb.com/listproducts.php?cat=1 --fingerprint --dbs",
+      "result": {
+        "vulnerable_parameters": [
+          "cat"
+        ],
+        "techniques": [
+          "MySQL"
+        ],
+        "databases": [
+          "acuart",
+          "information_schema"
+        ],
+        "tables": [],
+        "columns": {},
+        "dbms": "back-end DBMS: MySQL >= 5.6",
+        "os": "Unknown",
+        "waf_detected": false,
+        "web_app": [],
+        "payloads": [],
+        "raw_result": "[+] the following parameters are vulnerable to SQL injection:\n    Parameter: cat (GET)\n[+] back-end DBMS: back-end DBMS: MySQL >= 5.6\n[+] banner: 8.0.22-0ubuntu0.20.04.2\n[+] available databases [2]:\n[*] acuart\n[*] information_schema",
+        "url": "",
+        "extracted": {}
+      }
+    },
+    {
+      "step": "follow_up_scan",
+      "command": "sqlmap -u http://testphp.vulnweb.com/listproducts.php?cat=1 ['-D acuart --tables', '-D acuart --columns', '-D acuart -T users --dump']",
+      "result": {
+        "vulnerable_parameters": [
+          "cat"
+        ],
+        "techniques": [
+          "MySQL"
+        ],
+        "databases": [],
+        "tables": [],
+        "columns": {},
+        "dbms": "back-end DBMS: MySQL >= 5.6",
+        "os": "Unknown",
+        "waf_detected": false,
+        "web_app": [],
+        "payloads": [],
+        "raw_result": "[+] the following parameters are vulnerable to SQL injection:\n    Parameter: cat (GET)\n[+] back-end DBMS: back-end DBMS: MySQL >= 5.6\n[+] banner: 8.0.22-0ubuntu0.20.04.2",
+        "url": "",
+        "extracted": {}
+      }
+    }
+  ]
+}
+```
+
+## Requirements
+
+- Python 3.8+
+- SQLMap (installed automatically)
+- Internet connection (for cloud AI providers)
+- 2GB+ RAM (for Ollama local models)
+
+## License
+
+This project is licensed under the MIT License.
+
+## Disclaimer
+
+This tool is intended for educational and ethical hacking purposes only. Always obtain permission before testing any system or application. The developers are not responsible for any misuse or damage caused by this tool.
+
+## Star History
+
+[![Star History Chart](https://api.star-history.com/svg?repos=atiilla/sqlmap-ai&type=Date)](https://www.star-history.com/#atiilla/sqlmap-ai&Date)