← All tool guides

SQLScan

Auto-generated by Q-Branch Armory audit on 2026-10-12.

Overview

SQLScan is a quick web scanner to find SQL injection points. Not for educational purposes.

Classification

  • **Category:** SQL Injection Tools
  • **Armory status:** Installed (sqlscan)
  • **Q-Branch check:** Ready — binary found in PATH
  • **Present on VPS3:** yes
  • **Installed flag:** yes
  • **Primary binary:** `sqlscan`
  • **Binary in PATH:** yes
  • **Resolved path:** `/usr/local/bin/sqlscan`

    • Prerequisites

  • docker
  • go
  • java
  • root
  • ruby
  • wifi

    • Install

    
sudo apt install php php-bz2 php-curl php-mbstring curl
sudo curl https://raw.githubusercontent.com/Cvar1984/sqlscan/dev/build/main.phar --output /usr/local/bin/sqlscan
chmod +x /usr/local/bin/sqlscan

    Run

    
sudo sqlscan

    Operator notes

  • Launch from the [Digital Armory](/pentest/armory/) — do not maintain parallel tool lists in Q-Branch.
  • If the Q-Branch check is not **Ready**, run install steps or update the HackingTool manifest before relying on this tool in an engagement.
  • For authorized TenguProtect red-team work only.

    • Reference

    https://github.com/Cvar1984/sqlscan