sqlmapproject / sqlmap

Automatic SQL injection and database takeover tool
http://sqlmap.org
Other
32.59k stars 5.73k forks source link

GUI prototyping #3504

Open stamparm opened 5 years ago

stamparm commented 5 years ago

References for my future self:

https://github.com/ubbn/wxPython

687766616e commented 5 years ago

web gui too? pls.....~! 😶

and command generator: http://tools.k2an.com/?page=sqlmapCommandGenerator https://github.com/helloingob/SqlmapCmdGen

hastalamuerte commented 4 years ago

Hello @stamparm . Thank you a lot for you child (sqlmap) , thanks for answering on all isues and not leaving project and stable patching and upgrading.

https://portswigger.net/daily-swig/sqlmap-plans-to-prototype-gui-support - found this daily swig about gui))

I was testing many versions of gui / web / frame - all of them .... bad)

there is only one good imho, with full (on creating date 6 years ago) functional , and usable gui ---> -----> https://github.com/kxcode/gui-for-sqlmap screens https://prnt.sc/tomkti - main https://prnt.sc/tomkyc - injection detection technique https://prnt.sc/toml5w - request ( great to make direct adding to gui request in standart txt file or txt plain text ) https://prnt.sc/tomlht - enumeration https://prnt.sc/tomlrk - acces https://prnt.sc/tomly1 - customizeable Logviewer (cool) https://prnt.sc/tomm5z - ow here is editor) But of course many things added , missed, changed and it dont work on Python 3 . But realy its the best gui about functional . Desing in 2020 move on of course)

here is fresh* chineese version https://github.com/needle-wang/sqlmap-gtk - but they dont want to make multi language))))

Maybe @kxcode can collaborate with you to making official gui with sqlmap stylistic design (console coloring - we all love it for shure, or something like this) . If he inrested in it of course Dont know what to think about web panel.. like meta pro? why not. but frame is more than ok.

Hope official GUI will be great!

stamparm commented 4 years ago

@hastalamuerte thank you for the info on kxcode/gui-for-sqlmap. Looks promising. If @kxcode would help/contribute, I would be more than happy. Also, I would give an active support in such efforts.

As of "where-to" for sqlmap GUI. I played both with web panel (yes, like metasploit) and TkInter. As a matter of fact, --gui as a prototype is already available for some time in sqlmap, but it requires some serious revamping (i.e. doesn't look representative):

gui

c2xusnpq6 commented 3 years ago

https://github.com/needle-wang/sqlmap-wx https://github.com/needle-wang/sqlmap-gtk

hastalamuerte commented 3 years ago

https://github.com/needle-wang/sqlmap-wx https://github.com/needle-wang/sqlmap-gtk

sorry for DIZ but its look like... BURPSUITE ON MINIMALS from WOOHAN. Only @kxcode (or he forked it idk) and one other guy (unknown light gui) made an easy intuitive designe for sqlmapgui . Now in original sqlmap --gui just skeletone of commands and pythongui , wich open at top always (hello upper comand menu) , have no scroll for long list of commands and on run- open another console it not good IMHO (i love sqlmap anyway! and understand that this is not priority task for devs )

kxcode gui was work with original cmd(pwsh) and have own console log for easy tables run (and other). Imho again - this is perfection for sqlmap gui - but with sandy beard wich start grow many years ago. It can be modifed and upgrade for shure for real workable tool . Made easy/pro visualization modes (tumbler) for some commands to not overweight UI (let user setup modes ) and many many other. I just ask with respect - @kxcode made some new one plz) in 2021

c2xusnpq6 commented 3 years ago

@hastalamuerte sorry for DIZ??? bruh?????? u don't like ̶c̶h̶i̶n̶e̶s̶e̶ zhinese? HAHA

c2xusnpq6 commented 3 years ago

hker? haaaaaaaaaa

hastalamuerte commented 3 years ago

@hastalamuerte sorry for DIZ??? bruh?????? u don't like zhinese? HAHA

I am ok with chineese , kxcode from some china too . Read better

c2xusnpq6 commented 3 years ago

kxcode from some china too .

ok~~ haha

c2xusnpq6 commented 3 years ago

This is his Facebook page~ (but Chinese version) https://weibo.com/u/1624430122 @hastalamuerte

needle-wang commented 3 years ago

@hastalamuerte sorry for DIZ??? bruh?????? u don't like zhinese? HAHA

I am ok with chineese , kxcode from some china too . Read better

I am working on it, I've just realised that chinese version which is hard to maintain is a stupid idea. ~~I dreamt of having myself chinese version gui in the past. i was thinking why all good softwares are english version. Chinese localization was full desperate requirement in our software history. so many people waste their time on the translation of gui and docs.~~ I will turn sqlmap-gtk into english. and multi-language GUI strings will be stripped from source code.(thanks to my refactor) It may make source code clean and convenient to maintain. btw, wxPython is hard to control.(is Cross-platform still a dream?) I am pleased to see official GUI.

hastalamuerte commented 3 years ago

@hastalamuerte sorry for DIZ??? bruh?????? u don't like zhinese? HAHA

I am ok with chineese , kxcode from some china too . Read better

I am working on it, I've just realised that chinese version which is hard to maintain is a stupid idea. ~I dreamt of having myself chinese version gui in the past. i was thinking why all good softwares are english version. Chinese localization was full desperate requirement in our software history. so many people waste their time on the translation of gui and docs.~ I will turn sqlmap-gtk into english. and multi-language GUI strings will be stripped from source code.(thanks to my refactor) It may make source code clean and convenient to maintain. btw, wxPython is hard to control.(is Cross-platform still a dream?) I am pleased to see official GUI

Hello! Official gui is acceptable by --gui command.

In one big community.. where users was test and talk about gui for sqlmap , one of them made gui by himself (it was extra easy and lightweight - not with all functions, but many pentesters still use it) https://prnt.sc/wejom6 here how its look. Its also local language)) Russian. And for most of sqlis it functional and commands was enough and still enough. Too heavy user interface without customization, hiding not usable by user commands or switching to pro mode - not best idea. Realy. I am very appreciate your work @needle-wang , just wanna someday see gui of dream))

omlinky commented 3 years ago

New GUI is present now for macOS, Windows, and Linux. Just follow my GitHub Sqlmap GUI

stamparm commented 3 years ago

@IIIsToRmIII pretty sure that this is a violation of some license permissions