Developed by Aashif M
A lightweight Python-based web vulnerability scanner for detecting XSS (Cross-Site Scripting) and SQL Injection (SQLi) vulnerabilities in HTML forms.
- Crawls the website, extracts and scans all HTML forms.
- Tests for XSS using custom payloads.
- Tests for SQLi using known injection patterns.
- Easy to customize payloads (located in
payloads/directory).
- Git Clone
git clone https://github.com/aashifm1/Red-Inject.git
- Make virtual environment
python -m venv venv source venv/bin/activate - Install the Requiremnets
pip install -r requirements.txt
- Run the script
python3 redinject.py -h
Example Command: python3 redinject.py --depth 2 https://www.example.com