SQLMutant

Shell tool that enumerates a domain's URLs and parameters, then tests them for SQL injection

Desktopfree

SQLMutant is an open-source shell tool that automates the path from domain reconnaissance to SQL injection testing. It collects historical and live URLs, discovers hidden parameters, and runs injection tests including error-based, boolean-based and time-based checks, with separate fuzzers for URLs, headers and form data. It is intended for red teamers and bug bounty hunters working under authorisation.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of SQLMutant - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim SQLMutant to unlock →

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether SQLMutant (or something else) actually fits.

Try a problem