> For the complete documentation index, see [llms.txt](https://ceh-practical.cavementech.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ceh-practical.cavementech.com/module-15.-sql-injection/2.-detect-sql-vulnerabilities-using-different-tool.md).

# 2.  Detect SQL Vulnerabilities using different tool

## <mark style="color:red;">1. Detect SQLi with DSSS</mark>

{% embed url="<https://github.com/stamparm/DSSS>" %}

```
python3 dsss.py -u "http://testphp.vulnweb.com/artists.php?artist=1"
```

## 2. Detect SQLi with ZAP

Run automated scan and check the alerts tab.

<mark style="color:blue;">You can also use other SQL injection detection tools such as</mark> <mark style="color:blue;"></mark><mark style="color:blue;">**Damn Small SQLi Scanner**</mark> <mark style="color:blue;"></mark><mark style="color:blue;">(</mark><mark style="color:blue;">**DSSS**</mark><mark style="color:blue;">) (<https://github.com>), Snort (<https://snort.org>),</mark> <mark style="color:blue;"></mark><mark style="color:blue;">**Burp Suite**</mark> <mark style="color:blue;"></mark><mark style="color:blue;">(<https://www.portswigger.net>),</mark> <mark style="color:blue;"></mark><mark style="color:blue;">**HCL AppScan**</mark> <mark style="color:blue;"></mark><mark style="color:blue;">(<https://www>. hcl-software.com) etc. to detect SQL injection vulnerabilities.</mark>

{% embed url="<https://www.udemy.com/course/ethical-hacker-practical/?referralCode=289CF01CF51246BCAD6C>" %}
CEHv13 Practical Course Preparation
{% endembed %}
