sqlmap icon indicating copy to clipboard operation
sqlmap copied to clipboard

GUI prototyping

Open stamparm opened this issue 6 years ago • 14 comments

References for my future self:

https://github.com/ubbn/wxPython

stamparm avatar Feb 28 '19 01:02 stamparm

web gui too? pls.....~! 😶

and command generator: http://tools.k2an.com/?page=sqlmapCommandGenerator https://github.com/helloingob/SqlmapCmdGen

687766616e avatar Mar 01 '19 07:03 687766616e

Hello @stamparm . Thank you a lot for you child (sqlmap) , thanks for answering on all isues and not leaving project and stable patching and upgrading.

https://portswigger.net/daily-swig/sqlmap-plans-to-prototype-gui-support - found this daily swig about gui))

I was testing many versions of gui / web / frame - all of them .... bad)

there is only one good imho, with full (on creating date 6 years ago) functional , and usable gui ---> -----> https://github.com/kxcode/gui-for-sqlmap screens https://prnt.sc/tomkti - main https://prnt.sc/tomkyc - injection detection technique https://prnt.sc/toml5w - request ( great to make direct adding to gui request in standart txt file or txt plain text ) https://prnt.sc/tomlht - enumeration https://prnt.sc/tomlrk - acces https://prnt.sc/tomly1 - customizeable Logviewer (cool) https://prnt.sc/tomm5z - ow here is editor) But of course many things added , missed, changed and it dont work on Python 3 . But realy its the best gui about functional . Desing in 2020 move on of course)

here is fresh* chineese version https://github.com/needle-wang/sqlmap-gtk - but they dont want to make multi language))))

Maybe @kxcode can collaborate with you to making official gui with sqlmap stylistic design (console coloring - we all love it for shure, or something like this) . If he inrested in it of course Dont know what to think about web panel.. like meta pro? why not. but frame is more than ok.

Hope official GUI will be great!

SantaLaMuerte avatar Jul 26 '20 04:07 SantaLaMuerte

@hastalamuerte thank you for the info on kxcode/gui-for-sqlmap. Looks promising. If @kxcode would help/contribute, I would be more than happy. Also, I would give an active support in such efforts.

As of "where-to" for sqlmap GUI. I played both with web panel (yes, like metasploit) and TkInter. As a matter of fact, --gui as a prototype is already available for some time in sqlmap, but it requires some serious revamping (i.e. doesn't look representative):

gui

stamparm avatar Jul 26 '20 18:07 stamparm

https://github.com/needle-wang/sqlmap-wx https://github.com/needle-wang/sqlmap-gtk

c2xusnpq6 avatar Dec 13 '20 00:12 c2xusnpq6

https://github.com/needle-wang/sqlmap-wx https://github.com/needle-wang/sqlmap-gtk

sorry for DIZ but its look like... BURPSUITE ON MINIMALS from WOOHAN. Only @kxcode (or he forked it idk) and one other guy (unknown light gui) made an easy intuitive designe for sqlmapgui . Now in original sqlmap --gui just skeletone of commands and pythongui , wich open at top always (hello upper comand menu) , have no scroll for long list of commands and on run- open another console it not good IMHO (i love sqlmap anyway! and understand that this is not priority task for devs )

kxcode gui was work with original cmd(pwsh) and have own console log for easy tables run (and other). Imho again - this is perfection for sqlmap gui - but with sandy beard wich start grow many years ago. It can be modifed and upgrade for shure for real workable tool . Made easy/pro visualization modes (tumbler) for some commands to not overweight UI (let user setup modes ) and many many other. I just ask with respect - @kxcode made some new one plz) in 2021

SantaLaMuerte avatar Dec 29 '20 05:12 SantaLaMuerte

@hastalamuerte sorry for DIZ??? bruh?????? u don't like ̶c̶h̶i̶n̶e̶s̶e̶ zhinese? HAHA

c2xusnpq6 avatar Dec 29 '20 16:12 c2xusnpq6

hker? haaaaaaaaaa

c2xusnpq6 avatar Dec 29 '20 16:12 c2xusnpq6

@hastalamuerte sorry for DIZ??? bruh?????? u don't like zhinese? HAHA

I am ok with chineese , kxcode from some china too . Read better

SantaLaMuerte avatar Dec 29 '20 16:12 SantaLaMuerte

kxcode from some china too .

ok~~ haha

c2xusnpq6 avatar Dec 29 '20 16:12 c2xusnpq6

This is his Facebook page~ (but Chinese version) https://weibo.com/u/1624430122 @hastalamuerte

c2xusnpq6 avatar Dec 29 '20 16:12 c2xusnpq6

@hastalamuerte sorry for DIZ??? bruh?????? u don't like zhinese? HAHA

I am ok with chineese , kxcode from some china too . Read better

I am working on it, I've just realised that chinese version which is hard to maintain is a stupid idea. ~~I dreamt of having myself chinese version gui in the past. i was thinking why all good softwares are english version. Chinese localization was full desperate requirement in our software history. so many people waste their time on the translation of gui and docs.~~ I will turn sqlmap-gtk into english. and multi-language GUI strings will be stripped from source code.(thanks to my refactor) It may make source code clean and convenient to maintain. btw, wxPython is hard to control.(is Cross-platform still a dream?) I am pleased to see official GUI.

needle-wang avatar Jan 02 '21 06:01 needle-wang

@hastalamuerte sorry for DIZ??? bruh?????? u don't like zhinese? HAHA

I am ok with chineese , kxcode from some china too . Read better

I am working on it, I've just realised that chinese version which is hard to maintain is a stupid idea. ~I dreamt of having myself chinese version gui in the past. i was thinking why all good softwares are english version. Chinese localization was full desperate requirement in our software history. so many people waste their time on the translation of gui and docs.~ I will turn sqlmap-gtk into english. and multi-language GUI strings will be stripped from source code.(thanks to my refactor) It may make source code clean and convenient to maintain. btw, wxPython is hard to control.(is Cross-platform still a dream?) I am pleased to see official GUI

Hello! Official gui is acceptable by --gui command.

In one big community.. where users was test and talk about gui for sqlmap , one of them made gui by himself (it was extra easy and lightweight - not with all functions, but many pentesters still use it) https://prnt.sc/wejom6 here how its look. Its also local language)) Russian. And for most of sqlis it functional and commands was enough and still enough. Too heavy user interface without customization, hiding not usable by user commands or switching to pro mode - not best idea. Realy. I am very appreciate your work @needle-wang , just wanna someday see gui of dream))

SantaLaMuerte avatar Jan 02 '21 06:01 SantaLaMuerte

New GUI is present now for macOS, Windows, and Linux. Just follow my GitHub Sqlmap GUI

omlinky avatar Mar 25 '21 10:03 omlinky

@IIIsToRmIII pretty sure that this is a violation of some license permissions

stamparm avatar Oct 17 '21 12:10 stamparm