Description

Make sqli injection detection on pcap quicker for forensics analyst. Detect sql requests in a pcap and render in a more friendly output.

Screenshot

Requirement

• Tshark

Arch

sudo pacman -S wireshark-cli

Installation

Pip

git clone https://github.com/MikeHorn-git/PsqlHunter.git
cd PsqlHunter/
pip install .

Uv

git clone https://github.com/MikeHorn-git/PsqlHunter.git
cd PsqlHunter/
uv sync

Nix

git clone https://github.com/MikeHorn-git/PsqlHunter.git
cd PsqlHunter/
nix develop

Usage

usage: PsqlHunter.py [-h] [--csv] [--json] [--output OUTPUT] pcap

Hunt sql commands in pcap.

positional arguments:
  pcap             Path to the pcap file or folder containing pcap files

options:
  -h, --help       show this help message and exit
  --csv            Export results to CSV
  --json           Export results to JSON
  --output OUTPUT  Path to the output folder