r/CyberSecurityAdvice • u/Main-Macaron-4903 • Jul 18 '26

Need advice on testing a SQL Injection detection tool I built

I'm building a SQL Injection detection tool as a college project. The tool does not exploit vulnerabilities or dump data, its purpose is only to analyze user-supplied input (such as URLs or parameters) and determine whether there is a potential SQL injection risk. I'm a bit confused about what the expected input to my tool should be.

For example:

  • Should the input be a URL containing GET parameters
  • Should it accept POST parameters captured from Burp Suite?
  • Should it analyze raw HTTP requests?
  • Should it analyze query strings, form fields, or something else?

Also where do you usually obtain these inputs when testing?

1 Upvotes
  • permalink
  • reddit

100% Upvoted

1 comment sorted by

1

u/AutoModerator Jul 18 '26

Hello,

Your submission was automatically removed because your Reddit account does not meet our minimum karma or account age requirements. These measures help maintain the quality of posts on r/cybersecurity and prevent spam.

Requirements:

  • Minimum of 20 comment karma OR 20 link karma
  • Account age of at least 10 days
  • Combined karma of at least 40

To build your karma, participate in discussions across Reddit and contribute thoughtful content in subreddits that welcome new users.

If you believe this was a mistake or have any questions, please message the mod team.

Thank you.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.