DOCTOR SQL — SQL Injection Scanner & Database Dumping Tool

Adex78 · 15 Oct 2026

DOCTOR SQL — SQL Database Dumping toolkit

Load a URL list file with keyword targeting (email, password, username, token...)
Column pairs filter with live stats: DBs, tables, columns, rows, done, failed, URLs/min
Up to 200 parallel URLs with delay, level (1-5), risk (1-3), timeout and retries
Technique selection (BEUSTQ), DBMS auto-detect, proxy, cookie and tamper support
Random agent, follow redirects, forms, flush session, save CSV / JSON, CPU limiter
Deep scan, save and load sessions, export URLs, results grid with severity filter
Built-in SQLMap downloader and one-click Send Selected to Dumper

Engines: Yahoo, Yahoo JP, Ecosia and Google (Serper API)
Reverse IP, Dork Combiner and Keyword Scrapper modules
Dork list file, proxy file (IP:PORT), pages per dork, threads (1-500), delay control
Deduplicate domains across all engines plus domain blacklist support
Save hits with (=) or without (no=) and push results to Scanner or Crawler
One-click Crawl and Scan pipeline

Auto-dumps credentials during scans using pair patterns with any number of columns
Patterns like email:pass, user:password, login:passwd, mail:hash, mail:pass:name:phone
Live total rows collected with stats: pairs, websites, rows dumped, dump files
Pair statistics table, recent dumps table and live console
Output directory auto_dumps with files named pair_name.txt / pair_name_pattern.txt

Detect DB, get tables, all DBs, get user, get banner and check DBA
Database picker with table and column checkboxes: all, none, invert, sensitive select
Start and stop row control, start and stop dump, live console and data preview
Search dump, crack hashes, analyze, report, export HTML, open folder, copy dump