Scrawlr1.0

Scrawlr is an approachable and speedy application that performs quick scans on your website's pages to check for SQL injection vulnerabilities, which you can analyze to troubleshoot issues as well as export data to a local file.

Clear-cut installation and interface

After a fast and uneventful setup operation, you are welcomed by a standard window with a clear-cut structure, representing Scrawlr's interface. You can get started by typing or pasting the URL of the website you wish to scan and let Scrawlr handle the rest.This task may take a long time, depending on the size of the target. Unfortunately, the app doesn't implement an option for limiting the depth level, so it verifies all links originating from the given URL. During this time you can check out the full URL path of the current attack, along with the total crawling and auditing pages. The task may be paused anytime to temporarily allocate resources to other running applications.

View and save SQL vulnerabilities

The utility has a tree view for displaying results with web pages containing SQL vulnerabilities, giving you the possibility to examine information and export it to file for later inspection and safekeeping. Moreover, you can copy any selected URLs to the Clipboard by simply opening the right-click menu of a tree view entry, apply a simple proxy configuration for connecting to the Internet (host and port), view a Scrawlr summary, as well as create and manage a list of allowed hosts.

Evaluation and conclusion

There were no stability issues in our tests, thanks to the fact that the software tool didn't freeze, crash or prompt error messages. It carried out scan jobs in reasonable time while remaining light on system resources consumption.All in all, Scrawlr may not be a professional tool, but it provides you with a fast and easy method to detect and investigate SQL vulnerabilities for your personal websites. Plus, it's free.