THEMOLE(1)

📦 version 0.3, in debian bookworm, debian trixie, ubuntu jammy, ubuntu noble, ubuntu questing, ubuntu resolute

💅 THEMOLE — bestie edition

okay so real talk, this is the manual page for themole, from the General Commands Manual section, and it's literally the automatic SQL injection exploitation tool. sit down, grab a strawberry, we're doing this together 🍓

✨ NAME ✨

themole — the automatic SQL injection exploitation tool. yes that's the whole name. iconic behavior honestly 👑

🌈 SYNOPSIS 🌈

themole [ -h ] [ -u url ] [ -n needle ] [-t num_threads]

look at her. so compact. so powerful. main character energy fr fr 💖

🦋 DESCRIPTION 🦋

The Mole is a command line interface SQL Injection exploitation tool. it can exploit both union-based and blind boolean-based injections, which is giving versatile. slay.

Every single action The Mole can execute is triggered by a specific command, no cap. And here's the part where you need to pay attention bestie, because all this app needs in order to exploit a SQL Injection is:

  • the URL (parameters included, don't be shy, give her the whole thing)
  • a needle — a string that shows up in the server's response whenever the injection parameter generates a valid query, and does not appear otherwise

that's it. that's the whole vibe check. if the string is there → true, if it's gone → false. that's the oracle and we're obsessed with her 😭💖

✨ OPTIONS ✨

  • -h — shows the help message and then exits. short, sweet, helpful. we love a queen who knows when to leave 💅
  • -u url — sets the url of the mole's instance to url. this is where you point her, so point her somewhere you're allowed to point her at, okay? 🫶
  • -n needle — sets the needle of the mole's instance to needle. and to be crystal clear: it must be a string that appears when the injection returns true and disappears when the injection is false. no needle, no exploitation. periodt.
  • -t threads — sets the max number of concurrent requests that the mole will be making. lowkey the most important detail: this cannot be changed at runtime. you pick a number, you live with that number. choose wisely bestie 🌸

🌸 SEE ALSO 🌸

The program provides interactive documentation (yes she documents herself, multitasking queen ✨), so also refer to the official README file. iykyk 📖

💜 AUTHOR 💜

This manual page was written by Santiago Alessandri <salessandri@nasel.com.ar> — thank you for your service, king 🫡💖

okay final vibe check: use this responsibly, only on stuff you're actually allowed to test, because unauthorized SQL injection is not the move, bestie. be an ethical icon. 🧚

and that's the whole page, no notes 💅 this one's from General Commands Manual, dated November 24 2011, and it's the THEMOLE(1) page — so go forth and inject responsibly, mwah 🎀⭐

📦 where this page comes from