Skip to content

thomasleplus/java-sql-inspector

Repository files navigation

Java SQL Inspector

Utility to test Java code for SQL injection vulnerabilities. It uses Antlr to parse SQL queries and detects any literal value in the statement that should be handled via a prepared statement bind variable instead (using '?' as a placeholder).

Maven CodeQL