Releases and updates are announced in our Telegram channel — join nowt.me/+FytjbRv59LAyNzc1
XVDumper/Product
SQL injection workbench WINDOWS · x64

One desktop suite for the entire injection workflow

Dork harvesting across sixteen search engines, scored dork generation, queue-driven scanning, technique confirmation and parallel data extraction — chained together, streamed live, saved automatically.

No telemetry 16 search engines 5-phase pipeline In-app updates
[ SYS.ONLINE ] latest build: v1.1.0 · operators online: — ·
16
Search engines
15
Dork generators
5
Pipeline phases
200+
Backend methods
// 01 — Modules

Choose a module

Nine modules cover the full workflow. Each one feeds the next — results move through the suite without manual stitching.

click any module to preview it live
// 02 — Pipeline

From seed to dump,
hands free.

One click starts the chain. Every phase streams live metrics, pauses on demand and skips forward when you say so.

PHASE 1

Crawl

Seeds expand into URLs, keywords and parameters.

PHASE 2

Scan

Queue-driven SQLi detection with live findings.

PHASE 3

Inject

Technique confirmation with confidence scoring.

PHASE 4

Dump

Parallel extraction of tables and credentials.

PHASE 5

Report

JSON and HTML reports, auto-archived.

xvdumper — pipeline
pipeline start --deep-scan --auto-dump
[crawl] 8,412 URLs · 1,204 keywords · 342 params
[scan] 236 findings · 89 injectable
[inject] WAF: cloudfront → tamper: space2plus, between
[dump] webapp_db 48.2k rows · 1,832 credentials
pipeline report ready — export html
// 03 — Under the hood

Built on real numbers.

No marketing fluff — these are the constants the suite actually runs on.

Databases
MySQLMariaDBPostgreSQLMSSQLOracleSQLiteMS AccessFirebird
Techniques
boolean · error · UNION · time · stacked · path
Worker pool
500 global threads · per-job slots · ctx-safe cancel
Query cache
12h TTL · sha256 keyed · per engine
Block handling
adaptive backoff 15s–3min · proxy cooldown 10min
Storage
local SQLite · auto-saved sessions · csv/json/txt export
Updates
signed channel · in-app download · sha256 verified
// 04 — Pricing

Pick your access.

Two ways in. Both unlock the full suite — every module, every engine, every update.

Weekly
$15 / 7 days
Full suite access for one week. Ideal for a focused engagement.
  • All 9 modules unlocked
  • 16 search engines + proxy pool
  • Single machine license
  • Telegram support
Get Weekly — $15
BEST VALUE
Lifetime
$50 one-time
Permanent license. Pay once, keep it — every future update included.
  • Everything in Weekly
  • Permanent license — never expires
  • All future updates, free
  • Priority support
Get Lifetime — $50
purchase via telegram · instant activation
// 05 — Why XVDumper

One suite beats
a folder of scripts.

The same job done with loose tools means stitching outputs by hand. Here is the honest capability picture.

CapabilityXVDumperManual toolingGeneric scanners
Dork harvesting across 16 enginesYESNONO
Scored dork generation (15 presets)YESNONO
Crawl → scan → inject → dump pipelineYESNOPARTIAL
Desktop-native GUI, live streaming metricsYESNOPARTIAL
Per-engine health + adaptive block backoffYESNONO
Built-in list library feeding every moduleYESNONO
In-app verified updatesYESNOPARTIAL
// 06 — Changelog

Shipped, not promised.

Every release lands in the in-app update channel. Latest entries below.

v1.1.0loading…
Fetching the latest release notes…
// 07 — FAQ

Before you ask.

The questions that land in the inbox every day, answered once.

How do I activate XVDumper?
Buy a card key, paste it once into the app. The license binds to your machine (HWID) automatically and stays valid for your access window.
How many machines can I use?
Every card key carries a device limit — Weekly keys ship with one machine by default. Need more? Ask when purchasing and the limit is set at generation time.
Can I move my license to another PC?
Yes. Deactivate from inside the app to free the slot, or message support and the binding is reset for you.
Do updates cost extra?
Never for Lifetime keys — every future update is included. Weekly keys cover every update released during the access window.
Do I need my own proxies?
Not required. Scraping runs direct by default; import your own pool from the Library, or opt into the built-in public list in settings.
Which databases are supported?
MySQL, MariaDB, PostgreSQL, MSSQL, Oracle, SQLite, MS Access, Firebird — plus generic error and time-based detection for anything else that speaks SQL.
What happens if a search engine blocks me?
Nothing dramatic: the engine enters a short cool-down, work shifts to healthy engines and your URL throughput does not drop.
XVDumper is provided for authorized security testing and educational purposes only. You are solely responsible for complying with all applicable laws. The authors assume no liability for misuse.
DS
Module