Threre are various attacks in internet. The attacker gain s the unauthorized acess to the web based applications and performs data theft and modification to the database. SQL injection attacks are mostly found on web based applications. The unauthorized user gain acess to the system by creating sql queries that are totally different what the application needs. The social web sites like facebook, orkut, twitter involves sql injection attacks where hacker gets the access of user accounts and involves changing the profile information passing vulgar messages to the friends. The online banking transaction involves sql injection attacks where transaction by where unauthorized user is done. The The username password and confidential information is leaked. The plug-in tool is open source tool for detecting the sql injection and cross side scripting. It supports all kind of database and operating system.