H_acktivis_T) in December 28th 2008 So, if i’ve posted about this tool Here a few months ago. But today we have the latest version of this program.
Features
Receives a list of URLs as input
Recognizes the parameterized URLs from the list
Fuzzes all URL parameters to concatenate the desired payload once an injection is successful
Automatic defacement - you decide on the defacement [...]
H_acktivis_T) in December 23rd 2008 This is about error based sql injection. Wtf is that? It means that we use the database’s errors as footholds to step further. In this example i will use the process i used a couple of months ago to bypass a login prompt and get the whole member’s (with passwords) database.
Download: Here
Rate this: 2.8 (1 [...]
H_acktivis_T) in December 23rd 2008 GreenSQL is an Open Source database firewall used to protect databases from SQL injection attacks. GreenSQL works as a proxy and has built in support for MySQL. The logic is based on evaluation of SQL commands using a risk scoring matrix as well as blocking known db administrative commands (DROP, CREATE, etc). GreenSQL is distributed [...]
H_acktivis_T) in December 23rd 2008 sqlmap is an automatic SQL injection tool developed in Python. Its goal is to detect and take advantage of SQL injection vulnerabilities on web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back end database management system [...]
H_acktivis_T) in November 25th 2008 BSQL (Blind SQL) Hacker - designed to exploit blind SQL injection vulnerabilities virtually in any possible database and any possible condition. BSQL Hacker aims for experienced users who want to automate any Blind SQL Injection issue.
Features
General
Fast and Multithreaded (also can run single threaded)
Time based totally blind SQL injection support
Can automate most of the new SQL [...]
H_acktivis_T) in November 25th 2008 With this tool you can find XSS and SQL error on program code of victim site. This program is VB Wrapped - means it contains all the files needed to run the program. There is NO need to install the program and it can be deleted at any time.
To use this program, please read the [...]
H_acktivis_T) in November 25th 2008 SQL Injection Pentesting Tool - very nice utility with a lot of funtions
Features:
Version 3.0.0 PreRelease - FREEE!
Completely overhauled engine programme.
Now, the element of WinSock is added, which gives work with low HTTP protocol, it has significantly expanded its capabilities.
Work with injection through GET,POST,GET(inside Cookie),POST(inside Cookie)
Terminal for HTTP RAW (analogue of InetHack)
Upload file to server through [...]
H_acktivis_T) in November 18th 2008 This paper will not cover basic SQL syntax or SQL Injection. It is assumed that the reader has a strong understanding of these topics already. This paper will focus on advanced techniques that can be used in an attack on a (web) application utilizing Microsoft SQL Server as a backend. These techniques demonstrate how an [...]
Continue reading " Manipulating Microsoft SQL Server Using SQL Injection "
H_acktivis_T) in November 18th 2008 In the past few years, SQL Injection attacks have been on the rise. The increase in the number of Database based applications, together with various publications that explain the problem and how it can be exploited (in both electronic and printed formats), have led to many attacks and abuse of this type of attack. Following [...]
H_acktivis_T) in November 16th 2008 Structured Query Language (’SQL’) is a textual language used to interact with relational databases. There are many varieties of SQL; most dialects that are in common use at the moment are loosely based around SQL-92, the most recent ANSI standard. The typical unit of execution of SQL is the ‘query’, which is a collection of [...]
Continue reading " Advanced SQL Injection In SQL Server Applications "
Want to put your ad here, contact us
Rate Me on BlogHop.com!
help?
