Share cho newbie -pro chém nhẹ nha!
SQLIer - SQLIer takes a vulnerable url and attempts to determine all the
necessary information to exploit the SQL Injection vulnerability by
itself, requiring no user interaction at all. Get SQLIer.
Code:
http://bcable.net/project.php?sqlier
SQLbftools - SQLbftools is a collection of tools to retrieve MySQL
information available using a blind SQL Injection attack. Get
SQLbftools.
Code:
http://www.reversing.org/node/view/11
SQL Injection Brute-forcer - SQLibf is a tool for automatizing the work
of detecting and exploiting SQL Injection vulnerabilities. SQLibf can
work in Visible and Blind SQL Injection. It works by doing simple logic
SQL operations to determine the exposure level of the vulnerable
application. Get SQLLibf.
Code:
http://www.open-labs.org/sqlibf19beta1.tar.gz
SQLBrute - SQLBrute is a tool for brute forcing data out of databases
using blind SQL injection vulnerabilities. It supports time based and
error based exploit types on Microsoft SQL Server, and error based
exploit on Oracle. It is written in Python, uses multi-threading, and
doesn’t require non-standard libraries. Get SQLBrute.
Code:
http://www.justinclarke.com/security/sqlbrute.py
download ActivePerl dành cho win:
http://aspn.activestate.com/ASPN/Downloads/ActivePerl/
BobCat - BobCat is a tool to aid an auditor in taking full advantage of
SQL injection vulnerabilities. It is based on AppSecInc research. It can
list the linked severs, database schema, and allow the retrieval of
data from any table that the current application user has access to. Get
BobCat.
Code:
http://www.northern-monkee.co.uk/pub/bobcat.html
SQLMap - SQLMap is an automatic blind SQL injection tool, developed in
python, capable to perform an active database management system
fingerprint, enumerate entire remote databases and much more. The aim of
SQLMap is to implement a fully functional database management system
tool which takes advantages of web application programming security
flaws which lead to SQL injection vulnerabilities. Get SQLMap.
Code:
http://sqlmap.sourceforge.net/
Absinthe - Absinthe is a GUI-based tool that automates the process of
downloading the schema and contents of a database that is vulnerable to
Blind SQL Injection. Get Absinthe.
Code:
http://www.0x90.org/releases/absinthe/download.php
SQL Injection Pen-testing Tool - The SQL Injection Tool is a GUI-based
utility designed to examine database through vulnerabilities in
web-applications. Get SQL Injection Pen-testing tool.
Code:
http://sqltool.itdefence.ru/indexeng.html
SQID - SQL Injection digger (SQLID) is a command line program that looks
for SQL injections and common errors in websites. It can perform the
follwing operations: look for SQL injection in a web pages and test
submit forms for possible SQL injection vulnerabilities. Get SQID.
Code:
http://sqid.rubyforge.org/
Blind SQL Injection Perl Tool - bsqlbf is a Perl script that lets
auditors retrieve information from web sites that are vulnerable to SQL
Injection. Get Blind SQL Injection Perl Tool.
Code:
http://www.unsec.net/download/bsqlbf.pl
---------Nguồn GUG-------------
2. Nhấn vào Here. Skip ad....
http://www.mediafire.com/?ee4je662d7e4w9b
