Posts

Showing posts with the label SQLi

Sqlmap V1.2.11 - Automatic Sql Injection In Addition To Database Takeover Tool

Image
SQLMap is an opened upwards source penetration testing tool that automates the procedure of detecting in addition to exploiting SQL injection flaws in addition to taking over of database servers. It comes alongside a powerful detection engine, many niche features for the ultimate penetration tester in addition to a wide hit of switches lasting from database fingerprinting, over information fetching from the database, to accessing the underlying file organization in addition to executing commands on the operating organization via out-of-band connections. Features Full back upwards for MySQL, Oracle, PostgreSQL, Microsoft SQL Server, Microsoft Access, IBM DB2, SQLite, Firebird, Sybase, SAP MaxDB, HSQLDB in addition to Informix database administration systems. Full back upwards for half-dozen SQL injection techniques: boolean-based blind, time-based blind, error-based, UNION query-based, stacked queries in addition to out-of-band . Support to directly connect to the data...

Sqlmap V1.3 - Automatic Sql Injection In Addition To Database Takeover Tool

Image
SQLMap is an opened upward source penetration testing tool that automates the procedure of detecting as well as exploiting SQL injection flaws as well as taking over of database servers. It comes amongst a powerful detection engine, many niche features for the ultimate penetration tester as well as a wide make of switches lasting from database fingerprinting, over information fetching from the database, to accessing the underlying file organisation as well as executing commands on the operating organisation via out-of-band connections. Features Full back upward for MySQL, Oracle, PostgreSQL, Microsoft SQL Server, Microsoft Access, IBM DB2, SQLite, Firebird, Sybase, SAP MaxDB, HSQLDB as well as Informix database management systems. Full back upward for vi SQL injection techniques: boolean-based blind, time-based blind, error-based, UNION query-based, stacked queries as well as out-of-band . Support to directly connect to the database without passing via a SQL inject...

Zeebsploit - Spider Web Scanner / Exploitation / Data Gathering

Image
zeebsploit is a tool for hacking searching for spider web information and scanning vulnerabilities of a web Installation & Usage apt-get install git git clone https://github.com/jaxBCD/Zeebsploit.git cd Zeebsploit chmod +x install ./install python3 zeebsploit.py type 'help' for demonstrate modules together with follow instruction Modules [Main modules] +----------+-------------------------------+ | Modules | Description | +----------+-------------------------------+ | Exploit | Exploitation Modules | | Scanners | Scanners Modules | | infoga | information Gathering Modules | +----------+-------------------------------+ [Exploit Modules] +---------------------------+--------------------------------------------------+ | Modules | Description | +---------------------------+--------------------------------------------------+ | wp content injection | wordpress c...

Scanqli - Scanner To Let On Sql Injection Vulnerabilities

Image
ScanQLi is a elementary SQL injection scanner amongst somes additionals features. This tool can't exploit the SQLi, it simply uncovering them. Tested on Debian 9 Features Classic Blind Time based GBK (soon) Recursive scan (follow all hrefs of the scanned spider web site) Cookies integration Adjustable aspect delay betwixt requests Ignore given URLs Prerequisites 1. Install git tool apt update apt install git 2. Clone the repo. git clone https://github.com/bambish/ScanQLi 3. Install python required libs apt install python-pip cd ScanQLi pip install -r requirements.txt For python3 delight install python3-pip together with role pip3 Usage ./scanqli -u [URL] [OPTIONS] Examples Simple url scan amongst output file python scanqli.py -u 'http://127.0.0.1/test/?p=news' -o output.log Recursive URL scanning amongst cookies python scanqli.py -u 'https://127.0.0.1/test/' -r -c '{"PHPSESSI...