overflowing with security goodness

Register | Login

FilesNewsUsersAuthors

Home Files News About Contact Add New

Showing 1 - 1 of 1

Files

SQLMAP - Automatic SQL Injection Tool

Posted Feb 4, 2009

Authored by Bernardo Damele, Daniele Bellucci | Site sqlmap.sourceforge.net

sqlmap is an open source command-line automatic SQL injection tool developed in Python. Its goal is to detect and take advantage of SQL injection vulnerabilities on web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or user's specific DBMS tables/columns, run his own SQL statement, read specific files on the file system and more.

Changes: Major enhancement to make the comparison algorithm work properly. Major speed increase in DBMS basic fingerprint. Added internal support to forge CASE statements. Various other additions and improvements.

tags | web, vulnerability, sql injection, python

systems | unix

MD5 | 39bd2ada1279314c9d908301683b4c9f

Download | Favorite | Comments (0)