Its main goal is to provide a remote access on the vulnerable DB server, even in a very hostile environment. Take a few new SQL Injection tricks, add a couple of remote shots in the registry to disable Data Execution Prevention, mix with a little Perl that automatically generates a debug script, put all this in a shaker with a Metasploit wrapper, shake well and you have just one of the attack modules of sqlninja! Sqlninja is a tool targeted to exploit SQL Injection vulnerabilities on a web application that uses Microsoft SQL Server as its back-end. Introduction Fancy going from a SQL Injection on Microsoft SQL Server to a full GUI access on the DB? Why we decided to add a data extraction module even if lots of other tools do that already? The answer is in the. It is still a bit experimental, but it could help you in your next penetration test. It uses WAITFOR-based injection (slow) and DNS tunnels (fast!!). News There is a shiny new data extraction method in the alpha of the new release. Sql Injection Tool Get Cc Cvv Generator 5,0/5 6649votes
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |