OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: SQL Injection Tools

From: Marco Ivaldi (raptormediaservice.net)
Date: Fri Jun 27 2008 - 02:30:38 CDT


On Mon, 23 Jun 2008, oh oh wrote:

> Thanks for your list
>
> I'm looking for the sql injection tool for testing in my lab.
> If possible , I'll report some result in every tool in your list when
> i finnish the test.
> For business use , I used to take sql ninja for test my client.

Just wanted to point out this script of mine:

http://0xdeadbeef.info/code/mssql-hax0r

Admittedly nothing fancy, but it has proven very useful a number of times
when exploiting SQL injection on ASP+MSSQL applications. The code is also
pretty readable and easy to customize for your own purposes.

Cheers,

--
Marco Ivaldi, OPST
Red Team Coordinator Data Security Division
Mediaservice.net Srl http://mediaservice.net/

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Top 5 Common Mistakes in
Securing Web Applications
Get 45 Min Video and PPT Slides

www.cenzic.com/landing/securityfocus/hackinar
------------------------------------------------------------------------