[TOOL] SQLninja - SQL Injection Toolkit

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion

The SecuriTeam alerts list - Free, Accurate, Independent.

Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html

- - - - - - - - -



SQLninja - SQL Injection Toolkit
------------------------------------------------------------------------


SUMMARY



DETAILS

Sqlninja is a tool to exploit SQL Injection vulnerabilities on a web
application that uses Microsoft SQL Server as its back-end. Its main goal
is to provide a remote shell on the vulnerable DB server, even in a very
hostile environment. It should be used by penetration testers to help and
automate the process of taking over a DB Server when a SQL Injection
vulnerability has been discovered. It is written in Perl, it is released
under the GPLv2 and so far has been successfully tested on:
* Linux
* FreeBSD
* Mac OS X


ADDITIONAL INFORMATION

The information has been provided by <mailto:r00t@xxxxxxxxxxxxxxxxxxxx>
A. R..
The original article can be found at: <http://sqlninja.sourceforge.net>
http://sqlninja.sourceforge.net



========================================


This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to: list-unsubscribe@xxxxxxxxxxxxxx
In order to subscribe to the mailing list, simply forward this email to: list-subscribe@xxxxxxxxxxxxxx


====================
====================

DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any kind.
In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.

Relevant Pages

  • [NT] SMSGate Denial of Service
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... A vulnerability in the way SMSGate handles incoming HTTP ... When a too big HTTP Content-Length value is received, the server tries to ...
    (Securiteam)
  • [UNIX] Protector System Multiple Vulnerabilities
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Several classes of vulnerabilities have been found in Protector. ... cross-site scripting and SQL injection attacks. ...
    (Securiteam)
  • [NEWS] SCI Photo Chat Server Cross Site Scripting
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... chat server that supports multimedia pictures, sounds, or even videos. ...
    (Securiteam)
  • [UNIX] PhotoPost PHP Pro Multiple Vulnerabilities
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... PhotoPost PHP Pro suffers from multiple SQL injection, ... There are plenty of SQL injection vulnerabilities in PhotoPost PHP Pro. ...
    (Securiteam)
  • [REVS] Advanced Topics on SQL Injection Protection
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... SQL injection is now one of the most common attacks in the Internet. ... Static query statement - Development Phrase ... Some programmers may think escaping apostrophe with two apostrophes (and ...
    (Securiteam)