EC EHE - SQL Tools

 



sqlmap

Source: http://sqlmap.org

Being an open-source penetration testing tool, sqlmap automates the process of detecting and exploiting SQL injection flaws and taking over database servers. It comes with a powerful detection engine, many niche features for advanced penetration testers, and a wide range of switches for database fingerprinting, data fetching from the database, accessing the underlying file system, and executing commands on the OS via out-of-band connections.

Attackers can use sqlmap to perform SQL injection on a target website through various techniques such as Boolean-based blind, time-based blind, error-based, UNION query-based, stacked queries, and out-of-band injection.

Some features of sqlmap are as follows:





Full support for six SQL injection techniques: Boolean-based blind, time-based blind, error-based, UNION query-based, stacked queries, and out-of-band injection
Support to directly connect to the database without passing via an SQL injection, by providing DBMS credentials, IP address, and port and database name
Support to enumerate users, password hashes, privileges, roles, databases, tables, and columns
Automatic recognition of password hash formats and support for cracking them using a dictionary-based attack
Support to dump database tables entirely; a range of entries or specific columns as per user’s choice
Support to search for specific database names, specific tables across all databases, or specific columns across all databases’ tables
Support to establish an out-of-band stateful TCP connection between the attacker machine and the database server underlying the operating system



 

Figure 7.42: Screenshot of sqlmap

Some additional SQL injection tools are listed below:



Mole (https://sourceforge.net)
Blisqy (https://github.com)
blind-sql-bitshifting (https://github.com)
NoSQLMap (https://github.com)
SQL Power Injector (http://www.sqlpowerinjector.com)
 

SQL injection detection tools help in the detection of SQL injection attacks by monitoring HTTP traffic and SQL injection attack vectors, and they determine if the web application or database code suffers from SQL injection vulnerabilities.



Damn Small SQLi Scanner (DSSS)

Source: https://github.com

Damn Small SQLi Scanner (DSSS) is a fully functional SQL injection vulnerability scanner (supporting GET and POST parameters). It scans the web application for various SQL injection vulnerabilities.

Security professionals can use this tool to detect SQL injection vulnerabilities in web applications.

Figure 7.43: Screenshot of Damn Small SQLi Scanner (DSSS)

Some additional SQL injection detection tools are as follows:



OWASP ZAP (https://www.owasp.org)
Snort (https://www.snort.org)
Burp Suite (https://portswigger.net)
HCL AppScan (https://www.hcltech.com)
w3af (https://w3af.org)


Comments

Post a Comment

Popular posts from this blog

Why Certifications Methods?

Hey there, Let’s take a step back and change our perspective: Approach certifications as a means to enrich your knowledge and skills, rather than merely a stepping stone to monetary gain or career advancement. Certifications should be about self-improvement and mastery , not just a checkbox on a resume. Embrace the journey of learning for its own sake, and watch how it transforms your personal and professional life in ways you never imagined. The Real Reason Behind Certifications The commercial marketing driving force of certifications is often centered around securing a new or better job. But I urge you to reconsider if this is your primary motivation . Take a moment to reflect on your personal development and your deepest interests within the realm of technology.  Is your passion in: Programming Crafting elegant code and solving complex problems? System Administration, Ensuring seamless operations and managing vast networks? Data Analytics Unraveling the stories hidden within data?
Read blog »

LPI E - ALL K.D.

Image
LPI Linux Essentials Outline All Knowledge Domains and Links to LPI One last check before test! Introduction to Linux >> 1.1 Linux Evolution and Popular Operating Systems >> 1.2 Major Open Source Applications >> 1.3 Open Source Software and Licensing >> 1.4 ICT Skills and Working in Linux Linux Evolution and Popular Operating Systems: This domain covers the history of Linux and its evolution, as well as an overview of popular Linux distributions. Major Open Source Applications: It focuses on introducing commonly used open source applications in the Linux ecosystem, such as LibreOffice, Firefox, and GIMP. Open Source Software and Licensing: This domain covers the concepts of open source software, different types of licenses, and their implications. ICT Skills and Working in Linux: It provides an overview of the basic information and communication technology (ICT) skills needed to work with Linux and explains the benefits of using Linux in variou
Read blog »

CCNP 03 - WANS

Image
WAN Problem Areas Certification Objectives Point-to-Point Protocols Switched Protocols      In this chapter, we will discuss troubleshooting point-to-point and switched protocols. It’s very important to understand the concepts and functionality of each protocol. We will discuss the HDLC and SDLC encapsulation methods, as well as both CHAP and PAP authentications via PPP. We will identify ISDN, Frame Relay, X.25, SMDS, and ATM transmissions and common problems associated with each of them. Point-to-Point Protocol      In the 1980s, the Internet really started to come to life due to its usage by the U.S. government, universities, and large corporations. These hosts were being supported by the Internet Protocol (IP) and connected via a series of LANs. The most common of these LANs was the Ethernet. Other hosts were connected through WANs, using technologies such as X.25. This eventually evolved into the need to transmit data via the original method used before networking was ever establis
Read blog »