Fugitif
05.10.2007, 13:41
SQL Power Injector is a graphical application created in .NET 1.1 that helps the penetrating tester to inject SQL commands on a web page.
For now it is SQL Server, Oracle and MySQL compliant, but it is possible to use it with any existing DBMS when using the inline injection (Normal mode).
Moreover this application will get all the parameters you need to test the SQL injection, either by GET or POST method, avoiding thus the need to use several applications or a proxy to intercept the data.
http://funkyimg.com/u/424492z87si0tr7lc5JPG.jpg
Download:
http://www.sqlpowerinjector.com/download.htm
Or:
https://sourceforge.net/project/showfiles.php?group_id=159131
For now it is SQL Server, Oracle and MySQL compliant, but it is possible to use it with any existing DBMS when using the inline injection (Normal mode).
Moreover this application will get all the parameters you need to test the SQL injection, either by GET or POST method, avoiding thus the need to use several applications or a proxy to intercept the data.
http://funkyimg.com/u/424492z87si0tr7lc5JPG.jpg
Download:
http://www.sqlpowerinjector.com/download.htm
Or:
https://sourceforge.net/project/showfiles.php?group_id=159131