Released Exploiter Beta

[Fugitif]

Exploiter is a tool that demonstrates how SQL Injection vulnerabilities in a Web Application can be exploited to retrieve database information such as usernames, passwords, credit card numbers etc.

# Exploiter is capable of using a single SQL Injection (SQLi) vulnerability to extract an entire database.
# Exploiter does not find SQL Injection vulnerabilities. You need to use a tool such as Watchfire AppScan for that.

# Supported databases:

1. SQL Server
2. MS Access
3. Oracle


Supports 3 methods of exploit:

1. Using SQL Convert
2. Using SQL Union
3. Blind SQL Injection


# Supports SSL and multi threading.
# Can run as standalone, or as an eXtension of AppScan. As an eXtension, it will automatically load all SQLi requests from AppScan.
# Performs brute force search if it fails to extract table or column names; this is mainly used for MS Access.

Video Demonstration:

http://download.watchfire.com/ExploiterDemo/index.htm


Download: Exploiter Extension

http://axf.watchfire.com/extensions/Exploiter-1.0-Bin.zip


Edit:


More Info From Home Page :

http://axf.watchfire.com/extensions/exploiter.aspx

[Elvis000]

It's very nice tool, but link "http://axf.watchfire.com/extensions/Exploiter-1.0-Bin.zip" is bad.
Have you any mirror?

[.Begemot.]

_http://axf.watchfire.com/extensions/Exploiter-1.0-Bin.zip - good link. :)

_http://depositfiles.com/files/2446122

_http://rapidshare.com/files/71280050/Exploiter-1.0-Bin.zip

_http://slil.ru/25131538

[$n@ke]

tnx,go test )))