韩小末 发表于 2010-2-4 10:48:20

一些SQL注入的链接

Blind MySQL injection and database stressing
   http://www.reversing.org/node/view/13

[] Using SQLBrute to brute force data from a blind SQL injection point
   http://www.justinclarke.com/archives/2006/03/sqlbrute.html

[] Advanced SQL Injection In SQL Server Applications - Chris Anley <chris@ngssoftware.com>
   http://www.nextgenss.com/papers/advanced_sql_injection.pdf

[] (more) Advanced SQL Injection - Chris Anley <chris@ngssoftware.com>
   http://www.nextgenss.com/papers/more_advanced_sql_injection.pdf

[] SQL Injection, Are Your Web Applications Vulnerable? - SPI Dynamics
   http://www.securitydocs.com/library/2656
   http://www.securitydocs.com/link.php?action=detail&id=2656&headerfooter=no
   http://www.securitydocs.com/pdf/2656.PDF

[] Manipulating Microsoft SQL Server Using SQL Injection - Cesar Cerrudo <sqlsec@yahoo.com>
   http://www.appsecinc.com/presentations/Manipulating_SQL_Server_Using_SQL_Injection.pdf

[] Top 15 free SQL Injection Scanners
   http://www.security-hacks.com/2007/05/18/top-15-free-sql-injection-scanners

   SQLIer
   http://bcable.net/project.php?sqlier

   Sqlbftools
   http://www.reversing.org/node/view/11

   SQLibf
   http://www.open-labs.org/ (这里有一些HTTP相关的工具)

   SQL Brute
   http://www.gdssecurity.com/l/t.php

   BobCat
   http://www.northern-monkee.co.uk/index.html
   http://www.northern-monkee.co.uk/projects/bobcat/bobcat.html

   sqlmap
   http://sqlmap.sourceforge.net/

   Absinthe
   http://www.0x90.org/releases/absinthe/
   http://www.0x90.org/releases/absinthe/download.php

   SQL Injection Pentesting TooL
   http://sqltool.itdefence.ru/indexeng.html
   http://sqltool.itdefence.ru/setup.rar

   SQID
   http://sqid.rubyforge.org/
   http://rubyforge.org/frs/?group_id=2617

   SQL Power Injector
   http://sourceforge.net/projects/spinj/
   http://www.sqlpowerinjector.com/

   FG-Injector Framework
   http://sourceforge.net/projects/injection-fwk/

   sqlninja
   http://sqlninja.sourceforge.net/

   Automagical SQL injector
   http://www.indianz.ch/tools/attack/automagic.zip

   NGSS SQL Injector
   http://www.indianz.ch/tools/attack/sqlinjector.zip

   ISR-sqlget
   http://www.infobyte.com.ar/
   http://www.infobyte.com.ar/down/ISR-sqlget-1.0.0.tar.gz
   http://www.infobyte.com.ar/down/ISR-sqlget-Readme.txt
   http://www.infobyte.com.ar/demo/ISR_sqlget_ISS_proventia_bypass.html

   ISR-Form
   http://www.infobyte.com.ar/down/ISR-form-v1.0.tar.gz

   BlindMap
   http://www.c0debreak.net/cb/main.html
   http://codebreak.uni.cc/cb/papers/blind.html
   http://codebreak.uni.cc/downloads/sql.zip
   http://external.c0debreak.net/files/sql.zip
   http://w4ck1ng.com/tools/sql/sql.zip

   BaKo's SQL Injection Scanner v2.2 - BaKo
   http://files.h4ck-y0u.org/3745771

[] Web application vulnerability scanner / security auditor
   http://wapiti.sourceforge.net/

[] w3af - Web Application Attack and Audit Framework
   http://w3af.sourceforge.net/

[] advanced web server fingerprinting
   http://www.computec.ch/projekte/httprecon/
   (有windows版)

[] http://chorizo-scanner.com/

[] OWASP SQLiX Project
   http://www.owasp.org/index.php/Category:OWASP_SQLiX_Project
页: [1]
查看完整版本: 一些SQL注入的链接