0x90 Posted October 8, 2006 Report Posted October 8, 2006 Sqlninja is a small tool to exploit SQL Injection vulnerabilities on a web application that uses Microsoft SQL Server as its back-end.Its main goal is to provide a remote shell on the vulnerable DB server, even in a very hostile environment (i.e.: paranoid firewall settings), using the xp_cmdshell extended procedure that SQL Server kindly enables by default. It should be used by penetration testers to help and automate the process of taking over a DB Servaer when a SQL Injection vulnerability has been discovered.hxxp://sqlninja.sourceforge.net/ Quote
