Jump to content

Automated column finder for sqli

Recommended Posts

[*] Description

The Full Automated Column Finder helps you to determine the correct amount of columns of the current SQL query. It is useful for SQL injection and safes you some time fuzzing manually.

After the correct amount of columns was found, a sample URL for exploiting the SQL injection vulnerability can be displayed.

[*] Download


[*] Author webpage

Ascii for Breakfast

[*] Source

Full Automated Column Finder for SQL Injection

[*] Demo

hp work # python column_finder.py -u "http://www.mida.ro/content.php?id=21"
Full Automated Column Finder for SQL Injection
by Valentin Hoebel (valentin@xenuser.org)

Version: 1.1 (23th May 2010)

>> Checking if connection can be established...
>> Connected to target! URL seems to be valid.

>> Trying to find the correct number of columns...
>> Correct number of columns found!
>> Amount: 4
>> Do you want to have a sample URL for exploiting? (Yes/No) Yes


Simply copy and paste this link into your browser Have fun! Bye

Edited by aelius
Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Create New...