Pangolin - SQL Injection

[Nytro]

pangolin

Pangolin is a penetration testing, SQL Injection test tool for database security. It finds SQL Injection vulnerabilities.Its goal is to detect and take inform you of SQL injection vulnerabilities in web applications. Once it detects an SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or user”s specific DBMS tables/columns, run his own SQL statement, read specific files on the file system and more.

Documentation

• Pangolin White Paper
  
• Pangolin Data Sheet
  
• Pangolin User Guide
  

Video Demonstration

• Inject SQL Server
  
• Inject MySQL
  
• More Demos Here
  

ScreenShot

Pangolin FAQ

Click Here

Database support:

Access,DB2,Informix,Microsoft SQL Server 2000,Microsoft SQL Server 2005,Microsoft SQL Server 2008,MySQL,Oracle,PostgreSQL,Sqlite3,Sybase.

Pangolin is recommended by many Web security experts all over the world.

[TABLE]

[TR]

[TD]OWASP[/TD]

[TD]http://www.owasp.org/index.php/SQL_Injection#References[/TD]

[/TR]

[TR]

[TD]Red Database Security[/TD]

[TD]1. Oracle Security Videos

2. http://blog.red-database-security.com/2009/03/05/web-application-testing-with-pangolin-video-screenshot/print/[/TD]

[/TR]

[TR]

[TD]SECURITY DATABASE[/TD]

[TD]http://www.security-database.com/toolswatch/Focus-on-Pangolin-SQL-Injection.html[/TD]

[/TR]

[/TABLE]

Features

Here is parts of features:

• HTTPS support
  
• Pre-Login
  
• Proxy
  
• Specify any HTTP headers(User-agent, Cookie, Referer and so on)
  
• Bypass firewall setting
  
• Auto-analyzing keyword
  
• Detailed check options
  
• Injection-points management
  

15 Days Full Function(No Limitation) Trial

Sursa: pangolin « NOSEC – Serving More People

[.Breacker]

O s? avem showoff-uri bune zilele astea .

ON: Pentru unii e mai bun Acu ?i Morcovu

[RaulSebastian]

Buna sunt nou pe forum si va urmaresc de ceva vreme... am intampinat si eu o problema la utilizarea acestui program. Cand dau start imi apare erroarea Cannot detecte keyword! dupa ce imi da asta Two vaild page size if larger than range of valid-size, try to analysis keyword!. inainte mia dat si erroarea acea cu WinlicenseSDK.dll dar am rezolvato prin inlocuirea acestuia cu unul gasit pe net. am incercat mai multe dar la fel.... oare de la acesta sa fie problema?

[QUADMACHINE]

Upgraded HAVIJ?