Greetings HG members!! Today lets look at some of the popular SQL injection tools.
You may know some of them.
Download link at bottom!!
1.Havij SQL Injection Well look here it is our old friend haha
Havij is an automated SQL Injection tool that helps penetration testers to find and exploit SQL Injection vulnerabilities on a web page.The power of Havij that makes it different from similar tools is its injection methods. The success rate is more than 95% at injectiong vulnerable targets using Havij.The user friendly GUI (Graphical User Interface) of Havij and automated settings and detections makes it easy to use for everyone even amateur users.
2.The Mole The Mole is an automatic SQL Injection exploitation tool. Only by providing a vulnerable URL and a valid string on the site it can detect the injection and exploit it, either by using the union technique or a boolean query based technique.
3.SQLNinja Sqlninja’s goal is to exploit SQL injection vulnerabilities on web applications that use Microsoft SQL Server as back end. There are a lot of other SQL injection tools out there but sqlninja, instead of extracting the data, focuses on getting an interactive shell on the remote DB server and using it as a foothold in the target network.
4.Safe3SI Safe3SI is one of the most powerful and easy usage penetration tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a kick-ass detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.
5.BSQL Hacker BSQL (Blind SQL) Hacker is an automated SQL Injection Framework / Tool designed to exploit SQL injection vulnerabilities virtually in any database.
6.Pangolin – Automated SQL Injection Test Tool Pangolin is a penetration testing, SQL Injection test tool on database security. It finds SQL Injection vulnerabitlities.Its goal is to detect and take advantage of SQL injection vulnerabilities on web applications.
![[Image: abiggrin.gif]](http://www.crackhackforum.com/images/smilie_new/abiggrin.gif)
!!![[Image: havij.jpg]](http://1.bp.blogspot.com/-sZ-wj6McSPg/TzONH1v-qII/AAAAAAAACEQ/0JFCccTvbpE/s1600/havij.jpg)
![[Image: new_mole.png]](http://sourceforge.net/projects/themole/screenshots/new_mole.png)
![[Image: capture.png]](http://lnxg33k.files.wordpress.com/2010/09/capture.png)
![[Image: safe3.jpg]](http://1.bp.blogspot.com/--t5EmqvMyXk/TzOOA4uMbMI/AAAAAAAACEw/erZM6IwRtYA/s1600/safe3.jpg)
![[Image: yekckdfsmkirp.gif]](http://labs.portcullis.co.uk/images/361/screenshots/yekckdfsmkirp.gif)
![[Image: Pangolin+sql+injection.jpg]](http://4.bp.blogspot.com/-4YbE6_OfJOM/TzONZZiwvcI/AAAAAAAACEY/2pNJCwn7rBg/s1600/Pangolin+sql+injection.jpg)