Questions about this topic? Sign up to ask in the talk tab.

Difference between revisions of "Main Page/Featured Tool"

From NetSec
Jump to: navigation, search
 
(9 intermediate revisions by 3 users not shown)
Line 1: Line 1:
<center><big>'''[[Vanguard]]'''</big></center>
+
<center><big>'''[[Mysqli-blindutils|MySQLi-BlindUtils]]'''</big></center>
  
Vanguard is an extensible utility with module support built for testing different types of [[web exploitation]] on a given domain.
+
'''MySQLi-BlindUtils''' is a collection of blind [[SQL injection]] utilities for MySQL that demonstrate a variety of techniques. It contains [[sqli-hap.py]], which demonstrates our new [[Comparative_precomputation|comparative precomputation]] technique; [[sqli-slee.py]], a time-based injection tool; and [[sqli-p.pl]], for boolean enumeration.
'''Main application features:'''
+
* Fully Configurable
+
* WebCrawlers crawl all open [[HTTP]] and HTTPS ports output from nmap
+
* LibWhisker2 For [[HTTP]] [[IDS Evasion]] (Same options as nikto)
+
* Tests via GET,POST, and COOKIE
+
'''[[Web Exploitation|Web penetration tests]]:'''
+
* [[SQL injection]] (This test is signature free!)
+
* LDAP Injection
+
* [[XSS]]
+
* [[File inclusion]]
+
* [[Command Injection]]
+
  
<center>'''''[[Vanguard|Learn more - Vanguard]]'''''</center>
+
<center>'''''[[Mysqli-blindutils|Learn more - MySQLi-BlindUtils]]'''''</center>

Latest revision as of 08:35, 20 April 2013

MySQLi-BlindUtils

MySQLi-BlindUtils is a collection of blind SQL injection utilities for MySQL that demonstrate a variety of techniques. It contains sqli-hap.py, which demonstrates our new comparative precomputation technique; sqli-slee.py, a time-based injection tool; and sqli-p.pl, for boolean enumeration.

Learn more - MySQLi-BlindUtils