Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

SQID v0.3 - SQL Injection Digger.
From: Metaeye SG <contact () metaeye org>
Date: Mon, 14 Jan 2008 19:47:04 +0530

SQL injection digger is a command line program that looks for SQL
injections and common errors in websites. This version now can
perform the following operations.

 * Look for SQL injections and common errors in website urls found
   by performing a google search.
 * Look for SQL injections and common erros in a given url or a file
   with urls.
 * Look for SQL injections and common errors in links from a web page.
 * Crawl a website/webpage and do the above.

Also supports.

 * Load multiple triggers from file.
 * Load multiple signature databases from files.
 * HTTPS support.
 * HTTP proxy support with authentication.
 * Basic authentication.
 * Specify user agent.
 * Specify referer.
 * HTTP Cookies loading from command line or a file.

SQID's greatest strength lies in its simple architecture of inserting
triggers in URL parameters and matching responses using regular
expressions. Hence one can use it for other purposes also.

SQID can be downloaded from http://sqid.rubyforge.org.


[ Metaeye Security Group ]
[ http://www.metaeye.org ]


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


  By Date           By Thread  

Current thread:
  • SQID v0.3 - SQL Injection Digger. Metaeye SG (Jan 14)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault