SQL Power Injector 1.1.1
SQL Power Injector is an application created in .
|
0.00 
Freeware
0K
Windows Vista 
SQL Power Injector is an application created in .Net 1.1 that helps the penetration tester to inject SQL commands on a web page.
For now SQL Power Injector is SQL Server, Oracle, MySQL and Sybase/Adaptive Server compliant, but it is possible to use it with any existing DBMS when using the inline injection (Normal mode). Indeed, the normal mode is basically the command that someone will put in the parameter sent to the server.
If the aspect of inline SQL injection is powerful in itself, its main strength dwells in the multithreaded automation of the injection. Not only there is a possibility to automate tedious and time consuming queries but you can also modify the query to get only what you want.
SQL Power Injectoris obviously more useful in the blind SQL injection since the other ways to exploit the SQL injection vulnerability is more effusive and much faster when the results are displayed on the web page (union select in a HTML table and generated 500 error for instance).
SQL Power Injector automation can be realized in two ways: by time delay or comparing the expected result.The first way is generally compared against an error or difference between positive condition with a negative one and the second way will turn out positive if the time delay sent to the server equals to the one parameterized in the application.
The main effort done on SQL Power Injector was to make it as painless as possible to find and exploit a SQL injection vulnerability without using any browser.
That is why you will notice in that there is an integrated browser that will display the results of the SQL Power Injector injection parameterized in a way that any related standards SQL error will be displayed without the rest of the page.
Of course, like many other features of SQL Power Injector, there are ways to parameterize the response of the server to make it as talkative to you as possible.
Another important part of SQL Power Injector is its power to get all the parameters you need to test the SQL injection, either by GET or POST method.
tags
sql power power injector sql injection the server the sql time delay browser that the results injection vulnerability normal mode web page
Download SQL Power Injector 1.1.1
Download SQL Power Injector 1.1.1
Similar software
SQL Power Injector 1.1.1
Francois Larouche
SQL Power Injector is an application created in .
Injector 1.0
Ysgyfarnog
Injector provides a mechanism to inject a Dynamic Link Library (DLL) into an arbitrary process.
FLV Metadata Injector 1.0.2
Manitu Group
FLV Metadata Injector from Buraks allows you to inject an object containing two arrays into the FLV's metadata.
Mp3 Turbo Injector 1.5
ULTIMATE SYSTEMS
MP3 Turbo Injector is a 32-bit application for Windows, which inserts a MPEG audio (MP3) file into another MP3 file.
SWF ScriptLimits Injector 1.0
Manitu Group
SWF ScriptLimits Injector (SWFSLI) is a Win32 console (command line) application that can modify/remove/add 'ScriptLimits' tag to a SWF file.
SPlash Injector 1.03
daio.com
Once modified with SPI the executable display an added window before running the original program.
dll-inject 1.0
Prim Soft Pro S.R.L.
dll-inject permits injection of dll's into another process just before this will start.
Net Power Client Standalone 0.89.7
Data Product Services Ltd.
Did you ever look around at your office at night, to the hum of desktop pc's still whirring away with nobody at them?
It costs money to leave these PC's running, and consumes energy that we really can't afford to waste.
Pc Power Suite 3.1
Maximum Software
With 30 Software Titles included, PC Power Suite 2.
Net Power Client Service 0.89.7
Data Product Services Ltd.
Have you ever looked around at your office at night, to the hum of desktop pc's still whirring away with nobody at them?
It costs money to leave these PC's running, and consumes energy that we really can't afford to waste.
RSS