Update jSQL Injection v-0.3 : a java tool for automatic database injection.

March 10, 2013 · by Terry · in Penetration Test, Scanner, Sql Injection

SQL Injection is a lightweight application used to find database information from a distant server.
jSQL is free, open source and cross-platform (Windows, Linux, Mac OS X, Solaris).

Version 0.3 features:

GET, POST, header, cookie methods
Normal, error based, blind, time based algorithms
Automatic best algorithm selection
Thread control (start/pause/resume/stop)
Expose URL calls
Simple evasion
Data retrieving progression bar
Proxy setting
Distant file reading
Webshell deposit
Terminal for webshell commands
Configuration backup
Updates checking
Supports MySQL

Next work:
+ distant table writing [sqli]
+ distant file writing [sqli]
+ reverse tcp shell deposit [sqli]
+ right elevation [sqli]
+ speed increase (non encoding pass): 50% faster [sqli]
+ control all running tasks in a tab [gui]
# speed test comparison with other injection tools [dev]
# automatic code testing (JUnit) [dev]
# wiki pages [site]

Download : jsql-injection-v0.3.jar (286 KB)
Find Other Version |
Sources : https://code.google.com/p/jsql-injection/
Our Post before : http://seclist.us/2012/10/jsql-injection-v-2-0-released.html