[ ] Blind MySQL injection and database stressing
http://www.reversing.org/node/view/13
[ ] Using SQLBrute to brute force data from a blind SQL injection point
http://www.justinclarke.com/archives/2006/03/sqlbrute.html
[ ] Advanced SQL Injection In SQL Server Applications - Chris Anley <chris@ngssoftware.com> [2002]
http://www.nextgenss.com/papers/advanced_sql_injection.pdf
[ ] (more) Advanced SQL Injection - Chris Anley <chris@ngssoftware.com> [2002-06-18]
http://www.nextgenss.com/papers/more_advanced_sql_injection.pdf
[ ] SQL Injection, Are Your Web Applications Vulnerable? - SPI Dynamics [2004-10-29]
http://www.securitydocs.com/library/2656
http://www.securitydocs.com/link.php?action=detail&id=2656&headerfooter=no
http://www.securitydocs.com/pdf/2656.PDF
[ ] Manipulating Microsoft SQL Server Using SQL Injection - Cesar Cerrudo <sqlsec@yahoo.com>
http://www.appsecinc.com/presentations/Manipulating_SQL_Server_Using_SQL_Injection.pdf
[ ] Top 15 free SQL Injection Scanners
http://www.security-hacks.com/2007/05/18/top-15-free-sql-injection-scanners
SQLIer
http://bcable.net/project.php?sqlier
Sqlbftools
http://www.reversing.org/node/view/11
SQLibf
http://www.open-labs.org/ (这里有一些HTTP相关的工具)
SQL Brute
http://www.gdssecurity.com/l/t.php
BobCat
http://www.northern-monkee.co.uk/index.html
http://www.northern-monkee.co.uk/projects/bobcat/bobcat.html
sqlmap
http://sqlmap.sourceforge.net/
Absinthe
http://www.0x90.org/releases/absinthe/
http://www.0x90.org/releases/absinthe/download.php
SQL Injection Pentesting TooL
http://sqltool.itdefence.ru/indexeng.html
http://sqltool.itdefence.ru/setup.rar
SQID
http://sqid.rubyforge.org/
http://rubyforge.org/frs/?group_id=2617
SQL Power Injector
http://sourceforge.net/projects/spinj/
http://www.sqlpowerinjector.com/
FG-Injector Framework
http://sourceforge.net/projects/injection-fwk/
sqlninja
http://sqlninja.sourceforge.net/
Automagical SQL injector
http://www.indianz.ch/tools/attack/automagic.zip
NGSS SQL Injector
http://www.indianz.ch/tools/attack/sqlinjector.zip
ISR-sqlget
http://www.infobyte.com.ar/
http://www.infobyte.com.ar/down/ISR-sqlget-1.0.0.tar.gz
http://www.infobyte.com.ar/down/ISR-sqlget-Readme.txt
http://www.infobyte.com.ar/demo/ISR_sqlget_ISS_proventia_bypass.html
ISR-Form
http://www.infobyte.com.ar/down/ISR-form-v1.0.tar.gz
BlindMap
http://www.c0debreak.net/cb/main.html
http://codebreak.uni.cc/cb/papers/blind.html
http://codebreak.uni.cc/downloads/sql.zip
http://external.c0debreak.net/files/sql.zip
http://w4ck1ng.com/tools/sql/sql.zip
BaKo's SQL Injection Scanner v2.2 - BaKo [2007-11-29]
http://files.h4ck-y0u.org/3745771
[ ] Web application vulnerability scanner / security auditor
http://wapiti.sourceforge.net/
[ ] w3af - Web Application Attack and Audit Framework
http://w3af.sourceforge.net/
[ ] advanced web server fingerprinting
http://www.computec.ch/projekte/httprecon/
(有windows版)
[ ] http://chorizo-scanner.com/
[ ] OWASP SQLiX Project
http://www.owasp.org/index.php/Category:OWASP_SQLiX_Project
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。