Re: SQL Injection Tools

["Jason Ross" <algorythm () gmail com>]

On Sun, Jun 22, 2008 at 8:23 PM, Serg B <sergeslists () gmail com> wrote:
> Hi All,
>
> Can anybody suggest a relatively reliable SQL injection tool?  Either
> Open Source or proprietary - required for business use.  So far, I've
> been clobbering all sorts of weird SQL strings manually, would be nice
> to minimize the repetitive keyboard labor.


You don't mention what DBMS is on the backend, which may make a
difference in the choice of tools.
In general however, I find Absinthe rocks, and it offers some very
nice features for business use (eg. the ability to place a custom
string in every transaction, useful to verify whether the database
dying in the middle of your testing was related to something you did
or not... etc.)

--
jason

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Top 5 Common Mistakes in 
Securing Web Applications
Get 45 Min Video and PPT Slides

www.cenzic.com/landing/securityfocus/hackinar
------------------------------------------------------------------------