Hack Forums
{Beta} FREE SQLi Bot - 10-minute SQLi v1.0 - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: {Beta} FREE SQLi Bot - 10-minute SQLi v1.0 (/showthread.php?tid=3869261)

{Beta} FREE SQLi Bot - 10-minute SQLi v1.0 - SIM-1725686 - Nov 16, 2013

[img]http://www.fgopl.tk/images/sqlibot.png[/img]

SQLi in 10 minutes or less • Noob-friendly • Written in C#

v1.0 - Beta

100% FREE TO YOU!


Hello, everyone. I whipped this thing up today. Essentially, it's a helper that helps you pentest your site for SQLi vulnerabilities (Technically, any site, but this isn't necessarily a BH tool.).

Since this just the first version, and a beta, I'm providing it 100% free.

Features:
  • Automatic Query Completion

  • Easy-to-follow ToolTips and Guides

  • Quick Access to Yashar Shahinzadeh's Admin Finder

  • You don't pay a penny.

  • Virus-free

  • Drastic SQLi time decrease

  • Much more...!



Drawbacks:
  • Column name and username:password display can not yet be automated

  • Only supports Windows

  • Unfortunately cannot perform the whole injection in one step


Virus scan: Click
Spoiler (Click to View)

Screenshots:
Spoiler (Click to View)

This code is obfuscated. No leeching allowed. <3


Download Mirrors:
Tell me if any of these are broken.

4Shared:
Spoiler (Click to View)

#:
Spoiler (Click to View)

Direct Download Link:
Spoiler (Click to View)

* - Cecilia - Nov 16, 2013

Does this use webbrowsers or http requests?

I've done a thing thats like this in PHP, yet it does do one query dumps.

* - SIM-1725686 - Nov 16, 2013

(Nov 16, 2013 03:33 PM)LaPanthere Wrote:  Does this use webbrowsers or http requests?

I've done a thing thats like this in PHP, yet it does do one query dumps.

This one uses WebBrowsers. They were ideal for this project, in that the form shows you the resulting page from your queries.

* - _UserName_ - Nov 16, 2013

So all the program does is tells you what to type into the URL when you supply it with the data shown in the browser portion of the program?

* - SIM-1725686 - Nov 16, 2013

(Nov 16, 2013 03:41 PM)_UserName_ Wrote:  So all the program does is tells you what to type into the URL when you supply it with the data shown in the browser portion of the program?

Not exactly. It basically lets you perform a query with less characters than usual. Helps to shorten the process. There might be some bugs, but that's why it's a beta.

* - _UserName_ - Nov 16, 2013

Is their WAF bypassing support?

I created something like this in Python, from the sound of it. Yet, mine didn't look as pretty as yours does.

* - SIM-1725686 - Nov 16, 2013

(Nov 16, 2013 05:05 PM)_UserName_ Wrote:  Is their WAF bypassing support?

I created something like this in Python, from the sound of it. Yet, mine didn't look as pretty as yours does.

As of now, there's no WAF bypassing. I'll probably include it in a full release. Didn't come to mind while I was writing it.