+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Good XSS or SQL Bruteforce tool (/showthread.php?tid=5778762)
Good XSS or SQL Bruteforce tool - ernestmiller - Jan 3, 2018
Anyone with any good suggestions??
RE: Good XSS or SQL Bruteforce tool - CryptixHacking - Jan 3, 2018
(Jan 3, 2018 12:13 PM)ernestmiller Wrote: Anyone with any good suggestions??
http://sqlmap.org
Is usually known as the best or one of the best software for this.
Works on all OS's and has easy command line access.
Also its python language allows you to easily add to the programs features or create custom plugins.
Now cant say it uses any XSS as cross site scripting isnt of much value on most sites anymore as they have many features in place now on most sites to block such script injection.
For XSS your probably better off going with
https://xsser.03c8.net/
Which is also coded in python and supports Tor proxy.
RE: Good XSS or SQL Bruteforce tool - ______________ - Jan 3, 2018
Use Kali Linux. It has loads of these types of programs installed under relevant headings
RE: Good XSS or SQL Bruteforce tool - CryptixHacking - Jan 3, 2018
(Jan 3, 2018 03:43 PM)______________ Wrote: Use Kali Linux. It has loads of these types of programs installed under relevant headings
Kali linux isnt required but yes it is a linux distro created to have many of these tools pre-installed.
RE: Good XSS or SQL Bruteforce tool - ernestmiller - Jan 4, 2018
That is half the fun though trying to bypass it, if its browser based protection for example just need to use another browser
I run Kali have all these tools built in already
RE: Good XSS or SQL Bruteforce tool - [BLANK] - Jan 5, 2018
Just use ZAP, it will scan an entire site for you and tell you if there is a common XSS or SQL issue. Then from there you can use other tools or manual methods of exploitation. Or use Burpsuite, scan the target, and test each parameter manually. There are also browser plugins that will test for xss. Lots of free tools out there.
RE: Good XSS or SQL Bruteforce tool - ernestmiller - Jan 7, 2018
Is ZAP a reliable scanner then it seems to be more reliable than Vega it does not pick up on strange XSS and SQL that does not exist I have Kali but never actually used it before
RE: Good XSS or SQL Bruteforce tool - javinzplayer - Jan 7, 2018
Havij is a advanced SQL Database Tool. It is really good to find DBs that are vuln to SQL Injection. But good luck finding a clean version because nearly all of them are infected.
RE: Good XSS or SQL Bruteforce tool - ernestmiller - Jan 8, 2018
I read you can use Havij with Wine on Linux does anyone have a download of it that is not completely corrupted