Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

[New Update] sqlinjector [C++ | Free | Always Updated] + Video

Hello everyone,

sqlinjector v0.2 beta has been released
Updates:
1- Made a simple website where people can check updates (because I can't edit the HF thread since I am not L33t...) and download links of all versions: http://sqlinjector.site88.net/
2- Added an Automatic Version Checker. (makes sure you're using the newest version)

Picture:

[Image: obZEj85.png]

Features:

1- Only works on Postgre Databases.
2- This is capable of doing everything when it comes to Postgre Databases, using Blind Injection, unlike other tools.
3- This is much faster than Havij, Sqlmap or similar tools.
4- Actually, those tools does barely support Postgre and you can test them yourself on the vulnerable link shared in my Blind Postgre Sql Injection Tutorial and you'll see that Havij and Sqlmap will fail while sqlinjector v0.1 beta will succeed.
5- It's programmed in C++, it works on all Windows Platforms.
6- Automatic Version Checker. (makes sure you're using the newest version)
7- This is currently just in beta so bare with me....

Upcoming Updates:

1- Mysql, Mssql and Oracle will be supported.
2- Linux will be supported. (just let me finish getting rid of those Window's dependencies)
3- It will also be released on Kali Linux.
4- When it's completely done, the source will be released.
(I will be adding whatever comes to my mind to this tool. If there's anything you want to see in the upcoming updates then just let me know.)

Videos:





Website (so freaking simple):

http://sqlinjector.site88.net/

Download Link:

http://up.ht/1kOMPdJ

Scan:

https://www.virustotal.com/en/file/5d1d8...399555293/

Know Errors:

Missing msvcp110.dll.
Just download the following: http://www.microsoft.com/en-au/download/...x?id=30679 and it should be fixed.
An update will be released soon to fix this.

Caution:

I can't update this thread later on because I am not a l33t...
Check the website of sqlinjector for any update or anything similar.
Also, I will be posting all kinds of updates as a normal reply to this thread.

Final words? Yep:

This is for Educational and Personal Use only, I take no responsibility on how you might use sqlinjector.
Special thanks to DownFall since together we worked on some researches related to Postgre.
Special thanks to everyone else who supported me in this thread: https://hackforums.net/showthread.php?tid=4212679
If you like this tool and would like to support it then leaving a nice reply to keep the thread alive would be enough.
If you want to know how this tool does it all then check my tutorial.

Witness Happiness:

http://www.youtube.com/watch?v=-yINYVlH6ME
(Only 1 video allowed in a thread)

That's all for now,
dotcppfile.
is this open source? are you going to release the source?
#opensauce4life
(May 7, 2014 11:07 AM)protocolback Wrote:  is this open source? are you going to release the source?
#opensauce4life

I am not releasing the source right now but I will do so when this tool gets what it deserves and gets on Kali and Linux.


(May 7, 2014 11:15 AM)Wᴀᴄᴋᴏ Wrote:  This looks like a really nice tool. Good work dotcppfile.

Thanks a lot Wᴀᴄᴋᴏ, your support is much appreciated.
(May 7, 2014 11:27 AM)-DownFall Wrote:  Nice job on the release - might want to put some virus scans up on the thread though.

Thanks. Cool, I just added a link to the virus scan.
Havij handles PSQL perfectly. Whats another advantage to yours over havij?
(May 7, 2014 11:39 AM)Kuky Wrote:  Havij handles PSQL perfectly. Whats another advantage to yours over havij?

Check this out: https://hackforums.net/showthread.php?tid=4195199 Havij couldn't handle that website... Also, sqlinjector is much much faster than Havij, etc.
(May 7, 2014 11:51 AM)jamilbt Wrote:  [img]http://www.tase.go.th/tase/upload/13/e.jpg[/img]

error, why ?

My Avs blocked your image for some reason... www.tase.go.th? Whatever...
I checked the image with no AV and it seems I fucked up in the first version lol.
Anyways to fix this, you have to download the following: http://www.microsoft.com/en-au/download/...x?id=30679
I will release a fix for this soon.
(May 8, 2014 06:52 AM)limainfinita Wrote:  better than sqlmap and havij but only in Postgre Databases ?
thats a big statement to say, i'm really sceptical about this. but i will try it out.
thank you anyway.

For now it's only postgre, Mysql, mssql and Oracle will soon be added.
The newest version of sqlmap succeeds, the newest version of Havij fails, sqlinjector succeed with a faster speed.
Anyways, it's good you liked the tool.


sqlinjector v0.2 beta has been released
Updates:
1- Made a simple website where people can check updates (because I can't edit the HF thread since I am not L33t...) and download links of all versions: http://sqlinjector.site88.net/
2- Added an Automatic Version Checker. (makes sure you're using the newest version)


sqlinjector v0.3 beta has been released
Updates:
1- Mysql V5 is now supported.
2- This has simply become the fastest tool out there. Check the new video out and you'll see (dumped a mysql database using blind sql injection within 30 seconds):



And more is yet to come, please keep check of the official shitty(lol) website; it's where all the new updates, information etc will be added: http://sqlinjector.site88.net/


If you like this tool and if you want to support it then leaving a nice reply and keeping this thread alive would be enough.
nice job man its good tool keep it up pro :)
(May 9, 2014 03:59 PM)JACK.HAMMER Wrote:  nice job man its good tool keep it up pro :)

Thanks for the nice reply JACK.HAMMER, appreciated.


New Updates:
Updates:
1- Changed the name to CppSqlInjector
2- Updated the website to make it better and a little bit more clear.


News:
CppSqlInjector v0.4 beta will be released today with the support of Mssql or Opera(not sure which one to add yet lol)
You chose one hell of a language to code an injector over, kodus. As for the speed, remember it'll always depend on the server response time target-wise hence at some cases the speed advantage won't matter. This is quite refreshing as a tool though, and good luck with it. I'll keep an eye open.
(May 10, 2014 06:28 AM)Th3PonyWizard Wrote:  You chose one hell of a language to code an injector over, kodus. As for the speed, remember it'll always depend on the server response time target-wise hence at some cases the speed advantage won't matter. This is quite refreshing as a tool though, and good luck with it. I'll keep an eye open.

C++ is one of the best languages out there and lets not forget about what it offers me when programming CppSqlInjector. About the speed thing, you're right; it is all about how fast the server responds to the request sent by CppSqlInjector but the power of the functions used in the tool, the way they work, their stability, how they stay in contact with the website and the way they act depending on what is given or received is also a huge fact when it comes to the speed of such tools.
Anyways, I appreciate your reply and your interest, thanks.


News:
I did say I want to add a new feature to CppSqlInjector such as the support of Mssql or Opera today so I started working with Mssql on a localhost but it wasn't easy: I am using Xampp with php version >5 and microsoft doesn't really offer support to such versions so I had to use unofficial files to get it to work, I also got phpmsadmin and I set it up the right way.
The bad part is that I am in need of Microsoft Sql Server which is about 2gb(something like that) and I can't really download it today for many reasons related to the need of the full speed of my connection so I might work on this tomorrow or after tomorrow, but I got everything ready as you can see and I wrote a simple vulnerable php script as well.
In the mean while I am working on CppSqlInjector's functions related to Mssql but I can't test anything which means I won't be releasing CppSqlInjector v0.4 today so please bare with me.
News:
1- Just got a free domain from co.nr : cppsqlinjector.co.nr and it is set up. I like it, it's much better than that site88.net thingy.
2- I promised you that CppSqlInjector will be supporting Mssql within few days and I will keep my word even though that Microsoft Sql Server is being such a bitch lol.
3- I may start Live Streaming about this for many reasons and one of these reasons is because I start talking to myself when working on CppSqlInjector late at nigh lol, so yeah, this has to stop lol.
(May 11, 2014 02:03 PM)dotcppfile Wrote:  News:
1- Just got a free domain from co.nr : cppsqlinjector.co.nr and it is set up. I like it, it's much better than that site88.net thingy.
2- I promised you that CppSqlInjector will be supporting Mssql within few days and I will keep my word even though that Microsoft Sql Server is being such a bitch lol.
3- I may start Live Streaming about this for many reasons and one of these reasons is because I start talking to myself when working on CppSqlInjector late at nigh lol, so yeah, this has to stop lol.
When are the Linux support coming? I really want it, and thanks for helping the community:D


Possibly Related Threads...
Thread / Author Replies Views Last Post
by HackRainOct 9, 2012 01:17 AM 51 2,333 Oct 9, 2012 01:17 AM
Last Post: p0pc0rn
by palchumsMay 8, 2012 06:17 AM 5 217 May 8, 2012 06:17 AM
Last Post: palchums
by S‎kidSep 11, 2011 03:18 PM 32 514 Sep 11, 2011 03:18 PM
Last Post: Thunderwolf999