UPDATE: mysqloit v0.2!

Latest version of mysqloit v0.2 is released and ready for action! We have discussed about this tool here.

Whats new?
1) SQL Injection detection using time based injection method
2) Database fingerprint
3) Web server directory fingerprint
4) Payload creation and execution

Basic Requirements:
1) FILE privileges.
2) Web server and database server must be in the same machine 3) Prior knowledge of the web server directory.
4) For the LAMP platform, if the mysqld runs as a non root user, a writable web server directory is required.

How to use?
It is written in python, so can be run from any system which has python compiler.

./mysqloit.py -h

Download mysqloit here

If you enjoyed this article, you might also like:

• March 15, 2010 -- UPDATE: sqlmap 0.8 Final!
  We wrote about sqlmap version 0.8 RC 1 being released here. Now, the author Bernardo Damele A. G. ha...
• November 26, 2009 -- Pangolin – Automatic SQL injection penetration testing tool
  Pangolin is an automatic SQL injection penetration testing tool ,Its goal is to detect and take adva...
• October 12, 2009 -- Update : Sqlmap version 0.8 release candidate 1
  Hi we have discussed about sqlmap previous releases also , latest version Sqlmap version 0.8 release...
• July 29, 2009 -- Tips and tips for advance sql injection
  Sql injection Tips and tricks, some commands you should know to go deep in SQL injections. when you...
• July 9, 2010 -- OWASP O2 Platform: A New Paradigm on Performing, Documenting and Distributing Web Application Security Reviews!
  The O2 platform represents a new paradigm for how to perform, document and distribute Web Applicatio...
• July 1, 2010 -- UPDATE: Bsqlbf v2.6!
  This update is huge for all Bsqlbf lovers like us! Bsqlbf is updated about which, we have talked in ...
• June 29, 2010 -- UPDATE: Netsparker Community Edition 1.5.0.0!
  We have detailed talked about Netsparker Community Edition here. Now it has been updated to the late...
• June 23, 2010 -- Easy and Effective Way for Setting up a DNS Sinkhole!
  Procedure and network admins talk about plugging all of the holes and securing their network of deni...
• June 18, 2010 -- Integrate Nmap with NSE for Vulnerability Scanner.
  Performing a vulnerability scan is extremely resources consuming. Why not add a effortless vulnerabi...

Tagged as: application security, database security, mysql injection tool, sql injection tecniques