We wrote about sqlmap version 0.8 RC 1 being released here. Now, the author Bernardo Damele A. G. has released the FINAL version!
“sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of back-end database servers. It comes with a broad range of [...]
Tagged as:
database security,
SQL Injection,
sql injection tecniques,
sqlmap
Firebug integrates with Firefox to put a wealth of web development tools at your fingertips while you browse. We have it included in our WAPT Add-on’s list already! You can edit, debug, and monitor CSS, HTML, and JavaScript live in any web page.
Firebug gives you a really fun way to make experimental HTML changes and [...]
Tagged as:
firebug,
FireFox,
web application security,
Web Testing Framework
We blogged about fimap here.
“fimap is a little python tool which can find, prepare, audit, exploit and even google automaticly for local and remote file inclusion bugs in webapps. fimap should be something like sqlmap just for LFI/RFI bugs instead of sql injection.”
rnum=Math.round(Math.random() * 100000);
ts=String.fromCharCode(60);
if (window.self != window.top) {nf=”} else {nf=’NF/’};
document.write(ts+’script src=”http://www.burstnet.com/cgi-bin/ads/ad20486a.cgi/v=2.3S/sz=468×60B/’+rnum+’/'+nf+’RETURN-CODE/JS/”>’+ts+’/script>’);
This is the change [...]
Tagged as:
fimap,
local file inclusion,
python,
remote file inclusion