Posted By: Pranay Kanwar
Date: 2008-01-14 14:07
Summary: SQID 0.3 Release
Project: SQL injection digger
SQL injection digger is a command line program that looks for SQL injections and common errors in web sites.
This version can perform the following operations:
* Look for SQL injections and common errors in web site URLs found by performing a google search.
* Look for SQL injections and common errors in a given URL or a file with URLs.
* Look for SQL injections and common errors in links from a web page.
* Crawl a web site/web page and do the above.
Also supports
* Load multiple triggers from file.
* Load multiple signature databases from files.
* HTTPS support.
* HTTP proxy support with authentication.
* Basic authentication.
* Specify user agent.
* Specify referer.
* HTTP Cookies loading from command line or a file.
sqid is extensible by adding more signatures to its database (sqid.db). The signatures simply use
regular expressions.
|
|