[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <a847a3140704200612v7bac72beyaaf6cdd64b2ffb44@mail.gmail.com>
Date: Fri, 20 Apr 2007 14:12:32 +0100
From: "Nick Boyce" <nick.boyce@...il.com>
To: bugtraq@...urityfocus.com
Cc: "Guillermo Marro" <gmmarro@...wgate.net>
Subject: Re: Yet another SQL injection framework
On 4/19/07, Guillermo Marro <gmmarro@...wgate.net> wrote:
> FG-Injector is a free tool that leverages the pentester's work by
> facilitating the exploitation of SQL Injection vulnerabilities.
[...]
> Get both, sources and a windows binary from:
> http://www.flowgate.net/?lang=en&seccion=herramientas
Um .. when I click on the link for "FG-Injector" at the above site
with my NoScript-enabled Firefox all I see is what looks like a server
log entry for my interaction :
aaa.bbb.ccc.ddd Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
rv:1.8.1.3) Gecko/20070309 Firefox/2.0.0.3 /injector
This is presumably because the actual links are infested with Javascript :
onClick="javascript:showStaff('injector')"
Since I'm following links in an email on a security mailing list I'm
disinclined to disable NoScript - any chance you can convert the links
into normal HREFs ?
I could go and grab your Javascript library and figure out what
'showStaff' does ... but I'd rather just click on an old-school link.
Cheers
Nick Boyce
--
I speak to all bloggers everywhere: just shut up for a second and let
me think, will you?
-- blog comment at http://it-gears.blogspot.com/ :-)
Powered by blists - more mailing lists