full-disclosure - SQID v0.3 - SQL Injection Digger.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <478B6EE0.4090809@metaeye.org>
Date: Mon, 14 Jan 2008 19:47:04 +0530
From: Metaeye SG <contact@...aeye.org>
To: full-disclosure@...ts.grok.org.uk
Subject: SQID v0.3 - SQL Injection Digger.

SQL injection digger is a command line program that looks for SQL
injections and common errors in websites. This version now can
perform the following operations.

 * Look for SQL injections and common errors in website urls found
   by performing a google search.
 * Look for SQL injections and common erros in a given url or a file
   with urls.
 * Look for SQL injections and common errors in links from a web page.
 * Crawl a website/webpage and do the above.

Also supports.

 * Load multiple triggers from file.
 * Load multiple signature databases from files.
 * HTTPS support.
 * HTTP proxy support with authentication.
 * Basic authentication.
 * Specify user agent.
 * Specify referer.
 * HTTP Cookies loading from command line or a file.

SQID's greatest strength lies in its simple architecture of inserting
triggers in URL parameters and matching responses using regular
expressions. Hence one can use it for other purposes also.

SQID can be downloaded from http://sqid.rubyforge.org.

[ Metaeye Security Group ]
[ http://www.metaeye.org ]

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/