[Dailydave] hotel room things

rd rd at segfault.net
Mon May 14 02:58:29 EDT 2007


Dave Aitel wrote:
> So I have a few things, other than AllergyWeb, that I want to write.
> Top on my list is a "SQL Injection Explorer" which allows you to use
> the error messages to download bits of a database as if it was a
> directory tree. This is useful when you end up doing SQL Injection
> against a DB server that has the following characteristics:

dave,

You may want to check this out http://www.0x90.org/releases/absinthe. It
works with both error based and blind injection (check the document
section for screenshots)

cheers,

--rd

-- 
PGP Key ID: 71BB82EF - http://www.thc.org/keys/rd.pub
Fingerprint - E18F 6CE8 E12B 3306 80D9 6B5A 364B 1D77 71BB 82EF


More information about the Dailydave mailing list