Outils d'utilisateurs
Ceci est une ancienne révision du document !
Le PAD pour proposer une amélioration à cette page : https://pad.zenk-security.com/p/merci
SQL Injection Vulnerability Scanner Tool’s :
🛠 SQLMap — Automatic SQL Injection And Database Takeover Tool https://github.com/sqlmapproject/sqlmap
🛠 PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server https://github.com/NetSPI/PowerUpSQL
🛠 jSQL Injection — Java Tool For Automatic SQL Database Injection https://github.com/ron190/jsql-injection
🛠 BBQSQL — A Blind SQL-Injection Exploitation Tool https://github.com/Neohapsis/bbqsql
🛠 NoSQLMap — Automated NoSQL Database Pwnage https://github.com/codingo/NoSQLMap
🛠 Whitewidow — SQL Vulnerability Scanner https://www.kitploit.com/2017/05/whitewidow-sql-vulnerability-scanner.html
🛠 DSSS — Damn Small SQLi Scanner https://github.com/stamparm/DSSS
🛠 explo — Human And Machine Readable Web Vulnerability Testing Format https://github.com/dtag-dev-sec/explo
🛠 Blind-Sql-Bitshifting — Blind SQL-Injection via Bitshifting https://github.com/awnumar/blind-sql-bitshifting
🛠 Leviathan — Wide Range Mass Audit Toolkit https://github.com/leviathan-framework/leviathan
🛠 Blisqy — Exploit Time-based blind-SQL-injection in HTTP-Headers (MySQL/MariaDB) https://github.com/JohnTroony/Blisqy
Des ressources et outils pour les injections SQL
SQLi General Resources
http://www.w3schools.com/sql/sql_injection.asp
https://information.rapid7.com/rs/rapid7/images/R7%20SQL_Injection_Cheat_Sheet.v1.pdf
http://websec.ca/kb/sql_injection
http://ferruh.mavituna.com/sql-injection-cheatsheet-oku/
http://www.unixwiz.net/techtips/sql-injection.html
http://www.sqlinjectionwiki.com/
https://packetstorm.sigterm.no/papers/cheatsheets/sqlmap-cheatsheet-1.0-SDB.pdf
https://www.owasp.org/index.php/SQL_Injection_Prevention_Cheat_Sheet
MySQLi Resources
http://pentestmonkey.net/cheat-sheet/sql-injection/mysql-sql-injection-cheat-sheet
https://websec.wordpress.com/2010/12/04/sqli-filter-evasion-cheat-sheet-mysql/
http://resources.infosecinstitute.com/backdoor-sql-injection/
MSSQLi Resources
http://evilsql.com/main/page2.php
http://pentestmonkey.net/cheat-sheet/sql-injection/mssql-sql-injection-cheat-sheet
Oracle SQLi Resources
http://pentestmonkey.net/cheat-sheet/sql-injection/oracle-sql-injection-cheat-sheet
Postgres SQLi Resources
http://pentestmonkey.net/cheat-sheet/sql-injection/postgres-sql-injection-cheat-sheet
SQLite Resources
https://sites.google.com/site/0x7674/home/sqlite3injectioncheatsheet
