Outils d'utilisateurs
des_ressources_et_outils_pour_les_injections_sql
Différences
Cette page vous donne les différences entre la révision choisie et la version actuelle de la page.
|
des_ressources_et_outils_pour_les_injections_sql [2019/11/20 17:55] M0N5T3R |
des_ressources_et_outils_pour_les_injections_sql [2020/05/29 16:45] (Version actuelle) M0N5T3R |
||
|---|---|---|---|
| Ligne 1: | Ligne 1: | ||
| FIXME **Le PAD pour proposer une amélioration à cette page :** https://pad.zenk-security.com/p/merci | FIXME **Le PAD pour proposer une amélioration à cette page :** https://pad.zenk-security.com/p/merci | ||
| - | ====== SQL Injection Vulnerability Scanner Tool’s : ====== | + | ====== Une liste d'outils pour exploiter les Injections SQL : ====== |
| + | |||
| + | **SQLi scanner en ligne avec version gratuite** | ||
| + | |||
| + | |||
| + | 🛠 https://pentest-tools.com/website-vulnerability-scanning/sql-injection-scanner-online# | ||
| + | |||
| + | ** Les outils ** | ||
| + | 🛠 An automatic SQL Injection tool which takes advantage of ~DorkNet~ Googler, Ddgr, WhatWaf and sqlmap. https://github.com/sheldoncoupeheure/AutoSQLi | ||
| + | |||
| + | |||
| + | 🛠 Have fun injecting SQL into a Ruby on Rails application! https://github.com/presidentbeef/inject-some-sql | ||
| + | |||
| + | 🛠 0xbug/SQLiScanner Automatic SQL injection with Charles and sqlmap api https://github.com/0xbug/SQLiScanner | ||
| + | |||
| + | |||
| + | 🛠 massive SQL injection vulnerability scanner https://github.com/the-robot/sqliv | ||
| 🛠 SQLMap — Automatic SQL Injection And Database Takeover Tool https://github.com/sqlmapproject/sqlmap | 🛠 SQLMap — Automatic SQL Injection And Database Takeover Tool https://github.com/sqlmapproject/sqlmap | ||
| - | + | free sqlmap online : https://pentest-tools.com/exploit-helpers/sqli-exploit-tool-sqlmap-online# | |
| + | |||
| + | 🛠 SQLSus is another open source SQL injection tool and is basically a MySQL injection and takeover tool http://sqlsus.sourceforge.net/ | ||
| + | |||
| + | sqli-mass-scanner massive SQL injection vulnerability scanner https://github.com/forxml/sqli-mass-scanner | ||
| + | |||
| + | 🛠 Safe3 SQL injector is another powerful but easy to use SQL injection tool. http://sourceforge.net/projects/safe3si/ | ||
| + | |||
| + | 🛠 SQLninja is a SQL injection tool that exploits web applications that use a SQL server as a database server. http://sqlninja.sourceforge.net/ | ||
| + | |||
| + | 🛠 BSQL hacker is a nice SQL injection tool that helps you perform a SQL injection attack against web applications. https://resources.infosecinstitute.com/best-free-and-open-source-sql-injection-tools/#download | ||
| 🛠 PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server https://github.com/NetSPI/PowerUpSQL | 🛠 PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server https://github.com/NetSPI/PowerUpSQL | ||
| Ligne 59: | Ligne 87: | ||
| http://resources.infosecinstitute.com/backdoor-sql-injection/ | http://resources.infosecinstitute.com/backdoor-sql-injection/ | ||
| - | |||
| - | **MSSQLi Resources** | ||
| http://evilsql.com/main/page2.php | http://evilsql.com/main/page2.php | ||
| Ligne 73: | Ligne 99: | ||
| http://pentestmonkey.net/cheat-sheet/sql-injection/postgres-sql-injection-cheat-sheet | http://pentestmonkey.net/cheat-sheet/sql-injection/postgres-sql-injection-cheat-sheet | ||
| + | |||
| + | **Blind SQL Injection** | ||
| + | |||
| + | https://www.owasp.org/index.php/Blind_SQL_Injection | ||
| + | |||
| + | **Testing for SQL Injection (OTG-INPVAL-005)** | ||
| + | |||
| + | https://www.owasp.org/index.php/Testing_for_SQL_Injection_(OTG-INPVAL-005) | ||
| + | |||
| + | **SQL Injection Bypassing WAF** | ||
| + | |||
| + | https://www.owasp.org/index.php/SQL_Injection_Bypassing_WAF | ||
| **SQLite Resources** | **SQLite Resources** | ||
| https://sites.google.com/site/0x7674/home/sqlite3injectioncheatsheet | https://sites.google.com/site/0x7674/home/sqlite3injectioncheatsheet | ||
| + | |||
| + | **Reviewing Code for SQL Injection** | ||
| + | |||
| + | https://www.owasp.org/index.php/Reviewing_Code_for_SQL_Injection | ||
| + | |||
| + | **NoSQL injection Resources** | ||
| + | |||
| + | https://www.owasp.org/index.php/Testing_for_NoSQL_injection | ||
| + | |||
| + | **PL/SQL:SQL Injection Resources** | ||
| + | |||
| + | https://www.owasp.org/index.php/PL/SQL:SQL_Injection | ||
des_ressources_et_outils_pour_les_injections_sql.1574268947.txt.gz · Dernière modification: 2019/11/20 17:55 par M0N5T3R
Outils de la Page
Sauf mention contraire, le contenu de ce wiki est placé sous la licence suivante : CC Attribution-Share Alike 3.0 Unported
