[BreShiE]

This post is leaked from the premium section of "Legion" on the competing hack forum. There will be 5 new leaks a day. There may be some format problems due to UTF8 character encoding.

How to automatically scan for SQL vulnerabilities in a website.

This guide will help you find and detect SQL vulnerabilities in a selected website automatically.

The Program

The program we are going to be using is SQLSentinel, it finds the vulnerability's, but remember; it doesn't exploit them. Very useful if you're into SQLi.

Download at http://sourceforge.net/projects/sqlsentinel/

Okay, after you have downloaded the program, find a website that you want to scan for vulnerability's, and type it into the "Url" field and push start, it'll scan for SQL vulnerabilities automatically, and will tell you if it finds any. Easy, right?

Screen Shots

[Black Haze]

I know this is probably a stupid question, but, I'm just curious. Is it illegal to scan sites for vulnerabilities without permission from the Owner if you don't do anything with the information collected but provide it to the Owner?

[Dong]

I know this is probably a stupid question, but, I'm just curious. Is it illegal to scan sites for vulnerabilities without permission from the Owner if you don't do anything with the information collected but provide it to the Owner?

Collecting sensitive information from a website through a vulnerability without permission is a bit more than scanning for vulnerabilities. Anyhow, yes it is possible to get in trouble for collecting sensitive information from the system without permission. Scanning for vulnerabilities in Web Applications such as SQL injection, XSS, and whatnot isn't particularly something you can get in to trouble for... mainly because, you're just accessing their website, really. There's no real problem with that. However, if you exploit the vulnerability in order to gain access to their information without permission, you could get in trouble. Also, if you end up causing a DoS attack somehow by scanning through their site you can get in trouble. Possibly. So there are a ton of possibilities.

I'm not exactly sure if you can get in trouble, but this is just me thinking logically.

[Black Haze]

Hmm. Your logic seems sound enough. Ive never done it before but I would like to try it out just to see what its capable of, but
I dont want to cause any trouble. Atleast not yet. Haha. jking. Or am I? Anyways thanks for your insight and information.

[Nikita]

When I double click the jar it doesnt open?

[Black Haze]

Outdated java most likely. Just update it.

[Adorapuff]

What's the point of tools. Using tools will not boost your e-penis, make you look cool or any of that shit, and its no fun. Learning Python and coding auto-tools knowing what all the functions do is fun. Just my 2 cents.

[Cyanide and Cynicism]

What's the point of tools. Using tools will not boost your e-penis, make you look cool or any of that shit, and its no fun. Learning Python and coding auto-tools knowing what all the functions do is fun. Just my 2 cents.

http://www.perl.org/

[Adorapuff]

http://www.perl.org/

Auto-tools shall only be coded in Python
/topic

[Cyanide and Cynicism]

Auto-tools shall only be coded in Python
/topic