Sinisterly
[Legion Leak] Automated Scanning For SQL Vulnerabilities - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking)
+--- Thread: [Legion Leak] Automated Scanning For SQL Vulnerabilities (/Thread-Legion-Leak-Automated-Scanning-For-SQL-Vulnerabilities)

Pages: 1 2

[Legion Leak] Automated Scanning For SQL Vulnerabilities - BreShiE - 07-30-2013

This post is leaked from the premium section of "Legion" on the competing hack forum. There will be 5 new leaks a day. There may be some format problems due to UTF8 character encoding.

(07-20-2013, 08:44 PM)Cellulosic Wrote:
How to automatically scan for SQL vulnerabilities in a website.


This guide will help you find and detect SQL vulnerabilities in a selected website automatically.


The Program
The program we are going to be using is SQLSentinel, it finds the vulnerability's, but remember; it doesn't exploit them. Very useful if you're into SQLi.
Download at http://sourceforge.net/projects/sqlsentinel/



Okay, after you have downloaded the program, find a website that you want to scan for vulnerability's, and type it into the "Url" field and push start, it'll scan for SQL vulnerabilities automatically, and will tell you if it finds any. Easy, right?


Screen Shots


[Image: postgresql_example.png]


RE: [LEGION LEAK] Automated Scanning For SQL Vulnerabilities - Black Haze - 09-16-2013

I know this is probably a stupid question, but, I'm just curious. Is it illegal to scan sites for vulnerabilities without permission from the Owner if you don't do anything with the information collected but provide it to the Owner?

RE: [Legion Leak] Automated Scanning For SQL Vulnerabilities - Dong - 09-16-2013

(09-16-2013, 05:49 PM)ThexLaughingxMan Wrote: I know this is probably a stupid question, but, I'm just curious. Is it illegal to scan sites for vulnerabilities without permission from the Owner if you don't do anything with the information collected but provide it to the Owner?

Collecting sensitive information from a website through a vulnerability without permission is a bit more than scanning for vulnerabilities. Anyhow, yes it is possible to get in trouble for collecting sensitive information from the system without permission. Scanning for vulnerabilities in Web Applications such as SQL injection, XSS, and whatnot isn't particularly something you can get in to trouble for... mainly because, you're just accessing their website, really. There's no real problem with that. However, if you exploit the vulnerability in order to gain access to their information without permission, you could get in trouble. Also, if you end up causing a DoS attack somehow by scanning through their site you can get in trouble. Possibly. So there are a ton of possibilities.

I'm not exactly sure if you can get in trouble, but this is just me thinking logically.

RE: [Legion Leak] Automated Scanning For SQL Vulnerabilities - Black Haze - 09-16-2013

Hmm. Your logic seems sound enough. Ive never done it before but I would like to try it out just to see what its capable of, but
I dont want to cause any trouble. Atleast not yet. Haha. jking. Or am I? Anyways thanks for your insight and information.

RE: [Legion Leak] Automated Scanning For SQL Vulnerabilities - Nikita - 09-16-2013

When I double click the jar it doesnt open?

RE: [Legion Leak] Automated Scanning For SQL Vulnerabilities - Black Haze - 09-17-2013

Outdated java most likely. Just update it.

RE: [Legion Leak] Automated Scanning For SQL Vulnerabilities - Adorapuff - 10-02-2013

What's the point of tools. Using tools will not boost your e-penis, make you look cool or any of that shit, and its no fun. Learning Python and coding auto-tools knowing what all the functions do is fun. Just my 2 cents.

RE: [Legion Leak] Automated Scanning For SQL Vulnerabilities - Cyanide and Cynicism - 10-02-2013

(10-02-2013, 03:34 AM)Putin Wrote: What's the point of tools. Using tools will not boost your e-penis, make you look cool or any of that shit, and its no fun. Learning Python and coding auto-tools knowing what all the functions do is fun. Just my 2 cents.

http://www.perl.org/

RE: [Legion Leak] Automated Scanning For SQL Vulnerabilities - Adorapuff - 10-02-2013

(10-02-2013, 03:45 AM)Cyanide and Cynicism Wrote: http://www.perl.org/
Auto-tools shall only be coded in Python
/topic

RE: [Legion Leak] Automated Scanning For SQL Vulnerabilities - Cyanide and Cynicism - 10-02-2013

(10-02-2013, 03:47 AM)Putin Wrote: Auto-tools shall only be coded in Python
/topic

[Image: ddf54992b6946dc75387801146bbcbc7.png]