+- Sinisterly (https://sinister.ly)
+-- Forum: Computers (https://sinister.ly/Forum-Computers)
+--- Forum: Software & Programs (https://sinister.ly/Forum-Software-Programs)
+--- Thread: Havij 1.17 Pro (/Thread-Havij-1-17-Pro--97786)
Havij 1.17 Pro - joovyshop - 07-12-2018
![[Image: Btblu7h.png]](https://i.imgur.com/Btblu7h.png)
link: Link removed- Staff
pass: babyhacking
Havij is an automated SQL Injection tool that helps penetration testers to find and exploit SQL Injection vulnerabilities on a web page. It can take advantage of a vulnerable web application. By using this software, user can perform back-end database fingerprinting, retrieve DBMS login names and password hashes, dump tables and columns, fetch data from the database, execute SQL statements against the server, and even access the underlying file system and execute operating system shell commands.
The distinctive power of Havij that differentiates it from similar tools lies in its unique methods of injection. The success rate of attack on vulnerable targets using Havij is above 95%. The user friendly GUI (Graphical User Interface) of Havij and its automated configuration and heuristic detections make it easy to use for everyone even amateurs.
Key Features
Supported Databases with injection methods:
MsSQL 2000/2005 with error
MsSQL 2000/2005 no error union based
MsSQL Blind
MySQL time based
MySQL union based
MySQL Blind
MySQL error based
MySQL time based
Oracle union based
Oracle error based
PostgreSQL union based
MsAccess union based
MsAccess Blind
Sybase (ASE)
Sybase (ASE) Blind
HTTPS support
Multi-threading
Proxy support
Automatic database server detection
Automatic type detection (string or integer)
Automatic keyword detection (finding difference between the positive and negative response)
Automatic scan of all parameters.
Trying different injection syntaxes
Options for replacing space by /**/,+,… against IDS or filters
Avoids using strings (bypassing magic_quotes and similar filters)
Installation Guide
Download files from the links provided below
Extract them using winRAR,winZIP or any other tool
Run Havij 1.17 PRO.exe
Copy and paste loader.exe in the folder where havij is installed (probably it is C:\Program Files (x86)\ITSecTeam\Havij Pro)
Run loader.exe as an administrator
Direct hit Register button
BoOm!!!! Now you are using Havij PRO :O
My blog: https://baby-hacking.blogspot.com
RE: Havij 1.17 Pro - Skofos - 07-12-2018
Wow it so really cool, thanks for the constribution
RE: Havij 1.17 Pro - J0K3Rx - 07-12-2018
This is a best tool for sql injection, thanks bro
RE: Havij 1.17 Pro - mothered - 07-12-2018
In compliance with forum rules, a friendly reminder that all files you personally upload, reference and/or contribute must accompany an online virus scan report.
RE: Havij 1.17 Pro - Fall3N - 07-12-2018
It's Not Recommended To Use Any Of This Files Because of :
Installer Makes Some Executable Files In Temp Folder
Changes Registery (Probably Enables Remote Terminal or RDP ) (USED IN TROJANS)
HKLM\SYSTEM\CONTROLSET001\CONTROL\TERMINAL SERVER
Havij Exe Creates File "Network.zip" That's Password Protected But It Extracts Itself And Drops Network.exe In Temp Folder (Date Modified : 18 jun 2018 Probably Threads AuthorOr Someone Modified Old Files But It's Interesting If It was someone else i think author should notice that his/her computer was infected, so why is he/she is sharing this file?, I'm Sorry if it's not authors fault that and file was already infected) And After Scanning Network.exe it's detected as trojan downloader
Network.exe Downloads File System.zip From :http://ciputrapro.org/data/System.zip (This Is password protected but i found it extracted by havij also) it's trojan "System.exe"
also from somewhere appears "Regsvr32.exe"
and regsvr32.exe is Also Detected As "Virus/Malware"
Network.exe Creates Uses Processes And OFC connects to internet (link is up) and downloads 99% virus containing files
<SYSTEM32>\rundll32.exe
<SYSTEM32>\cmd.exe
<PATH_SAMPLE.EXE>
%ProgramFiles%\system.exe
<SYSTEM32>\netsh.exe
<SYSTEM32>\wbem\wmiprvse.exe
i'm pretty sure that threads author modified and binded some shit in havij because it were modifed ~ 2 weeks ago maybe, and if it's not i'm sorry again
(Also, He/she joined 1 week ago and now posts files link that is infected with 3 types of viruses xD and all of them was modified/generated 2 or 3 weeks ago)
File Was Uploaded on mediafire at 6/18/2018 ; Network.exe that downloads trojan "System.exe" (That i think copies itself to startup) was generated/modified at 6/18/2018
His/Her Other Thread About SQLI Dumper Also Downloads Same FIle "System.zip" From Same URL
Scan Of SQLi Dumper
![[Image: IurvLL0.png]](https://i.imgur.com/IurvLL0.png)
Scan Of Network.exe
![[Image: Zxvqwwj.png]](https://i.imgur.com/Zxvqwwj.png)
@mothered Please Review
https://www.virustotal.com/#/file/7776ca0c4bff14e486e889fe87e8854f73118df3a239f1c2b7594d0ee9d64f31/behavior (Scan of network.exe that was generated by havij)
Some Interesting Screenshots
https://imgur.com/a/tQ8R2IK
And If You Have Already Downloaded This File, You Are Infected, I Recommend You One Time Use off Malwarebytes That Will Remove All Virustes That Was Downloaded to your computer And Next Time Use SQLMAP Because It's Free (60-70% Of Viruses is hidden in crack files) It's Open Source And 10 Times Powerful Than Havij If you know how use it!
RE: Havij 1.17 Pro - mothered - 07-13-2018
(07-12-2018, 09:28 PM)Fall3N Wrote: It's Not Recommended To Use Any Of This Files Because of :
Installer Makes Some Executable Files In Temp Folder
Changes Registery (Probably Enables Remote Terminal or RDP ) (USED IN TROJANS)
HKLM\SYSTEM\CONTROLSET001\CONTROL\TERMINAL SERVER
Havij Exe Creates File "Network.zip" That's Password Protected But It Extracts Itself And Drops Network.exe In Temp Folder (Date Modified : 18 jun 2018 Probably Threads AuthorOr Someone Modified Old Files But It's Interesting If It was someone else i think author should notice that his/her computer was infected, so why is he/she is sharing this file?, I'm Sorry if it's not authors fault that and file was already infected) And After Scanning Network.exe it's detected as trojan downloader
Network.exe Downloads File System.zip From :http://ciputrapro.org/data/System.zip (This Is password protected but i found it extracted by havij also) it's trojan "System.exe"
also from somewhere appears "Regsvr32.exe"
and regsvr32.exe is Also Detected As "Virus/Malware"
Network.exe Creates Uses Processes And OFC connects to internet (link is up) and downloads 99% virus containing files
<SYSTEM32>\rundll32.exe
<SYSTEM32>\cmd.exe
<PATH_SAMPLE.EXE>
%ProgramFiles%\system.exe
<SYSTEM32>\netsh.exe
<SYSTEM32>\wbem\wmiprvse.exe
i'm pretty sure that threads author modified and binded some shit in havij because it were modifed ~ 2 weeks ago maybe, and if it's not i'm sorry again
(Also, He/she joined 1 week ago and now posts files link that is infected with 3 types of viruses xD and all of them was modified/generated 2 or 3 weeks ago)
File Was Uploaded on mediafire at 6/18/2018 ; Network.exe that downloads trojan "System.exe" (That i think copies itself to startup) was generated/modified at 6/18/2018
His/Her Other Thread About SQLI Dumper Also Downloads Same FIle "System.zip" From Same URL
Scan Of SQLi Dumper
Scan Of Network.exe
@mothered Please Review
https://www.virustotal.com/#/file/7776ca0c4bff14e486e889fe87e8854f73118df3a239f1c2b7594d0ee9d64f31/behavior (Scan of network.exe that was generated by havij)
Some Interesting Screenshots
https://imgur.com/a/tQ8R2IK
And If You Have Already Downloaded This File, You Are Infected, I Recommend You One Time Use off Malwarebytes That Will Remove All Virustes That Was Downloaded to your computer And Next Time Use SQLMAP Because It's Free (60-70% Of Viruses is hidden in crack files) It's Open Source And 10 Times Powerful Than Havij If you know how use it!
Thanks for your In depth report.
Action has been taken accordingly.
RE: Havij 1.17 Pro - Vultra - 07-13-2018
@Fall3N What I recommend is using the program via VM.
RE: Havij 1.17 Pro - mothered - 07-13-2018
This matter has now been concluded.
Thread closed.