Date: Mon, 14 Jan 2008 19:47:36 +0530
From: Metaeye SG <contact@metaeye.org.>
To: [email protected]Subject: SQID v0.3 - SQL Injection Digger.
X-Enigmail-Version: 0.95.5
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - ganesh.drvgv.com
X-AntiAbuse: Original Domain - securityfocus.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - metaeye.org
X-Virus-Scanned: antivirus-gw at tyumen.ru
SQL injection digger is a command line program that looks for SQL
injections and common errors in websites. This version now can
perform the following operations.
* Look for SQL injections and common errors in website urls found
by performing a google search.
* Look for SQL injections and common erros in a given url or a file
with urls.
* Look for SQL injections and common errors in links from a web page.
* Crawl a website/webpage and do the above.
Also supports.
* Load multiple triggers from file.
* Load multiple signature databases from files.
* HTTPS support.
* HTTP proxy support with authentication.
* Basic authentication.
* Specify user agent.
* Specify referer.
* HTTP Cookies loading from command line or a file.
SQID's greatest strength lies in its simple architecture of inserting
triggers in URL parameters and matching responses using regular
expressions. Hence one can use it for other purposes also.
SQID can be downloaded from http://sqid.rubyforge.org.
[ Metaeye Security Group ]
[ http://www.metaeye.org ]
