كيفكم آخوآني آخوآتي يآرب الجميع بخير وسلامه دوم يآرب ..
يآلله نخش في الموضوع بدون مقدمآت
البرنامج تبعنا اسمه BSQL Hacker وهو برنامج قوي جدآ جدآ ونآتي للخصآئص تبعه
كود PHP:
Easy Mode
SQL Injection Wizard
Automated Attack Support (database dump)
ORACLE
MSSQL
MySQL (experimental)
General
Fast and Multithreaded
4 Different SQL Injection Support
Blind SQL Injection
Time Based Blind SQL Injection
Deep Blind (based on advanced time delays) SQL Injection
Error Based SQL Injection
Can automate most of the new SQL Injection methods those relies on Blind SQL Injection
RegEx Signature support
Console and GUI Support
Load / Save Support
Token / Nonce / ViewState etc. Support
Session Sharing Support
Advanced Configuration Support
Automated Attack mode, Automatically extract all database schema and data mode
Update / Exploit Repository Features
Metasploit alike but exploit repository support
Allows to save and share SQL Injection exploits
Supports auto-update
Custom GUI support for exploits (****** input, URL input etc.)
GUI Features
Load and Save
Template and Attack File Support (Users can save sessions and share them. Some sections like username, password or ****** in the templates can be show to the user in a GUI)
Visually view true and false responses as well as full HTML response, including time and stats
Connection Related
Proxy Support (Authenticated Proxy Support)
NTLM, Basic Auth Support, use default credentials of current user/application
SSL (also invalid certificates) Support
Custom Header Support
Injection Points (only one of them or combination)
Query String
Post
HTTP Headers
******s
Other
Post Injection data can be stored in a separated file
XML Output (not stable)
CSRF protection support (one time session tokens or asp.net viewstate ort similar can be used for separated login sessions, bypassing proxy pages etc.)
It's still beta and there are known issues :
Automated Attack for MySQL is experimental, might not work properly
طيب نشاهد صور للبرنامج :
والان فيديوهين للشرح البرنامج :
كود PHP:
http://www.vimeo.com/1536040
كود PHP:
http://www.vimeo.com/1567326
للتحميل واخذ المعلومات المفصله هذا الرابط للموقع الرسمي :
كود PHP:
http://code.google.com/p/bsqlhacker/
BSQL Hacker
03-24-2011, 10:06 PM
BSQL Hacker 
العرض الشجري
