BlindSQLInjector v1.0.0

written by woany on Friday, July 23 2010

This is a fairly major release, its been used successfully on a well known application security assessment/examination and worked well. The key change is the ability to export data.

Changes

  • Corrected another URL line parsing issue
  • Added context menu to the schema tree view
  • Changed the tree view from the standard one to the Multi-Select Tree view (https://sourceforge.net/projects/mstreeview)
  • Improved unique tagging of tree view nodes
  • Added new window to allow the configuration of the data extraction e.g. number of rows etc
  • Added new window (Data) to display extracted data. The data can be accessed via the context menu item on the table tree view node (Show data) or by double clicking the table tree view node
  • Added the ability to export data via the Data window. The data export works in both append and overwrite modes
  • Separated enumeration and data extraction code
  • Implemented global singleton to hold the schema and current state
  • Fixed column length enumeration
  • Modified to allow the user to export the extracted data by right clicking on a table and selecting the appropriate context menu item. This function works the same as the functionality provided by the Data window
  • Modified the project load/save to include the enumeration types e.g. server version, DB name, current user, table names, column names, column types, column lengths
  • Removed the “;” from all of the SQL statements used by the application, so now you must complete the statement e.g. SELECT* FROM Users WHERE UserId = 1; (Note the semi colon at the end)
  • Moved the Test function to a separate object e.g. Implements the Action abstract class
  • Modified the data extraction window to allow the user to select which columns to extract data for
  • Removed the requirement to extract the column type before the column length
  • Added the ability to enumerate columns for specific tables, so now you can enumerate tables, then right click on the interesting tables, and select Enumerate Columns
  • Modified to stop the schema tree view disappearing when any form of enumeration starts
  • Added the ability to use Save As functionality for the project file, so once the project file loaded or previously saved, you can just hit the Save menu item and it will overwrite the file without having to reselect it Added tool bar buttons to allow the loading and saving of the project
  • It now alerts the user if the project has changed and needs saving. The title bar text will change to “BlindSQLInjector *” if the project needs saving.
  • Modified the form closing event to prompt the user if the project needs saving
  • Bumped to version 1.0.0

Download here.

Similar Posts

  1. BlindSQLInjector v.0.0.8
  2. NoteTaker v1.0.16
  3. NetworkScanViewer v1.0.0

Comments are closed

Options:

Size

Colors