A graphical application created in C# .Net 1.1 that helps the penetration tester to inject SQL commands on a web page. Its main strength is its capacity to automate tedious blind SQL injection with several threads. Under Clarified Artistic License.
[Screenshot]

[download]

READ MORE

Download [Here]

Virustotal: https://www.virustotal.com/en/file/cd41b19cf465c17b81621b0428e0e1f4ed0a4e47cf84ac9da0bd84a29b1660cc/analysis/
Jotti.org: http://virusscan.jotti.org/en/scanresult/c9d7f8d5bc5e0ad0c71c9605ef98d667582e4226

READ MORE

SQLSentinel is an opensource tool that automates the process of finding the sql injection on a website. SQLSentinel includes a spider web and sql errors finder. You give in input a site and SQLSentinel crawls and try to exploit parameters validation error for you. When job is finished, it can generate a pdf report which contains the url vuln found and the url crawled. 

Please remember that SQLSentinel is not an exploiting tool. It can only finds url Vulnerabilities.

[Download SQLSentinel]

READ MORE

sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.

[Download]

READ MORE

Update features:

 Supports 500 results

Url List can be Imported / Exported

Setting for connection timeout

 

 Download: Uploadmb Solidfiles

READ MORE

File type: RAR

Type: SQL Injection

Download SQL Hunter v1.0 (Require Net Frame Work 3.5)

Download SQL Hunter v1.0 Portable 

READ MORE

BSQLBF Supported Database:

MS-SQL

MYSQL

 PostgreSQL

 Oracle

You would need to install Perl to execute this injection tool cause those source code are file extension with .pl. 

It supports 8 kind of attacking:
back-end server to true & error (e.g syntax error) >>> Blind SQL Injection
Blind SQL Injection  “order by” & “group by”
SYS privileges (ORACLE dbms_export_extension exploit ) >>> Find Data
O.S code execution (ORACLE dbms_export_extension exploit)
Read file (ORACLE dbms_export_extension exploit, java)
O.S code execution DBMS_REPCAT_RPC.VALIDATE_REMOTE_RC exploit
O.S code execution SYS.KUPP $PROC.CREATE_MASTER_PROCESS(), DBA Privs
O.S code execution DBMS_JAVA_TEST.FUNCALL, java IO Permissions.

Download BSQLBF

READ MORE