Automated Blind SQL Injection Attacking Tool

BSQLBF Supported Database:

MS-SQL

MYSQL

 PostgreSQL

 Oracle

You would need to install Perl to execute this injection tool cause those source code are file extension with .pl. 

It supports 8 kind of attacking:
back-end server to true & error (e.g syntax error) >>> Blind SQL Injection
Blind SQL Injection  “order by” & “group by”
SYS privileges (ORACLE dbms_export_extension exploit ) >>> Find Data
O.S code execution (ORACLE dbms_export_extension exploit)
Read file (ORACLE dbms_export_extension exploit, java)
O.S code execution DBMS_REPCAT_RPC.VALIDATE_REMOTE_RC exploit
O.S code execution SYS.KUPP $PROC.CREATE_MASTER_PROCESS(), DBA Privs
O.S code execution DBMS_JAVA_TEST.FUNCALL, java IO Permissions.

Download BSQLBF