-
Notifications
You must be signed in to change notification settings - Fork 22
A Blind SQL Exploitation application
License
cameronhotchkies/Absinthe
Folders and files
Name | Name | Last commit message | Last commit date | |
---|---|---|---|---|
Repository files navigation
.,:: .: .,,. ... :::::::.. .,-:::::; ,;;, `;;;, .,;;,;;'`';, ,;;, .;;;;;;;. ;;;;``;;;; ,;;-'````' ,[' [n '[[,,[[' [[, _,[[,[' [n ,[[ \[[,[[[,/[[[' [[[ [[[[[[[| $$ $$ Y$$$P Y$$P"$$$$ $$ $$$, $$$$$$$$$c "$$c. "$$ Y8, ,8" oP"``"Yo, ,,_,d8"Y8, ,8" "888,_ _,88P888b "88bo,`Y8bo,,,o88o "YmmP,m" "Mm, "MP" "YmmP (O) "YMMMMMP" MMMM "W/ `'YMUP"YMM ========================================================================= ------------------------------------------------------------------------- Absinthe - Automated SQL Injection by nummish <nummish AT 0x90.org> ------------------------------------------------------------------------- ========================================================================= Absinthe 1.4 (Two trick pony...) This is the biggest release of Absinthe since I GPL'd the code. Absinthe is no longer just a Blind injection tool, this release has the basics of MS SQL Server error based injection. This runs a *LOT* faster than the blind stuff, so if it's an option, use it. Otherwise, the Blind for Oracle, SQL Server and PostGres are still there. They will update the progress earlier, so use of the tool will be less painful. If you have any questions or comments on the tool, please do not hesitate to visit http://www.0x90.org/releases/absinthe or email us at: [email protected] An HTML user guide is available at: http://www.0x90.org/releases/absinthe/docs I've included a compiled version for straight install which includes the current wx.NET DLLs required for Absinthe. With version 1.4, I've switched to using nant (nant.sf.net) as the build tool. You will need to install this to build the binaries. From this point, you can just run the install script as normal. Hopefully you find this useful. - nummish v1.4 Big Ups: -------------- Thanks & props to the following for their help & feedback for this version: Caezar, Dyngnosis, Tom.Pester, Andre Ludwig, morning_wood of exploitlabs.com and Damon Cortesi Changes Since 1.3.1 ------------------- - Fixed a bug that caused cookie names to be forced to lowercase - Added code to allow better handling of HTTP 500 Errors - Large rewrite of all the plugin code - Added support for Error based injections - Partial table downloads, and download recovery - Generated an XSD and XSLT for the saved file format - Custom User Agent strings - Cleanup of UI code - Lots of very minor bug fixes - Replaced Makefiles with nAnt build files Changes Since 1.3.0 ------------------- - Target URL will change to "https://" for SSL connections - Bug causing POST requests to fail when using a proxy fixed - Several changes to all the plugins to fix SQL syntax errors - Now allows for unicode text to be downloaded - Tables are now part of the downloaded data - SSL authorization problems on Mono fixed - Minor UI updates - Error with delimiter when client environment is different than than target environment fixed
About
A Blind SQL Exploitation application
Resources
License
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published