Bugtraq mailing list archives
Re: Yet another SQL injection framework
From: "Nick Boyce" <nick.boyce () gmail com>
Date: Fri, 20 Apr 2007 14:12:32 +0100
On 4/19/07, Guillermo Marro <gmmarro () flowgate net> wrote:
FG-Injector is a free tool that leverages the pentester's work by facilitating the exploitation of SQL Injection vulnerabilities.
[...]
Get both, sources and a windows binary from: http://www.flowgate.net/?lang=en&seccion=herramientas
Um .. when I click on the link for "FG-Injector" at the above site with my NoScript-enabled Firefox all I see is what looks like a server log entry for my interaction : aaa.bbb.ccc.ddd Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.3) Gecko/20070309 Firefox/2.0.0.3 /injector This is presumably because the actual links are infested with Javascript : onClick="javascript:showStaff('injector')" Since I'm following links in an email on a security mailing list I'm disinclined to disable NoScript - any chance you can convert the links into normal HREFs ? I could go and grab your Javascript library and figure out what 'showStaff' does ... but I'd rather just click on an old-school link. Cheers Nick Boyce -- I speak to all bloggers everywhere: just shut up for a second and let me think, will you? -- blog comment at http://it-gears.blogspot.com/ :-)
Current thread:
- Yet another SQL injection framework Guillermo Marro (Apr 19)
- Re: Yet another SQL injection framework (file corruption) Guillermo Marro (Apr 20)
- Re: Yet another SQL injection framework Nick Boyce (Apr 20)
- RE: Yet another SQL injection framework Greg Merideth (Apr 23)