ARTICLE Pangolin SQL injection tool build 3.2.1.1020 released

Saturday 27 February 2010 - 3408 read - ( Keywords : Configurations checks , Database , Exploitation , Pangolin , Penetration testing & Ethical Hacking )

Pangolin is an automatic SQL injection penetration testing tool developed by NOSEC. Its goal is to detect and take advantage of SQL injection vulnerabilities on web applications.

Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or user’s specific DBMS tables/columns, run his own SQL statement, read specific files on the file system and more.

PNG - 14.9 kb

Version 3.2.1.1020

  • Support Microsoft SQL Server 2008;
  • Improved SQL Injection for MySQL. Support detecting function Unhex().
  • New option added Scan->Extend scan mode. Optimize ability to Inject.
  • Improved Cookie detection. Multiple URL redirection will be Inject correctly.

Databases Supported

  • Access: Informations (Database Path; Root Path; Drivers); Data
  • MSSql: Informations; Data; FileReader; RegReader; FileWriter; Cmd; DirTree
  • MySql: Informations; Data; FileReader; FileWriter;
  • Oracle: Informations (Version; IP; Database; Accounts); Data; and any others;
  • Informix: Informatons; Data
  • DB2: Informatons; Data; and more;
  • Sybase: Informatons; Data; and more;
  • PostgreSQL: Informatons; Data; FileReader;
  • Sqlite: Informatons; Data

POSTSCRIPTUM

More information


COMPLIANCE MANDATES

Penetration testing & Ethical Hacking : PCI DSS 11.3, SOX A13.3, GLBA 16 CFR Part 314.4 (c), HIPAA 164.308(a)(8), FISMA RA-5, SI-2, ISO 27001/27002 12.6, 15.2.2


RELATED ARTICLES

Configurations checks, Database, Exploitation, Pangolin, Penetration testing & Ethical Hacking,

27 February 2010 : Pangolin SQL injection tool build 3.2.1.1020 released
24 November 2009 : Focus on Pangolin SQL Injection Tool