Month: October 2014

CppSqlInjector vs Sqlmap – Speed Test

Hello everyone,

If there’s something that matters when doing a Blind Sql Injection, that would be time, and that is why I’ve been working on CppSqlInjector it’s been a while.

CppSqlInjector is a Sql Injection tool programmed C++. It uses the Blind Boolean Based Sql Injection Method.
It’s available on Windows, Linux and it’s completely free.

Here’s a video showing how fast CppSqlInjector compared to Sqlmap:
Continue reading “CppSqlInjector vs Sqlmap – Speed Test”

Sql Injection in a Download PHP Script leading to LFI – Tutorial

Hello everyone,

The title says it, we’re going to sql inject a vulnerable Download PHP Script which will allow us later on to read files on the server.
This whole thing started with a Challenge posted on HF by SirRootALot and was only solved by 2 members including me which is kind of awkward and since a lot of people asked for an explanation I decided to make a tutorial.
Continue reading “Sql Injection in a Download PHP Script leading to LFI – Tutorial”

Design a site like this with WordPress.com
Get started