(Havij is an automated SQL injection tool that helps penetration/penetration testers find and use SQL injection vulnerabilities in web applications. Havij can not only automatically discover the available SQL queries, but also identify the backend database type, retrieve the username and password hash of the data, dump tables and columns, get data from the database, and even access the underlying file system and execute system commands, of course. There is an exploitable SQL injection vulnerability. Havij supports a wide range of database systems, such as MsSQL, MySQL, MSAccessandOracle. Havij supports parameter configuration to evade IDS, supports proxy/proxy, and background login address scanning.)
收藏
