Darknet - The Darkside » bobcat http://www.darknet.org.uk Ethical Hacking, Penetration Testing & Computer Security Tue, 07 Feb 2012 18:34:17 +0000 en hourly 1 http://wordpress.org/?v=3.3.1 BobCat SQL Injection Tool based on Data Thief http://www.darknet.org.uk/2006/10/bobcat-sql-injection-tool-based-on-data-thief/ http://www.darknet.org.uk/2006/10/bobcat-sql-injection-tool-based-on-data-thief/#comments Sat, 28 Oct 2006 04:18:23 +0000 Darknet http://www.darknet.org.uk/2006/10/bobcat-sql-injection-tool-based-on-data-thief/

BobCat is a tool to aid a security consultant in taking full advantage of SQL injection vulnerabilities. It is based on a tool named “Data Thief” that was published as PoC by appsecinc. BobCat can list the linked severs, database schema, and allow the retrieval of data from any table that the current application user has access to.

The methods that BobCat incorprates are based on those discussed in the following papers:

advanced sql injection
more advanced sql injection
advanced sql injection
manipulating sql server usig sql injection

I suggest if you are interested in SQL injection at all, you read all of the above papers.

BobCat Requirements

  1. Windows OS (Tested on XP SP2)
  2. Access to MS SQL server/MSDE2000 (Tested on MSDE2000)
  3. .Net Framework 2.0

Read more about BobCat here:

Northern Monkee – BobCat

Download BobCat here:

BobCat Alpha 0.3

Some tools to use with BobCat can be found here:

BobCat Tools

Post to Twitter Post to Facebook Post to Google Buzz Post to Delicious Post to Digg Post to Reddit Post to StumbleUpon

]]> http://www.darknet.org.uk/2006/10/bobcat-sql-injection-tool-based-on-data-thief/feed/ 0