{"id":1958,"date":"2009-07-31T10:42:55","date_gmt":"2009-07-31T10:42:55","guid":{"rendered":"https:\/\/www.darknet.org.uk\/?p=1958"},"modified":"2015-09-09T19:37:58","modified_gmt":"2015-09-09T11:37:58","slug":"sqlmap-0-7-released-automatic-sql-injection-tool","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2009\/07\/sqlmap-0-7-released-automatic-sql-injection-tool\/","title":{"rendered":"sqlmap 0.7 Released &#8211; Automatic SQL Injection Tool"},"content":{"rendered":"<p>[ad]<\/p>\n<p>We&#8217;ve been following sqlmap since it <a href=\"https:\/\/www.darknet.org.uk\/2007\/02\/sqlmap-automated-blind-sql-injection-tool\/\">first came out in Feburary 2007<\/a> and it&#8217;s been quite some time since the last update <a href=\"https:\/\/www.darknet.org.uk\/2008\/12\/sqlmap-063-released-automatic-sql-injection-tool\/\">sqlmap 0.6.3 in December 2008<\/a>. <\/p>\n<p>For those not familiar with the tool, sqlmap is an open source command-line automatic SQL injection tool. Its goal is to detect and take advantage of SQL injection vulnerabilities in web applications.<\/p>\n<p>Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or user&#8217;s specified DBMS tables\/columns, run his own SQL statement, read or write either text or binary files on the file system, execute arbitrary commands on the operating system, establish an out-of-band stateful connection between the attacker box and the database server via Metasploit payload stager, database stored procedure buffer overflow exploitation or SMB relay attack and more.<\/p>\n<p><strong>Recent Changes<\/strong><\/p>\n<p>Along all the takeover features introduced in sqlmap 0.7 release candidate 1, some of the new features include:<\/p>\n<ul>\n<li>Adapted Metasploit wrapping functions to work with latest 3.3 development version too.<\/li>\n<li>Adjusted code to make sqlmap 0.7 to work again on Mac OSX too.<\/li>\n<li>Reset takeover OOB features (if any of &#8211;os-pwn, &#8211;os-smbrelay or &#8211;os-bof is selected) when running under Windows because msfconsole and msfcli are not supported on the native Windows Ruby interpreter.<\/li>\n<li>This make sqlmap 0.7 to work again on Windows too.<\/li>\n<li>Minor improvement so that sqlmap tests also all parameters with no value (eg. par=).<\/li>\n<li>HTTPS requests over HTTP proxy now work on either Python 2.4, 2.5 and 2.6+.<\/li>\n<\/ul>\n<p>For a complete list of changes view the <a href=\"http:\/\/sqlmap.sourceforge.net\/doc\/ChangeLog\">ChangeLog<\/a>.<\/p>\n<p>The manual is available here &#8211; <a href=\"http:\/\/sqlmap.sourceforge.net\/doc\/README.pdf\">README.pdf<\/a> [PDF]<\/p>\n<p>You can download sqlmap 0.7 here:<\/p>\n<p>Linux Source: <a href=\"http:\/\/downloads.sourceforge.net\/sqlmap\/sqlmap-0.7.tar.gz\">sqlmap-0.7.tar.gz<\/a><br \/>\nWindows Portable: <a href=\"http:\/\/downloads.sourceforge.net\/sqlmap\/sqlmap-0.7_exe.zip\">sqlmap-0.7_exe.zip<\/a><\/p>\n<p><!--adsense#New468--><\/p>\n<p>Or read more <a href=\"http:\/\/sqlmap.sourceforge.net\/\">here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>[ad] We&#8217;ve been following sqlmap since it first came out in Feburary 2007 and it&#8217;s been quite some time since the last update sqlmap 0.6.3 in December 2008. For those not familiar with the tool, sqlmap is an open source command-line automatic SQL injection tool. Its goal is to detect and take advantage of SQL [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[2,9,15],"tags":[2629,8855,1322,439,1235,1419,396],"featured_image_src":null,"featured_image_src_square":null,"author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/1958"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=1958"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/1958\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=1958"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=1958"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=1958"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}