Locked The Mole – Automatic SQL Injection SQLi Exploitation Tool

[Nax]

This is the hidden content, please

• Sign In
• or
• Sign Up

 

Features

 

Support for injections using Mysql, SQL Server, Postgres and Oracle databases.

Command line interface. Different commands trigger different actions.

Auto-completion for commands, command arguments and database, table and columns names.

Support for query filters, in order to bypass certain IPS/IDS rules using generic filters, and the possibility of creating new ones easily.

Developed in python 3.

 

If you want to know how to use The Mole there’s a good tutorial here.

 

You can download The Mole here:

 

Windows:

This is the hidden content, please

• Sign In
• or
• Sign Up

Linux:

This is the hidden content, please

• Sign In
• or
• Sign Up

 

 

Tutorial

This is the hidden content, please

• Sign In
• or
• Sign Up

 

Edited December 2, 2011 by Nax

[(Sony)]

Hace todo automatico? o funciona como un exploit?

[sQuo]

Hace todo automatico? o funciona como un exploit?

 

 

le agregé el tutorial (inglés) y el video, asi se ve mejor xD

[Versus71]

update

 

This is the hidden content, please

• Sign In
• or
• Sign Up

 

v.0.3

 

ChangeLog

• Enabled injection through cookie paramters

• New filtering mechanism enabling better manipulation and easier filter development

• Added several of those filters

• SQL Injections that return binary data are now exploitable

• DMBS credentials listing

 

Download:

This is the hidden content, please

• Sign In
• or
• Sign Up

[windows]

This is the hidden content, please

• Sign In
• or
• Sign Up

[linux]