Havij is an automated SQL Injection tool. It’s famous enough that I’m sure you know it or you’ve heard its name. As you may have already been noticed about new version, it was just released today. It has new practical features such as “Dump all“, it’s similar to “–dump-all” in Sqlmap. As far as I concern mixture of Havij and Sqlmap can lead you to having successful attack on vulnerable target. By the permission of vendor which I’ve already been granted it, I shall show you an example of a simple attack where the installed application on it was prone to a MySQL injection vulnerability. Neither Sqlmap nor Havij 1.16 could inject it properly:
In last picture you would see how it accomplished to inject target successfully. As far as I know it’s fully commercial and it doesn’t have any free version but I highly recommend to ordering it if you are member of a penetration group or… have a nice day.
Posted in: PC Exploitation,SOFTWARE
