|
|
| |
Credit:
To download the tool: http://scoobygang.org/automagic.zip
The information has been provided by Gary Oleary-Steele.
|
| |
The Automagic SQL Injector is part of the Sec-1 Exploit Arsenal provided as part of the Applied Hacking & Intrusion Prevention training courses.
In a nutshell it's an automated SQL injection tool designed to help save time on pen tests. It is only designed to work with vanilla Microsoft SQL injection holes where errors are returned.
The following features are currently supported:
* Browse tables and dump table data to a CSV file (2 methods).
* Upload files using debug script method.
* Automagical UDP reverse shell
* Interactive xp_cmdshell (simulated cmd.exe shell)
I plan to add other features such as a brute force account cracker and a module to search for other SQL servers using OPENROWSET().
For a demonstration please visit http://scoobygang.org/magicsql/
Written for Active Perl (Windows), doesn't work too well on *nix.
Usage: perl C:\Automagic SQL injector\injector.pl <Options>
-h Target Host
-f Target File (e.g. /process_login.asp)
-t Type (POST|GET)
-q Is a leading single quote required (YES|NO)
-a Additional header such as a cookie. Enclose within ""
-d Database creation type (T|R). TEMP ## or regular table (Default is TEMP)
|
| Subject:
|
thanks |
Date: |
22 Nov. 2005 |
| From: |
Anonymous |
| thanks you very much!!!! |
|
| Subject:
|
Thnx |
Date: |
4 Dec. 2005 |
| From: |
Devil-00 |
thnx alot ..
see that :-
[ CODE ]
Can't locate Switch.pm in @INC (@INC contains: D:/Perl/lib D:/Perl/s
t automagic/injector.pl line 39.
BEGIN failed--compilation aborted at automagic/injector.pl line 39.
[/CODE] |
|
| Subject:
|
Compatibility |
Date: |
17 Dec. 2005 |
| From: |
lilo_lovelieryahoo.com |
| Can it be used with Microsoft Access Database (*.mdb) ?
|
|
| Subject:
|
I think its broke |
Date: |
24 Feb. 2006 |
| From: |
none |
When i try to run it from dos i get this:
C:\My Documents>cd SQL'er
C:\My Documents\SQL'er>perl injector.pl
Can't locate ./modules/injectormod.include in @INC (@INC contains: C:/Perl/lib C
:/Perl/site/lib .) at injector.pl line 49.
C:\My Documents\SQL'er>
What should i do? |
|
| Subject:
|
Hey |
Date: |
5 Mar. 2006 |
| From: |
giangvtvisl.gov.vn |
<When i try to run it from dos i get this:
C:\My Documents>cd SQL'er
C:\My Documents\SQL'er>Perl injector.pl
Can't locate ./modules/injectormod.include in @INC (@INC contains: C:/Perl/lib C
:/Perl/site/lib .) at injector.pl line 49.
C:\My Documents\SQL'er>
What should i do?>
Hey
I think that you have not setup Active Perl, the environment for this tool runs properly.
I suggest that you should search Active Perl 5.... on the Internet
I see that you've used WindowsXP, I've tried this tool with this environment and success.
Bye bye:) |
|
| Subject:
|
Help pleeease |
Date: |
26 Oct. 2006 |
| From: |
Dorian |
Translated from Dutch to English:
________________________________________________________
C:\>perl injector.pl
PERL is not detected as an intern or extern <...>,program or batch file.
________________________________________________________
<...> is something i don't understand so I can't translate it :D
What did I do wrong? |
|
| Subject:
|
hmmm |
Date: |
22 Jan. 2010 |
| From: |
evil-reddy |
use it in linux. it is for linux not for windows os.
ok. |
|
| Subject:
|
Not for linux |
Date: |
3 Mar. 2010 |
| From: |
ElTel |
evil-ready, please read the above infomation and you will see the following;
"e;Written for Active Perl (Windows), doesn't work too well on *nix.
"e; |
|
|
|
|
