Introduction
Pangolin is a penetration testing, SQL Injection test tool on database security. It finds SQL Injection vulnerabilities.Its goal is to detect and take advantage of SQL injection vulnerabilities on web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or userâ€s specific DBMS tables/columns, run his own SQL statement, read specific files on the file system and more.
ScreenShot
[Image: pangolin-sql-injection-successful.jpg]
Database support:Access,DB2,Informix,Microsoft SQL Server 2000,Microsoft SQL Server 2005,Microsoft SQL Server 2008,MySQL,Oracle,PostgreSQL,Sqlite3,Sybase.
Pangolin is recommended by many Web security experts all over the world.
OWASP
1.
2.
Here is parts of features:
[ul][li]HTTPS support[/li][li]Pre-Login[/li][li]Proxy[/li][li]Specify any HTTP headers(User-agent, Cookie, Referer and so on)[/li][li]Bypass firewall setting[/li][li]Auto-analyzing keyword[/li][li]Detailed check options[/li][li]Injection-points management[/li][/ul]
http://mir.cr/4Q65CFY2
Pangolin is a penetration testing, SQL Injection test tool on database security. It finds SQL Injection vulnerabilities.Its goal is to detect and take advantage of SQL injection vulnerabilities on web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or userâ€s specific DBMS tables/columns, run his own SQL statement, read specific files on the file system and more.
ScreenShot
[Image: pangolin-sql-injection-successful.jpg]
Database support:Access,DB2,Informix,Microsoft SQL Server 2000,Microsoft SQL Server 2005,Microsoft SQL Server 2008,MySQL,Oracle,PostgreSQL,Sqlite3,Sybase.
Pangolin is recommended by many Web security experts all over the world.
OWASP
Code:
http://www.owasp.org/index.php/SQL_Injection#ReferencesRed Database Security
1.
Code:
http://www.red-database-security.com/videos/oracle_videos.html
2.
Code:
http://blog.red-database-security.com/2009/03/05/web-application-testing-with-pangolin-video-screenshot/print/SECURITY DATABASE
Code:
http://www.security-database.com/toolswatch/Focus-on-Pangolin-SQL-Injection.htmlFeatures
Here is parts of features:
[ul][li]HTTPS support[/li][li]Pre-Login[/li][li]Proxy[/li][li]Specify any HTTP headers(User-agent, Cookie, Referer and so on)[/li][li]Bypass firewall setting[/li][li]Auto-analyzing keyword[/li][li]Detailed check options[/li][li]Injection-points management[/li][/ul]
http://mir.cr/4Q65CFY2