Havij
Disclaimer
----------
We are NOT responsible for any damage or illegal actions caused by the use of this program. Use on your own risk!
What's New?
-----------
This version is bug fixed version of 1.09 lite
-Runtime error on canceling analyze fixed.
-Bug in finding mssql's database when COLLATE is not supported fixed.
-A bug in getting mssql tables fixed.
-Html encoding bug when saving data fixed.
-A bug in automatic string type detection fixed.
-Borken sites in md5 cracker fixed, a new site added.
-Tables and Columns list improved.
-A few other changes
Features
--------
1. Supported Databases with injection methods:
a. MsSQL 2000/2005 with error
b. MsSQL 2000/2005 no error (union based)
c. MySQL (union based)
d. MySQL Blind
e. MySQL error based
f. Oracle (union based)
g. MsAccess (union based)
2. Automatic database detection
3. Automatic type detection (string or integer)
4. Automatic keyword detection (finding difference between the positive and negative response)
5. Trying different injection syntaxes
6. Proxy support
7. Real time result
8. Options for replacing space by /**/,+,... against IDS or filters
9. Avoid using strings (magic_quotes similar filters bypass)
10. Bypassing illegal union
11. Full customizable http headers (like referer and user agent)
12. Load cookie from site for authentication
13. Guessing tables and columns in mysql<5 (also in blind) and MsAccess
14. Fast getting tables and columns for mysql
15. Multi thread Admin page finder
16. Multi thread Online MD5 cracker
17. Getting DBMS Informations
18. Getting tables, columns and data
19. Command executation (mssql only)
20. Reading system files (mysql only)
21. insert/update/delete data
Tidak ada komentar:
Posting Komentar