

BSQL Hacker v0.9.0.9ĺɫ

    ϵͳҪװMicrosoft .NET Frameworkд˳

˵

BSQL (Blind SQL) Hacker һSQLԶע빤ߣƵĿϣܶκεݿSQLע롣
BSQL  HackerȺЩעоʹߺЩԶSQLע루رBlind SQLע룩Ⱥ
Ҫص㣺
1ģʽ
        һSQLע
        ֧Զݿת
                 (1)ORACLE
                 (2)MSSQL
                 (3)MySQL (ʵ׶) 
2
        һٺͶ߳
        ֧4ֲͬSQLע
               1Bling SQL ע
               2ʱBling SQL ע
               3äDeep Blind SQLע(ڸ߼ʱӳ) 
               4ڴSQLע
        ܹԶʼBlind SQLעSQLע뷽
        ģ֧ǩ
        壬ֿ̨֧Ϳӽ
        ֧ /
        ߣ֧ /ʱ/鿴״̬ ȵ
        ˣֻ֧Ự
        ţָ֧߼
        ʮԶģʽԶȡݿṹģʽ
3/ص
        һMetasploit֧
        ͹SQLע
        ֧Զ
        ģ֧Զӽ棨CookieURLȣ
4ӽص
        һغͱ
        ֧ģ͹ļʹ߿ԱỰǣģеһЩֱûcookisڿӽʾ
        Բ鿴ʵġٵӦHTMLӦʱ״̬
5
        һִ֧֧֤
        ֧NTLM, ֤ʹõǰû/Ĭƾ
        ֧SSLЭ飨Ч֤飩
        ģ֧Զļͷ
6ע㣨леһ
        һQuery String 
        Post 
        HTTP Headers 
        ģCookies 
7
        һPostעݿڱ浽ļ
        XML (ȶ) 
        ֧CSRF

ĳʱĻỰǻasp.net״̬鿴ܹƹͨҳȶ½Ựʹá

Ȼһð棬֪
       1MySQLԶʵԵģʱܲ

𵶿
2009.7.19
http://www.daokers.com

