I use a custom tool that works like Achilles. It allows me to modify the
form/cookie/header values directly by running as an HTTP proxy. This in
my opinion is the best method, as I can control all input to webserver,
not just forms fields. Think about referred-by headers, cookies etc,
alot of apps record those to db, as well as browser agent etc.
Good luck.
[Arcangel] wrote:
Hi,
Im looking the manner to test web based forms written in .asp and .php,
in order to check for sql injections bugs. (maybe an aplication to
automatizate the test, like a sql injection brute force). Do You know any?
Thanks - Gracias.
Arc.
------------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. All of our class sizes are
guaranteed to be 12 students or less to facilitate one-on-one interaction
with one of our expert instructors. Check out our Advanced Hacking course,
learn to write exploits and attack security infrastructure. Attend a course
taught by an expert instructor with years of in-the-field pen testing
experience in our state of the art hacking lab. Master the skills of an
Ethical Hacker to better assess the security of your organization.
http://www.securityfocus.com/sponsor/InfoSecInstitute_pen-test_040817
-------------------------------------------------------------------------------
------------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. All of our class sizes are
guaranteed to be 12 students or less to facilitate one-on-one interaction
with one of our expert instructors. Check out our Advanced Hacking course,
learn to write exploits and attack security infrastructure. Attend a course
taught by an expert instructor with years of in-the-field pen testing
experience in our state of the art hacking lab. Master the skills of an
Ethical Hacker to better assess the security of your organization.
http://www.securityfocus.com/sponsor/InfoSecInstitute_pen-test_040817
-------------------------------------------------------------------------------
