Sunteți pe pagina 1din 3

*******************************************************************************

Havij v1.12
*******************************************************************************
-------------------------------------------------------------------------------
General Information
-------------------------------------------------------------------------------
Type.................: Application
Platform.............: Windows
Serial #.............: Patch/Crack
More Info............: http://itsecteam.com/en/projects/project1.htm
Part Size............: 827,904 bytes
Compression Format...: RAR
File Validation......: MD5 : BDFF09835A209D8411995FD4F978E6FA

-------------------------------------------------------------------------------
Post Information
-------------------------------------------------------------------------------
Posted Description:
Havij is an automated SQL Injection tool that helps penetration testers to find
and exploit SQL Injection vulnerabilities on a web page.
It can take advantage of a vulnerable web application. By using this software
user can perform back-end database fingerprint, retrieve DBMS users and
password hashes, dump tables and columns, fetching data from the database,
running SQL statements and even accessing the underlying file system and
executing commands on the operating system.
The power of Havij that makes it different from similar tools is its injection
methods. The success rate is more than 95% at injectiong vulnerable targets
using Havij.
The user friendly GUI (Graphical User Interface) of Havij and automated settings
and detections makes it easy to use for everyone even amateur users.
What's New?
-HTTPS Support
-MsSQL Blind added
-MsAccess Blind added (Commerical version only)
-PostgreSQL added (Commerical version only)
-Check for update added.
-Manual queries with result added. (Commerical version only)
-1 row per 1 request (all in one request) added (Commerical version only)
-Dumping data into file added (Commerical version only)
-Saving data in XML format added (Commerical version only)
-Injecting targets with any port added (default http port is 80) (Commerical
version only)
-XSS bug in saved reports fixed.
-Clear log added.
-Apply button added to the settings so it is possible to change the settings
anytime (Commerical version only)
-keyword test and correction method added.
-finding columns count and string column optimized for better injection and data
base detecting.
-Finding columns count and string column made better.
-"414 Request-URI too long" bug fixed.
-New method for getting tables and columns in mssql added.
-Some bugs in MsAccess injection when syntax has been defined manually fixed.
-Enable XP_Exec added to cmdshell (Commerical version only)
-Enable OS_Ex added to cmdshell (Commerical version only)
-Enable remote desktop added to cmdshell (Commerical version only)
-Confusing MsSQL 2005 with MySQL when finding columns count fixed.
-Broken MD5 cracker sites removed.
-a bug in detecting mssql no error fixed.
-a bug in getting columns in mssql no error fixed.
-a bug in injecting into access database fixed.
-a bug in getting data in mssql fixed.
-a bug in finding mssql's row count fixed.
-a bug in detecting database type when column count is found fixed.
-a bug in MsSQL no error manual syntax and command executation fixed.
How to use
This tool is for exploiting SQL Injection bugs in web application.
For using this tool you should know a little about SQL Injections.
Enter target url and select http method then click Analyze.
Note: Try to url be valid input that returns a normal page not a 404 or error
page.

-------------------------------------------------------------------------------
Install Notes
-------------------------------------------------------------------------------
1. Download the program and install
2. Run the patch as administrator
3.Search file in directory and patch it.
4. Limitations will be removed.

S-ar putea să vă placă și