Sinon dans la distrib Backtrack tu as aussi d'autres outils ciblé en fonction de la base de données que tu as en face (oracle, mysql, sqlserver,...) _________________ Scanner TCP/UDP Brute Force DNS Sniffers et Anti Sniffers
# SQLBrute - multi threaded blind SQL injection bruteforcer
# By Justin Clarke, justin at justinclarke dot com
#
# Algorithm originally from the original by Kerry Rollins
#
# This version does regex based (error/no error) bruteforcing and waitfor delay testing
#
# There is a page documenting how to use this tool at:
# http://www.justinclarke.com/archives/2006/03/sqlbrute.html
Version = "032306"
# todo
# - tidy up the query assembly methods
# - implement < and > matching
# - rewrite connection methods to use pycurl and get more efficient connection handling
# - implement database detection
# - multiple columns?