sqlmap - security development in Python
summary
SQLmap is a Python 2 open source tool that detects and exploits SQL injection and automates fingerprinting, enumeration and takeover (uploads web shells, calls Metasploit), with a core engine plus DBMS plugins and XML payloads. Project reports 10,000 downloads/month and about 200 active testers feeding 10–20 suggestions daily. Current release is 0.9 with active 1.0 development, it includes 14 tamper scripts, statistical timing detection, binary-search and dynamic-production heuristics, and supports 10 hash algorithms for cracking.
AI-written summary · about
chapters (5)
- 0:00Start
- 6:46Current status (v1.0-dev) - Powerful detection engine - State of the art enumeration engine - Takeover functionalities (Metasploit....) - Support for IDS/WAF evasion in form of "tampering" scripts - Numerous optimizations Remote file manipulation Brute force methods
- 15:38Features (2) - Recognition and cracking of password hashes - Web server file upload/download Arbitrary command execution and retrieval of standard output Establishment of an out of band TCP/UDP connection between the attacker's machine and the database server
- 45:26Reflective values Copy of payload (encoded?) inside response Causing problems for blind/boolean technique Source of lots of false positives/negatives in other tools
- 52:40Heuristic test Blatant" logic used for detection Insufficient but great one shot test Parameter "poisoning with invalid (SOL) chars Example
related talks
22mIntegrating Security Measures Throughout Development
22mSecure Your Code — Injections and Logging
01h 27mProactive Defense: Leveraging Hacker Tools for Early Vulnerability Detection
34mActive Security Honeypot for MySQL and PostgreSQL protecting databases from ransomware attacks
58mOpen Source Pentesting and Security Analysis Tools: the DevOps way
36mWhat Is Metasploit? How Do I Use It to Test Project Security?
35mHands-On ModSecurity and Logging
50mHands-On ModSecurity and Logging