"Pangolin is a penetration testing, SQL Injection test tool on database security. It finds SQL Injection vulnerabitlities.Its goal is to detect and take advantage of SQL injection vulnerabilities on web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or user"s specific DBMS tables/columns, run his own SQL statement, read specific files on the file system and more."
This is the updated change log:
Download Pangolin v3.2.3
This is the updated change log:
- Speed up in fast mode when MySQL database later than 4.x.
- Speed up when dump Microsoft SQL Server 2005/2008 database.
- Enhance the injection ability of Informix database.
- Add feature to manual keywords selection.
- Fix the bug dump data incomplete in byte-by-byte mode.
- Enhance the ability injection detection, which will analyse the proper Cookie to test.
- Add command line parameter. Add languages option.
- Fix the collapse when long URL.
- Fix bug cannot pre-login on restricted sites.
- Fix the errors on the content management.
- Fix the abnormal of "Read Session".
- Fix some memory leaking problem.
Download Pangolin v3.2.3