Friday, September 16, 2011

Automated SQL injection with pangolin- Tutorial+Application download

Pangolin is an automatic SQL injection penetration testing (Pen-testing) tool for Website manager or IT Security analyst. Its goal is to detect and take advantage of SQL injection vulnerabilities on web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or users specific DBMS tables/columns, run his own SQL statement, read specific files on the file system and more.

Test many types of databases

Your web applications using Access,DB2,Informix,Microsoft SQL Server 2000,Microsoft SQL Server 2005,Microsoft SQL Server 2008,MySQL,Oracle,PostgreSQL,Sqlite3,Sybase.

Pangolin supports all of them.

Features: Auto-analyzing keyword, HTTPS support, Pre-Login, Bypass firewall setting, Injection Digger, Data dumper, etc.





  1. Thanks a lot for sharing this useful information !

    Penetration Testing

  2. It there anyway that I could chat with you online, just pooring out a ton of questions, because I really dont understand shit of how to use most of these tools, but I woudl really like 2.

  3. sure you can chat with me online, YH (foxywaxy2007)
    skype( thomas.finke5)

  4. Every time you use this program a parameter check is done and your info of what you used the program for is sent out to a corporate database where it is logged for revision so if you are using this to attack sites use an encrypted tunnel when doing so.