SQLFury SQL Injection for Adobe Air runtime v1.1.6 availabe

by

In: Application Scanner , Configurations checks , Database , SQLFury

23 March 2010

SQLFury is an injection scanner that uses blind SQL injection techniques to extract information from a target database. It targets Air Abobe AIR Runtime

Database Support:

  • MySQL
  • PostgreSQL
  • Oracle
  • Microsoft SQL Server

Extract from database:

  • Database version.
  • Current database user.
  • All database users.
  • Database name.
  • All database names.
  • All table names.
  • All columns names.
  • Entire columns.

Version:

  • SQLFury 1.1.6 ( size : 517K )
  • Runs on Windows XP/Vista or MacOS X 10.4/10.5

Post scriptum

Compliance Mandates

  • Application Scanner :

    PCI/DSS 6.3, SOX A12.4, GLBA 16 CFR 314.4(b) and (2), HIPAA 164.308(a)(1)(i), FISMA RA-5, SA-11, SI-2, ISO 27001/27002 12.6, 15.2.2


Related Articles

Application Scanner
Configurations checks
Database
SQLFury