+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Hacking Tools (https://sinister.li/Forum-Hacking-Tools)
+--- Thread: CS-SQL Injection Authentication Bypass (/Thread-CS-SQL-Injection-Authentication-Bypass)
CS-SQL Injection Authentication Bypass - ZanGetsu - 09-13-2017
Authentication SQL injection Bypass Tool. This tool is developed to bypass authentication on admin panels with the help of sql injection. I recommend to use -v to see better results.
usage:
Code:
CS-SQL-Injection-Authentication-Bypass-Tool.py [--help] url [-username u] [-password p] [-submit s] [-visible v]![[Image: a67585cbb11be01ffe70437db4f637a9.png]](https://i.gyazo.com/a67585cbb11be01ffe70437db4f637a9.png)
Dependencies
- Python
- Selenium
- PyVirtualDisplay
RE: CS-SQL Injection Authentication Bypass - mothered - 09-13-2017
Would I be correct In saying that this tool Is similar to that of exploiting a vulnerability In either or both the username & password parameters (by Injecting malicious commands), modifying the SQL WHERE Clause by giving It a logical truth, and authenticating thereafter via SQLi?
I'm eager to give this a test.
Thanks again.