Havij

Havij is an automated SQL Injection tool that helps penetration testers to find and exploit SQL Injection vulnerabilities on a web page.

It can take advantage of a vulnerable web application. By using this software user can perform back-end database fingerprint, retrieve DBMS users and password hashes, dump tables and columns, fetching data from the database, running SQL statements and even accessing the underlying file system and executing commands on the operating system.

The power of Havij that makes it different from similar tools is its injection methods. The success rate is more than 95% at injectiong vulnerable targets using Havij.

The user friendly GUI (Graphical User Interface) of Havij and automated settings and detections makes it easy to use for everyone even amateur users.

What's New?

Webknight WAF bypass added.

Bypassing mod_security made better

Unicode support added

A new method for tables/columns extraction in mssql

Continuing previous tables/columns extraction made available

Custom replacement added to the settings

Default injection value added to the settings (when using %Inject_Here%)

Table and column prefix added for blind injections