Havij is an automated SQL Injection tool that helps penetration testers
to find and exploit SQL Injection vulnerabilities on a web page.It can
take advantage of a vulnerable web application. By using this software
user can perform back-end database fingerprint, retrieve DBMS users and
password hashes, dump tables and columns, fetching data from the database, running SQL statements and even accessing the underlying file system and executing commands on the operating system.
The power of Havij that makes it different from similar tools is its injection methods. The success rate is more than 95% at injecting vulnerable targets using Havij.The user friendly GUI (Graphical User Interface) of Havij and automated settings and detections makes it easy to use for everyone even amateur users.
The power of Havij that makes it different from similar tools is its injection methods. The success rate is more than 95% at injecting vulnerable targets using Havij.The user friendly GUI (Graphical User Interface) of Havij and automated settings and detections makes it easy to use for everyone even amateur users.
First of all we need to know about SQL injection. SQL Injection is
common web application vulnerability due to insufficient validation on
user inputs. An attacker can inject some SQL commands into the original
query written by the developer to change the result to what he/she wants
and execute his/her commands. This work (injecting SQL commands) is
called Exploitation that can cause sensitive data disclosure, changing
data, deleting data or even whole system compromise!
Download the manual of Using the SQL injection tool (HAVIJ)