Havij v1.13 Professional version !

Havij v1.13 Commercial 

Havij v1.13 Professional version 

MsSQL 2000/2005 with error

MsSQL 2000/2005 no error union based MsSQL Blind MySQL union based
MySQL Blind
MySQL error based
Oracle union based
Oracle error based
PostgreSQL union based
MsAccess union based
MsAccess Blind HTTPS Support
Proxy support
Automatic database detection
Automatic type detection (string or integer)
Automatic keyword detection (finding difference between the positive and negative response)
7. Trying different injection syntaxes
8. Options for replacing space by /**/,+,... against IDS or filters
9. Avoid using strings (magic_quotes similar filters bypass)
10. Manual injection syntax support
11. Manual queries with result (Commerical version )
12. Bypassing illegal union
13. Full customizable http headers (like referer,user agent and ...)
14. Load cookie from site for authentication
15. Real time result
16. Guessing tables and columns in mysql<5 (also in blind) and MsAccess
17. Fast getting tables and columns for mysql
18. Executing sql query in Oracle database
19. Getting one row in one request (all in one request)
20. Dumping data into file (Commerical version only)
21. Saving data as XML format (Commerical version only)
22. View every injection request sent by program
23. Enabling xp_cmdshell and remote desktop 
24. Multi thread Admin page finder
25. Multi thread Online MD5 cracker
26. Getting DBMS Informations
27. Getting tables, columns and data
28. Command executation (mssql only)
29. Reading system files (mysql only)
30. insert/update/delete data

How to use: This tool is for exploiting SQL Injection bugs in web application.
For using this tool you should know a little about SQL Injections.
Enter target url and select http method then click Analyze.
Note: Try to url be valid input that returns a normal page not a 404 or error page.


Version History
---------------
Version 1.13 2010/10/30
-a bug in finding valid string column in mysql fixed.
-Getting tables and column when database name is unknown added (mysql)
-Automatic keyword finder optimized and some bugs fixed.
-'Key is not unique' bug fixed
-Getting data starts from row 2 when All in One fails - bug fixed
-Run time error when finding keyword fixed.
-False table finding in access fixed.
-keyword correction method made better
-a bug in getting current data base in mssql fixed.
-a secondary method added when input value doesn't return a normal page (usually 404 not found)
-data extraction bug in html-encoded pages fixed.
-string or integer type detection made better.
-a bug in https injection fixed.
-another method added for finding columns count and string column in PostgreSQL
-Oracle error based database added with ability to execute query.

Download links:
Rapidshare
http://www.multiupload.com/RS_NKFWQ2YFST  
Megaupload    
http://www.multiupload.com/MU_NKFWQ2YFST
Depositfiles  
http://www.multiupload.com/DF_NKFWQ2YFST
Hotfile  
http://www.multiupload.com/HF_NKFWQ2YFST
Zshare  
http://www.multiupload.com/ZS_NKFWQ2YFST