fbpx

Pangolin-Automated SQL Injection Test Tool

SQL injection is the biggest and rising threat for web applications, by using this injection an attacker may easily find the information about database management and an attacker may exploit it, so while penetration testing a pen-tester must consider this threat for web applications. 

It is a good practise to test your web application for different vulnerabilities by using some automatic tools, in the era of these tools there is Pangolin.
Pangolin is an automatic SQL injection penetration testing tool that has been developed by NOSEC. The main goal of this tool is to detect the SQL vulnerabilities on a web application to protect the application from miscellaneous user(s).

Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or user”s specific DBMS tables/columns, run his own SQL statement, read specific files on the file system and more.It is just like SQL Map 


Database Support 
  • Access
  • DB2
  • MS SQL
  • My SQL
  • Informix
  • PostgreSQL
  • Sqlite
  • Etc 
Download
Tutorial
Usage is so simple after installation open Pangolin and than paste your desired link on the URL section than press play button to execute it.



Note: If you enjoyed this post, you might want to subscribe our RSS feed and Email Subscription  or become our Facebook fan! You will get all the latest updates at both the places.
Ehacking Staff
With more than 50 global partners, we are proud to count the world’s leading cybersecurity training provider. EH Academy is the brainchild of Ehacking, which has been involved in the field of training since the past Five years and continues to help in creating professional IT experts.

Most Popular

What Makes ICS/OT Infrastructure Vulnerable?

Infrastructure security for operational technologies (OT) and industrial control systems (ICS) varies from IT security in several ways, with the inverse confidentiality, integrity, and...

Everything You Must Know About IT/OT Convergence

What is an Operational Technology (OT)? Operational technology (OT) is a technology that primarily monitors and controls physical operations. It can automate and control machines,...

Understand the OT Security and Its Importance

This article discusses OT security and why it is essential for protecting industrial systems from cyberattacks. We will also discuss common control objectives that can...

What is Deepfake, and how does it Affect Cybersecurity?

Producing deepfake is easy. It is hard to detect. They operate with a description of reality rather than reality itself (e.g., a video). Any...