SlideShare a Scribd company logo

sqlmap - why (not how) it works?

•
•
Miroslav Stampar
Miroslav Stampar

These are the slides from a talk "sqlmap - why (not how) it works?" held at Navaja Negra & ConectaCon 2015 (Albacete / Spain)

Internet
1 of 46
Download to read offline
sqlmap – why (not how) it works? Miroslav Stampar (miroslav@sqlmap.org) sqlmap – why (not how) it works? Miroslav Stampar (miroslav@sqlmap.org)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 2 Formal introduction sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 3 Birthday
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 4 Short history Daniele Belluci (@belch) – July 1st 2006, birthday of @sqlmap Bernardo Damele A. G. (@inquisb) – late 2006, joins the @sqlmap Daniele Belluci (@belch) – late 2006, leaves the @sqlmap Miroslav Stampar (@stamparm) – late 2009, joins the @sqlmap ...and they lived happily ever after :)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 5 sqlmap.py (1) Version Release date Switches / options Code files LOC Total size 0.(0.)1 2006-06-01 16 3 339 64KB 0.2 2006-12-13 20 7 1117 116KB 0.3 2007-01-20 24 8 1731 160KB 0.4 2007-06-15 34 18 3819 468KB 0.5 2007-11-04 37 23 5711 680KB 0.6 2008-09-01 47 55 11920 1.2MB 0.7 2009-07-25 75 85 19387 5.1MB 0.8 2010-03-14 94 96 22840 5.7MB 0.9 2011-04-10 115 212 38787 9.5MB 1.0(-dev-f89ce21) 177 375 60995 12MB
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 6 sqlmap.py (2)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 7 sqlmap.py (3)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 8 sqlmap.org (1)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 9 sqlmap.org (2)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 10 sqlmap.org (3)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 11 sqlmap.org (4)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 12 SourceForge (obsolete)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 13 Mailing list (deprecated)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 14 GitHub (1)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 15 GitHub (2) cuckoobox/cuckoo beefproject/beef andresriancho/w3af sqlmapproject/sqlmap rapid7/metasploit-framework bro/bro sleuthkit/sleuthkit wireshark/wireshark aircrack-ng/aircrack-ng ...
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 16 GitHub (3)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 17 GitHub (4)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 18 GitHub (5)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 19 GitHub (6)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 20 GitHub (7)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 21 sqlmapreporter (1)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 22 sqlmapreporter (2)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 23 sqlmapreporter (3)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 24 sqlmapreporter (4)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 25 testenv (1)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 26 testenv (2)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 27 testenv (3)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 28 Benchmark (sectoolmarket.com)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 29 Twitter (1)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 30 Twitter (2)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 31 Twitter (3)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 32 Twitter (4)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 33 Twitter (5)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 34 Donations (PayPal)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 35 ???
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 36 Donations (Ƀitcoin)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 37 Dual license (1)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 38 Dual license (2)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 39 sqlmappro (1)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 40 sqlmappro (2)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 41 BOFH (1)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 42 BOFH (2)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 43 BOFH (3)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 44 BOFH (4)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 45 Answer to the title's question Because of the long-lasting enthusiasm of a couple of guys having a large, (very) demanding and quite responsive user-base (and couple of angry trolls) ... ...and they lived happily ever after :)
Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 46 Questions?

Recommended

It all starts with the ' (SQL injection from attacker's point of view)
It all starts with the ' (SQL injection from attacker's point of view)It all starts with the ' (SQL injection from attacker's point of view)
It all starts with the ' (SQL injection from attacker's point of view)Miroslav Stampar
 
sqlmap internals
sqlmap internalssqlmap internals
sqlmap internalsMiroslav Stampar
 
Heuristic methods used in sqlmap
Heuristic methods used in sqlmapHeuristic methods used in sqlmap
Heuristic methods used in sqlmapMiroslav Stampar
 
sqlmap - security development in Python
sqlmap - security development in Pythonsqlmap - security development in Python
sqlmap - security development in PythonMiroslav Stampar
 
sqlmap - Under the Hood
sqlmap - Under the Hoodsqlmap - Under the Hood
sqlmap - Under the HoodMiroslav Stampar
 
SQL injection: Not Only AND 1=1 (updated)
SQL injection: Not Only AND 1=1 (updated)SQL injection: Not Only AND 1=1 (updated)
SQL injection: Not Only AND 1=1 (updated)Bernardo Damele A. G.
 
Advanced SQL injection to operating system full control (slides)
Advanced SQL injection to operating system full control (slides)Advanced SQL injection to operating system full control (slides)
Advanced SQL injection to operating system full control (slides)Bernardo Damele A. G.
 
Got database access? Own the network!
Got database access? Own the network!Got database access? Own the network!
Got database access? Own the network!Bernardo Damele A. G.
 

Recommended

It all starts with the ' (SQL injection from attacker's point of view)
It all starts with the ' (SQL injection from attacker's point of view)It all starts with the ' (SQL injection from attacker's point of view)
It all starts with the ' (SQL injection from attacker's point of view)Miroslav Stampar
 
sqlmap internals
sqlmap internalssqlmap internals
sqlmap internalsMiroslav Stampar
 
Heuristic methods used in sqlmap
Heuristic methods used in sqlmapHeuristic methods used in sqlmap
Heuristic methods used in sqlmapMiroslav Stampar
 
sqlmap - security development in Python
sqlmap - security development in Pythonsqlmap - security development in Python
sqlmap - security development in PythonMiroslav Stampar
 
sqlmap - Under the Hood
sqlmap - Under the Hoodsqlmap - Under the Hood
sqlmap - Under the HoodMiroslav Stampar
 
SQL injection: Not Only AND 1=1 (updated)
SQL injection: Not Only AND 1=1 (updated)SQL injection: Not Only AND 1=1 (updated)
SQL injection: Not Only AND 1=1 (updated)Bernardo Damele A. G.
 
Advanced SQL injection to operating system full control (slides)
Advanced SQL injection to operating system full control (slides)Advanced SQL injection to operating system full control (slides)
Advanced SQL injection to operating system full control (slides)Bernardo Damele A. G.
 
Got database access? Own the network!
Got database access? Own the network!Got database access? Own the network!
Got database access? Own the network!Bernardo Damele A. G.
 
Expanding the control over the operating system from the database
Expanding the control over the operating system from the databaseExpanding the control over the operating system from the database
Expanding the control over the operating system from the databaseBernardo Damele A. G.
 
DNS exfiltration using sqlmap
DNS exfiltration using sqlmapDNS exfiltration using sqlmap
DNS exfiltration using sqlmapMiroslav Stampar
 
Sql injection with sqlmap
Sql injection with sqlmapSql injection with sqlmap
Sql injection with sqlmapHerman Duarte
 
Advanced SQL injection to operating system full control (whitepaper)
Advanced SQL injection to operating system full control (whitepaper)Advanced SQL injection to operating system full control (whitepaper)
Advanced SQL injection to operating system full control (whitepaper)Bernardo Damele A. G.
 
Xss ppt
Xss pptXss ppt
Xss pptpenetration Tester
 
Hash joins and bloom filters at AMIS25
Hash joins and bloom filters at AMIS25Hash joins and bloom filters at AMIS25
Hash joins and bloom filters at AMIS25Getting value from IoT, Integration and Data Analytics
 
Reducción efectiva del riesgo de ciberseguridad
Reducción efectiva del riesgo de ciberseguridadReducción efectiva del riesgo de ciberseguridad
Reducción efectiva del riesgo de ciberseguridadCristian Garcia G.
 
Top 10 Web Security Vulnerabilities
Top 10 Web Security VulnerabilitiesTop 10 Web Security Vulnerabilities
Top 10 Web Security VulnerabilitiesCarol McDonald
 
Unrestricted file upload CWE-434 - Adam Nurudini (ISACA)
Unrestricted file upload CWE-434 - Adam Nurudini (ISACA)Unrestricted file upload CWE-434 - Adam Nurudini (ISACA)
Unrestricted file upload CWE-434 - Adam Nurudini (ISACA)Adam Nurudini
 
SQL INJECTION
SQL INJECTIONSQL INJECTION
SQL INJECTIONMentorcs
 
SQL injection prevention techniques
SQL injection prevention techniquesSQL injection prevention techniques
SQL injection prevention techniquesSongchaiDuangpan
 
コンテキストと仲良く
コンテキストと仲良くコンテキストと仲良く
コンテキストと仲良くkarupanerura
 
Types of sql injection attacks
Types of sql injection attacksTypes of sql injection attacks
Types of sql injection attacksRespa Peter
 
MySQL InnoDB Cluster and NDB Cluster
MySQL InnoDB Cluster and NDB ClusterMySQL InnoDB Cluster and NDB Cluster
MySQL InnoDB Cluster and NDB ClusterMario Beck
 
Time based CAPTCHA protected SQL injection through SOAP-webservice
Time based CAPTCHA protected SQL injection through SOAP-webserviceTime based CAPTCHA protected SQL injection through SOAP-webservice
Time based CAPTCHA protected SQL injection through SOAP-webserviceFrans Rosén
 
Not so blind SQL Injection
Not so blind SQL InjectionNot so blind SQL Injection
Not so blind SQL InjectionFrancisco Ribeiro
 
LAMP Server Vulnerabilities
LAMP Server VulnerabilitiesLAMP Server Vulnerabilities
LAMP Server VulnerabilitiesJosh Howell
 
Sql injection in cybersecurity
Sql injection in cybersecuritySql injection in cybersecurity
Sql injection in cybersecuritySanad Bhowmik
 
SSL/TLS 1.3 Deep Dive
SSL/TLS 1.3 Deep Dive SSL/TLS 1.3 Deep Dive
SSL/TLS 1.3 Deep Dive Solutions Architect
 
Cross Site Scripting(XSS)
Cross Site Scripting(XSS)Cross Site Scripting(XSS)
Cross Site Scripting(XSS)Nabin Dutta
 
Non-Esoteric XSS Tips & Tricks
Non-Esoteric XSS Tips & TricksNon-Esoteric XSS Tips & Tricks
Non-Esoteric XSS Tips & TricksMiroslav Stampar
 
SQLMAP Tool Usage - A Heads Up
SQLMAP Tool Usage - A Heads UpSQLMAP Tool Usage - A Heads Up
SQLMAP Tool Usage - A Heads UpMindfire Solutions
 

More Related Content

What's hot

Expanding the control over the operating system from the database
Expanding the control over the operating system from the databaseExpanding the control over the operating system from the database
Expanding the control over the operating system from the databaseBernardo Damele A. G.
 
DNS exfiltration using sqlmap
DNS exfiltration using sqlmapDNS exfiltration using sqlmap
DNS exfiltration using sqlmapMiroslav Stampar
 
Sql injection with sqlmap
Sql injection with sqlmapSql injection with sqlmap
Sql injection with sqlmapHerman Duarte
 
Advanced SQL injection to operating system full control (whitepaper)
Advanced SQL injection to operating system full control (whitepaper)Advanced SQL injection to operating system full control (whitepaper)
Advanced SQL injection to operating system full control (whitepaper)Bernardo Damele A. G.
 
Reducción efectiva del riesgo de ciberseguridad
Reducción efectiva del riesgo de ciberseguridadReducción efectiva del riesgo de ciberseguridad
Reducción efectiva del riesgo de ciberseguridadCristian Garcia G.
 
Top 10 Web Security Vulnerabilities
Top 10 Web Security VulnerabilitiesTop 10 Web Security Vulnerabilities
Top 10 Web Security VulnerabilitiesCarol McDonald
 
Unrestricted file upload CWE-434 - Adam Nurudini (ISACA)
Unrestricted file upload CWE-434 - Adam Nurudini (ISACA)Unrestricted file upload CWE-434 - Adam Nurudini (ISACA)
Unrestricted file upload CWE-434 - Adam Nurudini (ISACA)Adam Nurudini
 
SQL INJECTION
SQL INJECTIONSQL INJECTION
SQL INJECTIONMentorcs
 
SQL injection prevention techniques
SQL injection prevention techniquesSQL injection prevention techniques
SQL injection prevention techniquesSongchaiDuangpan
 
コンテキストと仲良く
コンテキストと仲良くコンテキストと仲良く
コンテキストと仲良くkarupanerura
 
Types of sql injection attacks
Types of sql injection attacksTypes of sql injection attacks
Types of sql injection attacksRespa Peter
 
MySQL InnoDB Cluster and NDB Cluster
MySQL InnoDB Cluster and NDB ClusterMySQL InnoDB Cluster and NDB Cluster
MySQL InnoDB Cluster and NDB ClusterMario Beck
 
Time based CAPTCHA protected SQL injection through SOAP-webservice
Time based CAPTCHA protected SQL injection through SOAP-webserviceTime based CAPTCHA protected SQL injection through SOAP-webservice
Time based CAPTCHA protected SQL injection through SOAP-webserviceFrans Rosén
 
LAMP Server Vulnerabilities
LAMP Server VulnerabilitiesLAMP Server Vulnerabilities
LAMP Server VulnerabilitiesJosh Howell
 
Sql injection in cybersecurity
Sql injection in cybersecuritySql injection in cybersecurity
Sql injection in cybersecuritySanad Bhowmik
 
Cross Site Scripting(XSS)
Cross Site Scripting(XSS)Cross Site Scripting(XSS)
Cross Site Scripting(XSS)Nabin Dutta
 

What's hot (20)

Expanding the control over the operating system from the database
Expanding the control over the operating system from the databaseExpanding the control over the operating system from the database
Expanding the control over the operating system from the database
 
DNS exfiltration using sqlmap
DNS exfiltration using sqlmapDNS exfiltration using sqlmap
DNS exfiltration using sqlmap
 
Sql injection with sqlmap
Sql injection with sqlmapSql injection with sqlmap
Sql injection with sqlmap
 
Advanced SQL injection to operating system full control (whitepaper)
Advanced SQL injection to operating system full control (whitepaper)Advanced SQL injection to operating system full control (whitepaper)
Advanced SQL injection to operating system full control (whitepaper)
 
Xss ppt
Xss pptXss ppt
Xss ppt
 
Hash joins and bloom filters at AMIS25
Hash joins and bloom filters at AMIS25Hash joins and bloom filters at AMIS25
Hash joins and bloom filters at AMIS25
 
Reducción efectiva del riesgo de ciberseguridad
Reducción efectiva del riesgo de ciberseguridadReducción efectiva del riesgo de ciberseguridad
Reducción efectiva del riesgo de ciberseguridad
 
Top 10 Web Security Vulnerabilities
Top 10 Web Security VulnerabilitiesTop 10 Web Security Vulnerabilities
Top 10 Web Security Vulnerabilities
 
Unrestricted file upload CWE-434 - Adam Nurudini (ISACA)
Unrestricted file upload CWE-434 - Adam Nurudini (ISACA)Unrestricted file upload CWE-434 - Adam Nurudini (ISACA)
Unrestricted file upload CWE-434 - Adam Nurudini (ISACA)
 
SQL INJECTION
SQL INJECTIONSQL INJECTION
SQL INJECTION
 
SQL injection prevention techniques
SQL injection prevention techniquesSQL injection prevention techniques
SQL injection prevention techniques
 
コンテキストと仲良く
コンテキストと仲良くコンテキストと仲良く
コンテキストと仲良く
 
Types of sql injection attacks
Types of sql injection attacksTypes of sql injection attacks
Types of sql injection attacks
 
MySQL InnoDB Cluster and NDB Cluster
MySQL InnoDB Cluster and NDB ClusterMySQL InnoDB Cluster and NDB Cluster
MySQL InnoDB Cluster and NDB Cluster
 
Time based CAPTCHA protected SQL injection through SOAP-webservice
Time based CAPTCHA protected SQL injection through SOAP-webserviceTime based CAPTCHA protected SQL injection through SOAP-webservice
Time based CAPTCHA protected SQL injection through SOAP-webservice
 
Not so blind SQL Injection
Not so blind SQL InjectionNot so blind SQL Injection
Not so blind SQL Injection
 
LAMP Server Vulnerabilities
LAMP Server VulnerabilitiesLAMP Server Vulnerabilities
LAMP Server Vulnerabilities
 
Sql injection in cybersecurity
Sql injection in cybersecuritySql injection in cybersecurity
Sql injection in cybersecurity
 
SSL/TLS 1.3 Deep Dive
SSL/TLS 1.3 Deep Dive SSL/TLS 1.3 Deep Dive
SSL/TLS 1.3 Deep Dive
 
Cross Site Scripting(XSS)
Cross Site Scripting(XSS)Cross Site Scripting(XSS)
Cross Site Scripting(XSS)
 

Viewers also liked

Non-Esoteric XSS Tips & Tricks
Non-Esoteric XSS Tips & TricksNon-Esoteric XSS Tips & Tricks
Non-Esoteric XSS Tips & TricksMiroslav Stampar
 
SQLMAP Tool Usage - A Heads Up
SQLMAP Tool Usage - A Heads UpSQLMAP Tool Usage - A Heads Up
SQLMAP Tool Usage - A Heads UpMindfire Solutions
 
2014 – Year of Broken Name Generator(s)
2014 – Year of Broken Name Generator(s)2014 – Year of Broken Name Generator(s)
2014 – Year of Broken Name Generator(s)Miroslav Stampar
 
Data Retrieval over DNS in SQL Injection Attacks
Data Retrieval over DNS in SQL Injection AttacksData Retrieval over DNS in SQL Injection Attacks
Data Retrieval over DNS in SQL Injection AttacksMiroslav Stampar
 
Riding the Overflow - Then and Now
Riding the Overflow - Then and NowRiding the Overflow - Then and Now
Riding the Overflow - Then and NowMiroslav Stampar
 
Analysis of mass SQL injection attacks
Analysis of mass SQL injection attacksAnalysis of mass SQL injection attacks
Analysis of mass SQL injection attacksMiroslav Stampar
 
Spot the Web Vulnerability
Spot the Web VulnerabilitySpot the Web Vulnerability
Spot the Web VulnerabilityMiroslav Stampar
 
Riding the Overflow - Then and Now
Riding the Overflow - Then and NowRiding the Overflow - Then and Now
Riding the Overflow - Then and NowMiroslav Stampar
 
Revista derecho constitucional (derechos humanos y estados de excepción)
Revista derecho constitucional (derechos humanos y estados de excepción)Revista derecho constitucional (derechos humanos y estados de excepción)
Revista derecho constitucional (derechos humanos y estados de excepción)arlenis camacho
 
Evolucion historica de la criminologia
Evolucion historica de la criminologiaEvolucion historica de la criminologia
Evolucion historica de la criminologiaarlenis camacho
 
Ladies waterproof head scarf
Ladies waterproof head scarfLadies waterproof head scarf
Ladies waterproof head scarfshopkrysi47
 

Viewers also liked (14)

Non-Esoteric XSS Tips & Tricks
Non-Esoteric XSS Tips & TricksNon-Esoteric XSS Tips & Tricks
Non-Esoteric XSS Tips & Tricks
 
SQLMAP Tool Usage - A Heads Up
SQLMAP Tool Usage - A Heads UpSQLMAP Tool Usage - A Heads Up
SQLMAP Tool Usage - A Heads Up
 
2014 – Year of Broken Name Generator(s)
2014 – Year of Broken Name Generator(s)2014 – Year of Broken Name Generator(s)
2014 – Year of Broken Name Generator(s)
 
Data Retrieval over DNS in SQL Injection Attacks
Data Retrieval over DNS in SQL Injection AttacksData Retrieval over DNS in SQL Injection Attacks
Data Retrieval over DNS in SQL Injection Attacks
 
Smashing the Buffer
Smashing the BufferSmashing the Buffer
Smashing the Buffer
 
Curious Case of SQLi
Curious Case of SQLiCurious Case of SQLi
Curious Case of SQLi
 
Riding the Overflow - Then and Now
Riding the Overflow - Then and NowRiding the Overflow - Then and Now
Riding the Overflow - Then and Now
 
Hash DoS Attack
Hash DoS AttackHash DoS Attack
Hash DoS Attack
 
Analysis of mass SQL injection attacks
Analysis of mass SQL injection attacksAnalysis of mass SQL injection attacks
Analysis of mass SQL injection attacks
 
Spot the Web Vulnerability
Spot the Web VulnerabilitySpot the Web Vulnerability
Spot the Web Vulnerability
 
Riding the Overflow - Then and Now
Riding the Overflow - Then and NowRiding the Overflow - Then and Now
Riding the Overflow - Then and Now
 
Revista derecho constitucional (derechos humanos y estados de excepción)
Revista derecho constitucional (derechos humanos y estados de excepción)Revista derecho constitucional (derechos humanos y estados de excepción)
Revista derecho constitucional (derechos humanos y estados de excepción)
 
Evolucion historica de la criminologia
Evolucion historica de la criminologiaEvolucion historica de la criminologia
Evolucion historica de la criminologia
 
Ladies waterproof head scarf
Ladies waterproof head scarfLadies waterproof head scarf
Ladies waterproof head scarf
 

Similar to sqlmap - why (not how) it works?

UKSG Conference 2015 - E-resources: ezPAARSE helps you discover who is readin...
UKSG Conference 2015 - E-resources: ezPAARSE helps you discover who is readin...UKSG Conference 2015 - E-resources: ezPAARSE helps you discover who is readin...
UKSG Conference 2015 - E-resources: ezPAARSE helps you discover who is readin...UKSG: connecting the knowledge community
 
Funnel Analysis with Apache Spark and Druid
Funnel Analysis with Apache Spark and DruidFunnel Analysis with Apache Spark and Druid
Funnel Analysis with Apache Spark and DruidDatabricks
 
Azure Stream Analytics
Azure Stream AnalyticsAzure Stream Analytics
Azure Stream AnalyticsMarco Parenzan
 
RuleML2015: Compact representation of conditional probability for rule-based...
RuleML2015: Compact representation of conditional probability for rule-based...RuleML2015: Compact representation of conditional probability for rule-based...
RuleML2015: Compact representation of conditional probability for rule-based...RuleML
 
Real-time user profiling based on Spark streaming and HBase by Arkadiusz Jach...
Real-time user profiling based on Spark streaming and HBase by Arkadiusz Jach...Real-time user profiling based on Spark streaming and HBase by Arkadiusz Jach...
Real-time user profiling based on Spark streaming and HBase by Arkadiusz Jach...Big Data Spain
 
SiamQuant Workshop 2.0 Slides
SiamQuant Workshop 2.0 SlidesSiamQuant Workshop 2.0 Slides
SiamQuant Workshop 2.0 Slidessiamquant
 
Low-cost data-driven 3D reconstruction and its applications @ 6th ICE 3D Body...
Low-cost data-driven 3D reconstruction and its applications @ 6th ICE 3D Body...Low-cost data-driven 3D reconstruction and its applications @ 6th ICE 3D Body...
Low-cost data-driven 3D reconstruction and its applications @ 6th ICE 3D Body...Alfredo BALLESTER FERNÁNDEZ
 
LINEデリマでのElasticsearchの運用と監視の話
LINEデリマでのElasticsearchの運用と監視の話LINEデリマでのElasticsearchの運用と監視の話
LINEデリマでのElasticsearchの運用と監視の話LINE Corporation
 
The RIPE Atlas Global Internet Measurement Network
The RIPE Atlas Global Internet Measurement NetworkThe RIPE Atlas Global Internet Measurement Network
The RIPE Atlas Global Internet Measurement NetworkRIPE NCC
 
Tableau Conference 2018: Binging on Data - Enabling Analytics at Netflix
Tableau Conference 2018: Binging on Data - Enabling Analytics at NetflixTableau Conference 2018: Binging on Data - Enabling Analytics at Netflix
Tableau Conference 2018: Binging on Data - Enabling Analytics at NetflixBlake Irvine
 
Exploratory data analysis in R - Data Science Club
Exploratory data analysis in R - Data Science ClubExploratory data analysis in R - Data Science Club
Exploratory data analysis in R - Data Science ClubMartin Bago
 
Analyzing the State of Static Analysis: A Large-Scale Evaluation in Open Sour...
Analyzing the State of Static Analysis: A Large-Scale Evaluation in Open Sour...Analyzing the State of Static Analysis: A Large-Scale Evaluation in Open Sour...
Analyzing the State of Static Analysis: A Large-Scale Evaluation in Open Sour...Moritz Beller
 
Tracxn - Big Data Infrastructure Startup Landscape
Tracxn - Big Data Infrastructure Startup LandscapeTracxn - Big Data Infrastructure Startup Landscape
Tracxn - Big Data Infrastructure Startup LandscapeAmar Christy
 
Scaling Agile Data Warehousing with the Scaled Agile Framework (SAFe)
Scaling Agile Data Warehousing with the Scaled Agile Framework (SAFe)Scaling Agile Data Warehousing with the Scaled Agile Framework (SAFe)
Scaling Agile Data Warehousing with the Scaled Agile Framework (SAFe)Em Campbell-Pretty
 
Scaling Agile Data Warehousing with the Scaled Agile Framework (SAFe)
Scaling Agile Data Warehousing with the Scaled Agile Framework (SAFe)Scaling Agile Data Warehousing with the Scaled Agile Framework (SAFe)
Scaling Agile Data Warehousing with the Scaled Agile Framework (SAFe)Context Matters
 
Alessandro Terenzi (InGlobe Technologies): Object Tracking with ARMedia SDK
Alessandro Terenzi (InGlobe Technologies): Object Tracking with ARMedia SDKAlessandro Terenzi (InGlobe Technologies): Object Tracking with ARMedia SDK
Alessandro Terenzi (InGlobe Technologies): Object Tracking with ARMedia SDKAugmentedWorldExpo
 

Similar to sqlmap - why (not how) it works? (17)

UKSG Conference 2015 - E-resources: ezPAARSE helps you discover who is readin...
UKSG Conference 2015 - E-resources: ezPAARSE helps you discover who is readin...UKSG Conference 2015 - E-resources: ezPAARSE helps you discover who is readin...
UKSG Conference 2015 - E-resources: ezPAARSE helps you discover who is readin...
 
Funnel Analysis with Apache Spark and Druid
Funnel Analysis with Apache Spark and DruidFunnel Analysis with Apache Spark and Druid
Funnel Analysis with Apache Spark and Druid
 
Azure Stream Analytics
Azure Stream AnalyticsAzure Stream Analytics
Azure Stream Analytics
 
RuleML2015: Compact representation of conditional probability for rule-based...
RuleML2015: Compact representation of conditional probability for rule-based...RuleML2015: Compact representation of conditional probability for rule-based...
RuleML2015: Compact representation of conditional probability for rule-based...
 
Real-time user profiling based on Spark streaming and HBase by Arkadiusz Jach...
Real-time user profiling based on Spark streaming and HBase by Arkadiusz Jach...Real-time user profiling based on Spark streaming and HBase by Arkadiusz Jach...
Real-time user profiling based on Spark streaming and HBase by Arkadiusz Jach...
 
SiamQuant Workshop 2.0 Slides
SiamQuant Workshop 2.0 SlidesSiamQuant Workshop 2.0 Slides
SiamQuant Workshop 2.0 Slides
 
Low-cost data-driven 3D reconstruction and its applications @ 6th ICE 3D Body...
Low-cost data-driven 3D reconstruction and its applications @ 6th ICE 3D Body...Low-cost data-driven 3D reconstruction and its applications @ 6th ICE 3D Body...
Low-cost data-driven 3D reconstruction and its applications @ 6th ICE 3D Body...
 
LINEデリマでのElasticsearchの運用と監視の話
LINEデリマでのElasticsearchの運用と監視の話LINEデリマでのElasticsearchの運用と監視の話
LINEデリマでのElasticsearchの運用と監視の話
 
The RIPE Atlas Global Internet Measurement Network
The RIPE Atlas Global Internet Measurement NetworkThe RIPE Atlas Global Internet Measurement Network
The RIPE Atlas Global Internet Measurement Network
 
Tableau Conference 2018: Binging on Data - Enabling Analytics at Netflix
Tableau Conference 2018: Binging on Data - Enabling Analytics at NetflixTableau Conference 2018: Binging on Data - Enabling Analytics at Netflix
Tableau Conference 2018: Binging on Data - Enabling Analytics at Netflix
 
Exploratory data analysis in R - Data Science Club
Exploratory data analysis in R - Data Science ClubExploratory data analysis in R - Data Science Club
Exploratory data analysis in R - Data Science Club
 
Analyzing the State of Static Analysis: A Large-Scale Evaluation in Open Sour...
Analyzing the State of Static Analysis: A Large-Scale Evaluation in Open Sour...Analyzing the State of Static Analysis: A Large-Scale Evaluation in Open Sour...
Analyzing the State of Static Analysis: A Large-Scale Evaluation in Open Sour...
 
Tracxn - Big Data Infrastructure Startup Landscape
Tracxn - Big Data Infrastructure Startup LandscapeTracxn - Big Data Infrastructure Startup Landscape
Tracxn - Big Data Infrastructure Startup Landscape
 
RIPE Atlas streaming
RIPE Atlas streamingRIPE Atlas streaming
RIPE Atlas streaming
 
Scaling Agile Data Warehousing with the Scaled Agile Framework (SAFe)
Scaling Agile Data Warehousing with the Scaled Agile Framework (SAFe)Scaling Agile Data Warehousing with the Scaled Agile Framework (SAFe)
Scaling Agile Data Warehousing with the Scaled Agile Framework (SAFe)
 
Scaling Agile Data Warehousing with the Scaled Agile Framework (SAFe)
Scaling Agile Data Warehousing with the Scaled Agile Framework (SAFe)Scaling Agile Data Warehousing with the Scaled Agile Framework (SAFe)
Scaling Agile Data Warehousing with the Scaled Agile Framework (SAFe)
 
Alessandro Terenzi (InGlobe Technologies): Object Tracking with ARMedia SDK
Alessandro Terenzi (InGlobe Technologies): Object Tracking with ARMedia SDKAlessandro Terenzi (InGlobe Technologies): Object Tracking with ARMedia SDK
Alessandro Terenzi (InGlobe Technologies): Object Tracking with ARMedia SDK
 

More from Miroslav Stampar

sqlmap - "One Tiny Step At a Time"
sqlmap - "One Tiny Step At a Time"sqlmap - "One Tiny Step At a Time"
sqlmap - "One Tiny Step At a Time"Miroslav Stampar
 
Why everybody should do CTF / Wargames?
Why everybody should do CTF / Wargames?Why everybody should do CTF / Wargames?
Why everybody should do CTF / Wargames?Miroslav Stampar
 
Improving Network Intrusion Detection with Traffic Denoise
Improving Network Intrusion Detection with Traffic DenoiseImproving Network Intrusion Detection with Traffic Denoise
Improving Network Intrusion Detection with Traffic DenoiseMiroslav Stampar
 
APT Attacks on Critical Infrastructure
APT Attacks on Critical InfrastructureAPT Attacks on Critical Infrastructure
APT Attacks on Critical InfrastructureMiroslav Stampar
 
WARNING: Do Not Feed the Bears
WARNING: Do Not Feed the BearsWARNING: Do Not Feed the Bears
WARNING: Do Not Feed the BearsMiroslav Stampar
 

More from Miroslav Stampar (7)

sqlmap - "One Tiny Step At a Time"
sqlmap - "One Tiny Step At a Time"sqlmap - "One Tiny Step At a Time"
sqlmap - "One Tiny Step At a Time"
 
Blind WAF identification
Blind WAF identificationBlind WAF identification
Blind WAF identification
 
sqlmap internals
sqlmap internalssqlmap internals
sqlmap internals
 
Why everybody should do CTF / Wargames?
Why everybody should do CTF / Wargames?Why everybody should do CTF / Wargames?
Why everybody should do CTF / Wargames?
 
Improving Network Intrusion Detection with Traffic Denoise
Improving Network Intrusion Detection with Traffic DenoiseImproving Network Intrusion Detection with Traffic Denoise
Improving Network Intrusion Detection with Traffic Denoise
 
APT Attacks on Critical Infrastructure
APT Attacks on Critical InfrastructureAPT Attacks on Critical Infrastructure
APT Attacks on Critical Infrastructure
 
WARNING: Do Not Feed the Bears
WARNING: Do Not Feed the BearsWARNING: Do Not Feed the Bears
WARNING: Do Not Feed the Bears
 

Recently uploaded

Packaging the Monolith - PHP Tek 2024 (Breaking it down one bite at a time)
Packaging the Monolith - PHP Tek 2024 (Breaking it down one bite at a time)Packaging the Monolith - PHP Tek 2024 (Breaking it down one bite at a time)
Packaging the Monolith - PHP Tek 2024 (Breaking it down one bite at a time)Dana Luther
 
Git and Github workshop GDSC MLRITM
Git and Github workshop GDSC MLRITMGit and Github workshop GDSC MLRITM
Git and Github workshop GDSC MLRITMgdsc13
 
Font Performance - NYC WebPerf Meetup April '24
Font Performance - NYC WebPerf Meetup April '24Font Performance - NYC WebPerf Meetup April '24
Font Performance - NYC WebPerf Meetup April '24Paul Calvano
 
定制(UAL学位证)英国伦敦艺术大学毕业证成绩单原版一比一
定制(UAL学位证)英国伦敦艺术大学毕业证成绩单原版一比一定制(UAL学位证)英国伦敦艺术大学毕业证成绩单原版一比一
定制(UAL学位证)英国伦敦艺术大学毕业证成绩单原版一比一Fs
 
Intellectual property rightsand its types.pptx
Intellectual property rightsand its types.pptxIntellectual property rightsand its types.pptx
Intellectual property rightsand its types.pptxBipin Adhikari
 
Film cover research (1).pptxsdasdasdasdasdasa
Film cover research (1).pptxsdasdasdasdasdasaFilm cover research (1).pptxsdasdasdasdasdasa
Film cover research (1).pptxsdasdasdasdasdasa494f574xmv
 
定制(Management毕业证书)新加坡管理大学毕业证成绩单原版一比一
定制(Management毕业证书)新加坡管理大学毕业证成绩单原版一比一定制(Management毕业证书)新加坡管理大学毕业证成绩单原版一比一
定制(Management毕业证书)新加坡管理大学毕业证成绩单原版一比一Fs
 
Q4-1-Illustrating-Hypothesis-Testing.pptx
Q4-1-Illustrating-Hypothesis-Testing.pptxQ4-1-Illustrating-Hypothesis-Testing.pptx
Q4-1-Illustrating-Hypothesis-Testing.pptxeditsforyah
 
Contact Rya Baby for Call Girls New Delhi
Contact Rya Baby for Call Girls New DelhiContact Rya Baby for Call Girls New Delhi
Contact Rya Baby for Call Girls New Delhimiss dipika
 
定制(AUT毕业证书)新西兰奥克兰理工大学毕业证成绩单原版一比一
定制(AUT毕业证书)新西兰奥克兰理工大学毕业证成绩单原版一比一定制(AUT毕业证书)新西兰奥克兰理工大学毕业证成绩单原版一比一
定制(AUT毕业证书)新西兰奥克兰理工大学毕业证成绩单原版一比一Fs
 
Potsdam FH学位证,波茨坦应用技术大学毕业证书1:1制作
Potsdam FH学位证,波茨坦应用技术大学毕业证书1:1制作Potsdam FH学位证,波茨坦应用技术大学毕业证书1:1制作
Potsdam FH学位证,波茨坦应用技术大学毕业证书1:1制作ys8omjxb
 
Call Girls Near The Suryaa Hotel New Delhi 9873777170
Call Girls Near The Suryaa Hotel New Delhi 9873777170Call Girls Near The Suryaa Hotel New Delhi 9873777170
Call Girls Near The Suryaa Hotel New Delhi 9873777170Sonam Pathan
 
办理多伦多大学毕业证成绩单|购买加拿大UTSG文凭证书
办理多伦多大学毕业证成绩单|购买加拿大UTSG文凭证书办理多伦多大学毕业证成绩单|购买加拿大UTSG文凭证书
办理多伦多大学毕业证成绩单|购买加拿大UTSG文凭证书zdzoqco
 
定制(Lincoln毕业证书)新西兰林肯大学毕业证成绩单原版一比一
定制(Lincoln毕业证书)新西兰林肯大学毕业证成绩单原版一比一定制(Lincoln毕业证书)新西兰林肯大学毕业证成绩单原版一比一
定制(Lincoln毕业证书)新西兰林肯大学毕业证成绩单原版一比一Fs
 
PHP-based rendering of TYPO3 Documentation
PHP-based rendering of TYPO3 DocumentationPHP-based rendering of TYPO3 Documentation
PHP-based rendering of TYPO3 DocumentationLinaWolf1
 
办理(UofR毕业证书)罗切斯特大学毕业证成绩单原版一比一
办理(UofR毕业证书)罗切斯特大学毕业证成绩单原版一比一办理(UofR毕业证书)罗切斯特大学毕业证成绩单原版一比一
办理(UofR毕业证书)罗切斯特大学毕业证成绩单原版一比一z xss
 
SCM Symposium PPT Format Customer loyalty is predi
SCM Symposium PPT Format Customer loyalty is prediSCM Symposium PPT Format Customer loyalty is predi
SCM Symposium PPT Format Customer loyalty is predieusebiomeyer
 
Magic exist by Marta Loveguard - presentation.pptx
Magic exist by Marta Loveguard - presentation.pptxMagic exist by Marta Loveguard - presentation.pptx
Magic exist by Marta Loveguard - presentation.pptxMartaLoveguard
 

Recently uploaded (20)

Packaging the Monolith - PHP Tek 2024 (Breaking it down one bite at a time)
Packaging the Monolith - PHP Tek 2024 (Breaking it down one bite at a time)Packaging the Monolith - PHP Tek 2024 (Breaking it down one bite at a time)
Packaging the Monolith - PHP Tek 2024 (Breaking it down one bite at a time)
 
Git and Github workshop GDSC MLRITM
Git and Github workshop GDSC MLRITMGit and Github workshop GDSC MLRITM
Git and Github workshop GDSC MLRITM
 
Font Performance - NYC WebPerf Meetup April '24
Font Performance - NYC WebPerf Meetup April '24Font Performance - NYC WebPerf Meetup April '24
Font Performance - NYC WebPerf Meetup April '24
 
定制(UAL学位证)英国伦敦艺术大学毕业证成绩单原版一比一
定制(UAL学位证)英国伦敦艺术大学毕业证成绩单原版一比一定制(UAL学位证)英国伦敦艺术大学毕业证成绩单原版一比一
定制(UAL学位证)英国伦敦艺术大学毕业证成绩单原版一比一
 
young call girls in Uttam Nagar🔝 9953056974 🔝 Delhi escort Service
young call girls in Uttam Nagar🔝 9953056974 🔝 Delhi escort Serviceyoung call girls in Uttam Nagar🔝 9953056974 🔝 Delhi escort Service
young call girls in Uttam Nagar🔝 9953056974 🔝 Delhi escort Service
 
Intellectual property rightsand its types.pptx
Intellectual property rightsand its types.pptxIntellectual property rightsand its types.pptx
Intellectual property rightsand its types.pptx
 
Model Call Girl in Jamuna Vihar Delhi reach out to us at 🔝9953056974🔝
Model Call Girl in Jamuna Vihar Delhi reach out to us at 🔝9953056974🔝Model Call Girl in Jamuna Vihar Delhi reach out to us at 🔝9953056974🔝
Model Call Girl in Jamuna Vihar Delhi reach out to us at 🔝9953056974🔝
 
Film cover research (1).pptxsdasdasdasdasdasa
Film cover research (1).pptxsdasdasdasdasdasaFilm cover research (1).pptxsdasdasdasdasdasa
Film cover research (1).pptxsdasdasdasdasdasa
 
定制(Management毕业证书)新加坡管理大学毕业证成绩单原版一比一
定制(Management毕业证书)新加坡管理大学毕业证成绩单原版一比一定制(Management毕业证书)新加坡管理大学毕业证成绩单原版一比一
定制(Management毕业证书)新加坡管理大学毕业证成绩单原版一比一
 
Q4-1-Illustrating-Hypothesis-Testing.pptx
Q4-1-Illustrating-Hypothesis-Testing.pptxQ4-1-Illustrating-Hypothesis-Testing.pptx
Q4-1-Illustrating-Hypothesis-Testing.pptx
 
Contact Rya Baby for Call Girls New Delhi
Contact Rya Baby for Call Girls New DelhiContact Rya Baby for Call Girls New Delhi
Contact Rya Baby for Call Girls New Delhi
 
定制(AUT毕业证书)新西兰奥克兰理工大学毕业证成绩单原版一比一
定制(AUT毕业证书)新西兰奥克兰理工大学毕业证成绩单原版一比一定制(AUT毕业证书)新西兰奥克兰理工大学毕业证成绩单原版一比一
定制(AUT毕业证书)新西兰奥克兰理工大学毕业证成绩单原版一比一
 
Potsdam FH学位证,波茨坦应用技术大学毕业证书1:1制作
Potsdam FH学位证,波茨坦应用技术大学毕业证书1:1制作Potsdam FH学位证,波茨坦应用技术大学毕业证书1:1制作
Potsdam FH学位证,波茨坦应用技术大学毕业证书1:1制作
 
Call Girls Near The Suryaa Hotel New Delhi 9873777170
Call Girls Near The Suryaa Hotel New Delhi 9873777170Call Girls Near The Suryaa Hotel New Delhi 9873777170
Call Girls Near The Suryaa Hotel New Delhi 9873777170
 
办理多伦多大学毕业证成绩单|购买加拿大UTSG文凭证书
办理多伦多大学毕业证成绩单|购买加拿大UTSG文凭证书办理多伦多大学毕业证成绩单|购买加拿大UTSG文凭证书
办理多伦多大学毕业证成绩单|购买加拿大UTSG文凭证书
 
定制(Lincoln毕业证书)新西兰林肯大学毕业证成绩单原版一比一
定制(Lincoln毕业证书)新西兰林肯大学毕业证成绩单原版一比一定制(Lincoln毕业证书)新西兰林肯大学毕业证成绩单原版一比一
定制(Lincoln毕业证书)新西兰林肯大学毕业证成绩单原版一比一
 
PHP-based rendering of TYPO3 Documentation
PHP-based rendering of TYPO3 DocumentationPHP-based rendering of TYPO3 Documentation
PHP-based rendering of TYPO3 Documentation
 
办理(UofR毕业证书)罗切斯特大学毕业证成绩单原版一比一
办理(UofR毕业证书)罗切斯特大学毕业证成绩单原版一比一办理(UofR毕业证书)罗切斯特大学毕业证成绩单原版一比一
办理(UofR毕业证书)罗切斯特大学毕业证成绩单原版一比一
 
SCM Symposium PPT Format Customer loyalty is predi
SCM Symposium PPT Format Customer loyalty is prediSCM Symposium PPT Format Customer loyalty is predi
SCM Symposium PPT Format Customer loyalty is predi
 
Magic exist by Marta Loveguard - presentation.pptx
Magic exist by Marta Loveguard - presentation.pptxMagic exist by Marta Loveguard - presentation.pptx
Magic exist by Marta Loveguard - presentation.pptx
 

sqlmap - why (not how) it works?

  • 1. sqlmap – why (not how) it works? Miroslav Stampar (miroslav@sqlmap.org) sqlmap – why (not how) it works? Miroslav Stampar (miroslav@sqlmap.org)
  • 2. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 2 Formal introduction sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.
  • 3. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 3 Birthday
  • 4. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 4 Short history Daniele Belluci (@belch) – July 1st 2006, birthday of @sqlmap Bernardo Damele A. G. (@inquisb) – late 2006, joins the @sqlmap Daniele Belluci (@belch) – late 2006, leaves the @sqlmap Miroslav Stampar (@stamparm) – late 2009, joins the @sqlmap ...and they lived happily ever after :)
  • 5. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 5 sqlmap.py (1) Version Release date Switches / options Code files LOC Total size 0.(0.)1 2006-06-01 16 3 339 64KB 0.2 2006-12-13 20 7 1117 116KB 0.3 2007-01-20 24 8 1731 160KB 0.4 2007-06-15 34 18 3819 468KB 0.5 2007-11-04 37 23 5711 680KB 0.6 2008-09-01 47 55 11920 1.2MB 0.7 2009-07-25 75 85 19387 5.1MB 0.8 2010-03-14 94 96 22840 5.7MB 0.9 2011-04-10 115 212 38787 9.5MB 1.0(-dev-f89ce21) 177 375 60995 12MB
  • 6. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 6 sqlmap.py (2)
  • 7. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 7 sqlmap.py (3)
  • 8. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 8 sqlmap.org (1)
  • 9. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 9 sqlmap.org (2)
  • 10. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 10 sqlmap.org (3)
  • 11. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 11 sqlmap.org (4)
  • 12. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 12 SourceForge (obsolete)
  • 13. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 13 Mailing list (deprecated)
  • 14. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 14 GitHub (1)
  • 15. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 15 GitHub (2) cuckoobox/cuckoo beefproject/beef andresriancho/w3af sqlmapproject/sqlmap rapid7/metasploit-framework bro/bro sleuthkit/sleuthkit wireshark/wireshark aircrack-ng/aircrack-ng ...
  • 16. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 16 GitHub (3)
  • 17. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 17 GitHub (4)
  • 18. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 18 GitHub (5)
  • 19. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 19 GitHub (6)
  • 20. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 20 GitHub (7)
  • 21. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 21 sqlmapreporter (1)
  • 22. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 22 sqlmapreporter (2)
  • 23. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 23 sqlmapreporter (3)
  • 24. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 24 sqlmapreporter (4)
  • 25. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 25 testenv (1)
  • 26. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 26 testenv (2)
  • 27. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 27 testenv (3)
  • 28. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 28 Benchmark (sectoolmarket.com)
  • 29. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 29 Twitter (1)
  • 30. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 30 Twitter (2)
  • 31. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 31 Twitter (3)
  • 32. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 32 Twitter (4)
  • 33. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 33 Twitter (5)
  • 34. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 34 Donations (PayPal)
  • 35. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 35 ???
  • 36. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 36 Donations (Ƀitcoin)
  • 37. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 37 Dual license (1)
  • 38. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 38 Dual license (2)
  • 39. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 39 sqlmappro (1)
  • 40. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 40 sqlmappro (2)
  • 41. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 41 BOFH (1)
  • 42. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 42 BOFH (2)
  • 43. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 43 BOFH (3)
  • 44. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 44 BOFH (4)
  • 45. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 45 Answer to the title's question Because of the long-lasting enthusiasm of a couple of guys having a large, (very) demanding and quite responsive user-base (and couple of angry trolls) ... ...and they lived happily ever after :)
  • 46. Navaja Negra & ConectaCon, Albacete (Spain) October 02nd, 2015 46 Questions?