jSQL Injection v0.95 releases: Java application for automatic SQL database injection

by do son · Published July 4, 2017 · Updated November 4, 2024

jSQL Injection

jSQL Injection is a lightweight application used to find database information from a distant server. It is free, open-source, and cross-platform (Windows, Linux, Mac OS X).

It is also part of the official penetration testing distribution Kali Linux and is included in other distributions like Pentest Box, Parrot Security OS, ArchStrike, or BlackArch Linux.

This software is developed using great open-source libraries like Spring, Spock, and Hibernate, and it uses the platform Travis CI for continuous integration.

Each program update is tested with Java version 8 through 13 in the cloud, against various MySQL, PostgreSQL, and H2 databases. Source code is open to pull requests and to any contribution on multi-threading, devops, unit and integration tests, and optimization.

Features

Automatic injection of 23 kinds of databases: Access, CockroachDB, CUBRID, DB2, Derby, Firebird, H2, Hana, HSQLDB, Informix, Ingres, MaxDB, Mckoi, MySQL{MariaDb}, Neo4j, NuoDB, Oracle, PostgreSQL, SQLite, SQL Server, Sybase, Teradata and Vertica
Multiple injection strategies: Normal, Error, Blind and Time
SQL Engine to study and optimize SQL expressions
Injection of multiple targets
Search for administration pages
Creation and visualization of Web shell and SQL shell
Read and write files on the host using injection
Bruteforce of password’s hash
Code and decode a string

Changelog v0.95

Improve prefix and query size
Star param * now checks for insertion char
Check for multiple star params *
Keep console tabs colored until clicked
Remove stacktrace from error messages
Add Postgres Error strategy Cast:stacked
Add Postgres query for reading file
Add Postgres system filenames to File list
Add SQL Server Stacked strategy
Improve DB2 Error strategy detection
Improve DB2 queries reliability

Installation

Install Java 8, then download the latest release of jSQL Injection and double-click on the file to launch the software.
You can also type java -jar jsql-injection-v0.81.jar in your terminal to start the program.
If you are using Kali Linux then get the latest release using commands apt update then apt full-upgrade