sqlninja 0.2.2 released!

Brand new version of sqlninja !

Sqlninja is a tool targeted to exploit SQL Injection vulnerabilities on a web application that uses Microsoft SQL Server as its back-end.
Its main goal is to provide a remote shell on the vulnerable DB server, even in a very hostile environment. It should be used by penetration testers to help and automate the process of taking over a DB Server when a SQL Injection vulnerability has been discovered.
It is released under the GPLv2 , and it has been featured on SecurityHack's Top 15 Free SQL Injection Scanners and on Hacking Exposed, which is a good result for something that started as a small script written on-the-fly during a pen-test :)

This new release features four evasion techniques aimed to confuse and bypass a lot of signature-based IPS/WAF.
There is also a new 'blind command' attack mode, and a more sophisticated upload mode.

Happy hacking !