Pangolin is an automatic SQL injection penetration testing (Pen-testing) tool for Website manager or IT Security analyst. Its goal is to detect and take advantage of SQL injection vulnerabilities on web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or users specific DBMS tables/columns, run his own SQL statement, read specific files on the file system and more.

Test many types of databases
Your web applications using Access,DB2,Informix,Microsoft SQL Server 2000,Microsoft SQL Server 2005,Microsoft SQL Server 2008,MySQL,Oracle,PostgreSQL,Sqlite3,Sybase?
Pangolin supports all of them.

Features: Auto-analyzing keyword, HTTPS support, Pre-Login, Bypass firewall setting, Injection Digger, Data dumper, etc.

Keywords: Pangolin, NOSEC, SQL Injection, Pen-testing,

Recent Changes: 1. Speed up in fast mode when MySQL database later than 4.x.
2. Speed up when dump Microsoft SQL Server 2005/2008 database.
3. Enhance the injection ability of Informix database.
4. Add feature to manual keywords selection.
More please access www.nosec-inc.com

Install Support: No Install Support

Supported Languages: English, ChineseSimplified, ChineseTraditional, Korean

Additional Requirements: Intel 800MHZ or AMD K7,Memory 128M