Bsqlbf V2 ? Blind SQL Injection Brute Forcer Tool
This type of blind SQL injection relies on the database pausing for aspecified amount of time, then returning the results, indicatingsuccessful SQL query executing. Using this method, an attackerenumerates each letter of the desired piece of data using the followinglogic:
Bsqlbf V2 – Blind SQL Injection Brute Forcer Tool
2001035 - ET P2P Morpheus Install (p2p.rules) 2001036 - ET P2P Morpheus Install ini Download (p2p.rules) 2001037 - ET P2P Morpheus Update Request (p2p.rules) 2002659 - ET CHAT Yahoo IM Client Install (chat.rules) 2003047 - ET POLICY Proxy Judge Discovery/Evasion (prxjdg.cgi)(policy.rules) 2003060 - ET MALWARE 180solutions (Zango) Spyware Local Stats Post(malware.rules) 2004364 - ET WEB_SPECIFIC_APPS Grayscale Blog SQL Injection Attempt --detail.php id DELETE (web_specific_apps.rules) 2004386 - ET WEB_SPECIFIC_APPS fystyq Duyuru Scripti SQL InjectionAttempt -- goster.asp id UNION SELECT (web_specific_apps.rules) 2004529 - ET WEB_SPECIFIC_APPS AJ Auction SQL Injection Attempt --subcat.php cate_id SELECT (web_specific_apps.rules) 2004530 - ET WEB_SPECIFIC_APPS AJ Auction SQL Injection Attempt --subcat.php cate_id UNION SELECT (web_specific_apps.rules) 2004531 - ET WEB_SPECIFIC_APPS AJ Auction SQL Injection Attempt --subcat.php cate_id INSERT (web_specific_apps.rules) 2004532 - ET WEB_SPECIFIC_APPS AJ Auction SQL Injection Attempt --subcat.php cate_id DELETE (web_specific_apps.rules) 2004533 - ET WEB_SPECIFIC_APPS AJ Auction SQL Injection Attempt --subcat.php cate_id ASCII (web_specific_apps.rules) 2004534 - ET WEB_SPECIFIC_APPS AJ Auction SQL Injection Attempt --subcat.php cate_id UPDATE (web_specific_apps.rules) 2004535 - ET WEB_SPECIFIC_APPS AJDating SQL Injection Attempt --view_profile.php user_id SELECT (web_specific_apps.rules) 2004536 - ET WEB_SPECIFIC_APPS AJDating SQL Injection Attempt --view_profile.php user_id UNION SELECT (web_specific_apps.rules) 2004537 - ET WEB_SPECIFIC_APPS AJDating SQL Injection Attempt --view_profile.php user_id INSERT (web_specific_apps.rules) 2004538 - ET WEB_SPECIFIC_APPS AJDating SQL Injection Attempt --view_profile.php user_id DELETE (web_specific_apps.rules) 2004539 - ET WEB_SPECIFIC_APPS AJDating SQL Injection Attempt --view_profile.php user_id ASCII (web_specific_apps.rules) 2004540 - ET WEB_SPECIFIC_APPS AJDating SQL Injection Attempt --view_profile.php user_id UPDATE (web_specific_apps.rules) 2004541 - ET WEB_SPECIFIC_APPS AJ Classifieds SQL Injection Attempt --postingdetails.php postingid SELECT (web_specific_apps.rules) 2004546 - ET WEB_SPECIFIC_APPS AJ Classifieds SQL Injection Attempt --postingdetails.php postingid UPDATE (web_specific_apps.rules) 2006375 - ET P2P Bittorrent P2P Client HTTP Request (p2p.rules) 2006443 - ET WEB_SERVER Possible SQL Injection Attempt DELETE FROM(web_server.rules) 2006444 - ET WEB_SERVER Possible SQL Injection Attempt INSERT INTO(web_server.rules) 2006447 - ET WEB_SERVER Possible SQL Injection Attempt UPDATE SET(web_server.rules) 2007727 - ET P2P possible torrent download (p2p.rules) 2008070 - ET POLICY Windows 98 User-Agent Detected - Possible Malware orNon-Updated System (Win98) (policy.rules) 2008175 - ET WEB_SERVER Possible SQL Injection (varchar)(web_server.rules) 2008176 - ET WEB_SERVER Possible SQL Injection (exec) (web_server.rules) 2008184 - ET USER_AGENTS Suspicious User-Agent (Installer)(user_agents.rules) 2008362 - ET SCAN bsqlbf Brute Force SQL Injection (scan.rules) 2008467 - ET WEB_SERVER Possible SQL Injection Attempt Danmec related(declare) (web_server.rules) 2008571 - ET SCAN Acunetix Version 6 Crawl/Scan Detected (scan.rules) 2008617 - ET SCAN Wikto Scan (scan.rules) 2008627 - ET SCAN Httprecon Web Server Fingerprint Scan (scan.rules) 2008629 - ET SCAN Wikto Backend Data Miner Scan (scan.rules) 2008639 - ET TROJAN Tibs Trojan Downloader (trojan.rules) 2008822 - ET WEB_SPECIFIC_APPS Joomla Pro Desk Component include_fileLocal File Inclusion (web_specific_apps.rules) 2008831 - ET WEB_SPECIFIC_APPS DevelopItEasy Photo Gallery photo_idparameter SQL Injection (web_specific_apps.rules) 2009028 - ET TROJAN 404 Response with an EXE Attached - Likely MalwareDrop (trojan.rules) 2009152 - ET WEB_SERVER PHP Generic Remote File Include Attempt (HTTPS)(web_server.rules) 2009153 - ET WEB_SERVER PHP Generic Remote File Include Attempt (FTP)(web_server.rules) 2009155 - ET WEB_SERVER PHP Generic Remote File Include Attempt (FTPS)(web_server.rules) 2009158 - ET SCAN WebShag Web Application Scan Detected (scan.rules) 2009361 - ET WEB_SERVER cmd.exe In URI - Possible Command ExecutionAttempt (web_server.rules) 2009479 - ET SCAN Asp-Audit Web Scan Detected (scan.rules) 2009512 - ET USER_AGENTS Suspicious User-Agent (Session) - PossibleTrojan-Clicker (user_agents.rules) 2009715 - ET WEB_SERVER Onmouseover= in URI - Likely Cross Site ScriptingAttempt (web_server.rules) 2009815 - ET WEB_SERVER Attempt To Access MSSQL xp_cmdshell StoredProcedure Via URI (web_server.rules) 2009816 - ET WEB_SERVER Attempt To Access MSSQL xp_servicecontrol StoredProcedure Via URI (web_server.rules) 2009817 - ET WEB_SERVER Attempt To Access MSSQL sp_adduser StoredProcedure Via URI to Create New Database User (web_server.rules) 2009818 - ET WEB_SERVER Attempt To Access MSSQLxp_regread/xp_regwrite/xp_regdeletevalue/xp_regdeletekey Stored ProcedureVia URI to Modify Registry (web_server.rules) 2009819 - ET WEB_SERVER Attempt To Access MSSQL xp_fileexist StoredProcedure Via URI to Locate Files On Disk (web_server.rules) 2009820 - ET WEB_SERVER Attempt To Access MSSQL xp_enumerrorlogs StoredProcedure Via URI to View Error Logs (web_server.rules) 2009822 - ET WEB_SERVER Attempt To Access MSSQL xp_readerrorlogs StoredProcedure Via URI to View Error Logs (web_server.rules) 2009823 - ET WEB_SERVER Attempt To Access MSSQLxp_enumdsn/xp_enumgroups/xp_ntsec_enumdomains Stored Procedure Via URI(web_server.rules) 2009949 - ET WEB_SERVER Tilde in URI - potential .pl source disclosurevulnerability (web_server.rules) 2009950 - ET WEB_SERVER Tilde in URI - potential .inc source disclosurevulnerability (web_server.rules) 2009951 - ET WEB_SERVER Tilde in URI - potential .conf source disclosurevulnerability (web_server.rules) 2009952 - ET WEB_SERVER Tilde in URI - potential .asp source disclosurevulnerability (web_server.rules) 2009953 - ET WEB_SERVER Tilde in URI - potential .aspx source disclosurevulnerability (web_server.rules) 2009955 - ET WEB_SERVER Tilde in URI - potential .php source disclosurevulnerability (web_server.rules) 2009978 - ET WEB_SPECIFIC_APPS CMScontrol 7.x (index.php id_menu) SQLInjection Vulnerability (web_specific_apps.rules) 2009980 - ET WEB_SPECIFIC_APPS CMScontrol 7.x (index.php id_menu) SQLInjection Vulnerability (web_specific_apps.rules) 2010077 - ET WEB_SPECIFIC_APPS Possible Docebo INSERT INTO InjectionAttempt (web_specific_apps.rules) 2010078 - ET WEB_SPECIFIC_APPS Possible Docebo UPDATE SET SQL InjectionAttempt (web_specific_apps.rules) 2010080 - ET WEB_SPECIFIC_APPS Possible AIOCP cp_html2xhtmlbasic.phpRemote File Inclusion Attempt (web_specific_apps.rules) 2010084 - ET WEB_SERVER Possible ALTER SQL Injection Attempt(web_server.rules) 2010085 - ET WEB_SERVER Possible DROP SQL Injection Attempt(web_server.rules) 2010086 - ET WEB_SERVER Possible CREATE SQL Injection Attempt in URI(web_server.rules) 2010159 - ET WEB_SERVER Possible 3Com OfficeConnect Router Default UserAccount Remote Command Execution Attempt (web_server.rules) 2010284 - ET WEB_SERVER SELECT INSTR in URI Possible ORACLE Related BlindSQL Injection Attempt (web_server.rules) 2010285 - ET WEB_SERVER SELECT SUBSTR/ING in URI Possible Blind SQLInjection Attempt (web_server.rules) 2010460 - ET WEB_SERVER Cisco BBSM Captive Portal AccesCodeStart.aspCross-Site Scripting Attempt (web_server.rules) 2010462 - ET WEB_SERVER Possible Barracuda IM Firewall smtp_test.cgiCross-Site Scripting Attempt (web_server.rules) 2010520 - ET WEB_CLIENT Possible HTTP 405 XSS Attempt (External Source)(web_client.rules) 2010593 - ET WEB_SERVER Possible Microsoft Internet Information Services(IIS) .aspx Filename Extension Parsing File Upload Security Bypass Attempt(aspx) (web_server.rules) 2010820 - ET WEB_SERVER Tilde in URI - potential .cgi source disclosurevulnerability (web_server.rules) 2010919 - ET WEB_SERVER HP LaserJet Printer Cross Site Scripting Attempt(web_server.rules) 2010953 - ET SCAN Skipfish Web Application Scan Detected (scan.rules) 2010965 - ET WEB_SERVER SHOW VARIABLES SQL Injection Attempt in URI(web_server.rules) 2010966 - ET WEB_SERVER SHOW CURDATE/CURTIME SQL Injection Attempt in URI(web_server.rules) 2010967 - ET WEB_SERVER SHOW TABLES SQL Injection Attempt in URI(web_server.rules) 2011028 - ET SCAN HZZP Scan in Progress calc in Headers (scan.rules) 2011029 - ET SCAN Netsparker Default User-Agent (scan.rules) 2011030 - ET SCAN Netsparker Scan in Progress (scan.rules) 2011039 - ET WEB_SERVER Possible INSERT VALUES SQL Injection Attempt(web_server.rules) 2011041 - ET WEB_SERVER MYSQL Benchmark Command in URI to Consume ServerResources (web_server.rules) 2011042 - ET WEB_SERVER MYSQL SELECT CONCAT SQL Injection Attempt(web_server.rules) 2011073 - ET WEB_SERVER Microsoft SharePoint Server 2007_layouts/help.aspx Cross Site Scripting Attempt (web_server.rules) 2011122 - ET WEB_SERVER Possible SQL injection obfuscated via REVERSEfunction (web_server.rules) 2011142 - ET WEB_SERVER PHP Easteregg Information-Disclosure (php-logo)(web_server.rules) 2011143 - ET WEB_SERVER PHP Easteregg Information-Disclosure (zend-logo)(web_server.rules) 2011144 - ET WEB_SERVER PHP Easteregg Information-Disclosure (funny-logo)(web_server.rules) 2011145 - ET WEB_SERVER 3Com Intelligent Management Center Cross SiteScripting Attempt (web_server.rules) 2011161 - ET WEB_SPECIFIC_APPS HotNews hnmain.inc.php3 incdir ParameterRemote File Inclusion Attempt (web_specific_apps.rules) 2011290 - ET WEB_SERVER Gootkit Website Infection Request for FTPCredentials from Control Server (web_server.rules) 2011338 - ET TROJAN Sality Variant Downloader Activity (3) (trojan.rules) 2011360 - ET WEB_SERVER ColdFusion Path Traversal (locale 3/5)(web_server.rules) 2011456 - ET WEB_CLIENT PROPFIND Flowbit Set (web_client.rules) 2011694 - ET POLICY Windows 3.1 User-Agent Detected - Possible Malware orNon-Updated System (policy.rules) 2011705 - ET P2P Bittorrent P2P Client User-Agent (rTorrent) (p2p.rules) 2011712 - ET P2P Bittorrent P2P Client User-Agent (FDM 3.x) (p2p.rules) 2011763 - ET WEB_SERVER Possible Cisco PIX/ASA HTTP Web Interface HTTPResponse Splitting Attempt (web_server.rules) 2011806 - ET WEB_SERVER ScriptResource.axd access without t (time)parameter - possible ASP padding-oracle exploit (web_server.rules) 2012160 - ET WEB_SPECIFIC_APPS Informacion Generalinformacion_general.php DELETE FROM SQL Injection Attempt(web_specific_apps.rules) 2012171 - ET INFO DYNAMIC_DNS Query to 3322.org Domain (info.rules) 2012219 - ET WEB_SPECIFIC_APPS BetMore Site Suite mainx_a.php bidParameter Blind SQL Injection Attempt (web_specific_apps.rules) 2012247 - ET P2P BTWebClient UA uTorrent in use (p2p.rules) 2012325 - ET WEB_CLIENT Obfuscated Javascript // ptth (web_client.rules) 2012359 - ET WEB_SPECIFIC_APPS T-Content Management System id_novedadParameter SELECT FROM SQL Injection Attempt (web_specific_apps.rules) 2012360 - ET WEB_SPECIFIC_APPS T-Content Management System id_novedadParameter DELETE FROM SQL Injection Attempt (web_specific_apps.rules) 2012361 - ET WEB_SPECIFIC_APPS T-Content Management System id_novedadParameter UNION SELECT SQL Injection Attempt (web_specific_apps.rules) 2012362 - ET WEB_SPECIFIC_APPS T-Content Management System id_novedadParameter INSERT INTO SQL Injection Attempt (web_specific_apps.rules) 2012363 - ET WEB_SPECIFIC_APPS T-Content Management System id_novedadParameter UPDATE SET SQL Injection Attempt (web_specific_apps.rules) 2012364 - ET WEB_SPECIFIC_APPS Bexfront sid Parameter SELECT FROM SQLInjection Attempt (web_specific_apps.rules) 2012365 - ET WEB_SPECIFIC_APPS Bexfront sid Parameter DELETE FROM SQLInjection Attempt (web_specific_apps.rules) 2012366 - ET WEB_SPECIFIC_APPS Bexfront sid Parameter UNION SELECT SQLInjection Attempt (web_specific_apps.rules) 2012367 - ET WEB_SPECIFIC_APPS Bexfront sid Parameter INSERT INTO SQLInjection Attempt (web_specific_apps.rules) 2012368 - ET WEB_SPECIFIC_APPS Bexfront sid Parameter UPDATE SET SQLInjection Attempt (web_specific_apps.rules) 2012369 - ET WEB_SPECIFIC_APPS Joomla swMenuPro ImageManager.php RemoteFile Inclusion Attempt (web_specific_apps.rules) 2012370 - ET WEB_SPECIFIC_APPS Boonex Dolphin explain Parameter CrossSite Scripting Attempt (web_specific_apps.rules) 2012371 - ET WEB_SPECIFIC_APPS Boonex Dolphin relocate Parameter CrossSite Scripting Attempt (web_specific_apps.rules) 2012372 - ET WEB_SPECIFIC_APPS ColdUserGroup LibraryID Parameter BlindSQL Injection Attempt (web_specific_apps.rules) 2012373 - ET WEB_SPECIFIC_APPS Horde type Parameter Local File InclusionAttempt (web_specific_apps.rules) 2012374 - ET WEB_SPECIFIC_APPS Woltlab Burning Board katid ParameterSELECT FROM SQL Injection Attempt (web_specific_apps.rules) 2012375 - ET WEB_SPECIFIC_APPS Woltlab Burning Board katid ParameterDELETE FROM SQL Injection Attempt (web_specific_apps.rules) 2012376 - ET WEB_SPECIFIC_APPS Woltlab Burning Board katid ParameterUNION SELECT SQL Injection Attempt (web_specific_apps.rules) 2012377 - ET WEB_SPECIFIC_APPS Woltlab Burning Board katid ParameterINSERT INTO SQL Injection Attempt (web_specific_apps.rules) 2012378 - ET WEB_SPECIFIC_APPS Woltlab Burning Board katid ParameterUPDATE SET SQL Injection Attempt (web_specific_apps.rules) 2012379 - ET WEB_SPECIFIC_APPS TelebidAuctionScript aid Parameter BlindSQL Injection Attempt (web_specific_apps.rules) 2012380 - ET WEB_SPECIFIC_APPS Podcast Generator themes.php Cross SiteScripting Attempt (web_specific_apps.rules) 2012381 - ET WEB_SPECIFIC_APPS ITechBids productid Parameter Blind SQLInjection Attempt (web_specific_apps.rules) 2012390 - ET P2P Libtorrent User-Agent (p2p.rules) 2012393 - ET WEB_SPECIFIC_APPS Awstats Apache Tomcat Configuration FileRemote Arbitrary Command Execution Attempt (web_specific_apps.rules) 2012394 - ET WEB_SPECIFIC_APPS IBM Lotus Sametime Server stconf.nsf CrossSite Scripting Attempt (web_specific_apps.rules) 2012395 - ET WEB_SPECIFIC_APPS IBM Lotus Sametime Server stconf.nsf CrossSite Scripting Attempt (web_specific_apps.rules) 2012406 - ET WEB_SPECIFIC_APPS Potential Cewolf DOS attempt(web_specific_apps.rules) 2012411 - ET WEB_SPECIFIC_APPS IWantOneButton Wordpress updateAJAX.phppost_id Parameter Cross Site Scripting Attempt (web_specific_apps.rules) 2012412 - ET WEB_SPECIFIC_APPS IWantOneButton Wordpress SQL InjectionAttempt updateAJAX.php post_id SELECT (web_specific_apps.rules) 2012413 - ET WEB_SPECIFIC_APPS IWantOneButton Wordpress SQL InjectionAttempt updateAJAX.php post_id UNION SELECT (web_specific_apps.rules) 2012414 - ET WEB_SPECIFIC_APPS IWantOneButton Wordpress SQL InjectionAttempt updateAJAX.php post_id INSERT (web_specific_apps.rules) 2012415 - ET WEB_SPECIFIC_APPS IWantOneButton Wordpress SQL InjectionAttempt updateAJAX.php post_id DELETE (web_specific_apps.rules) 2012416 - ET WEB_SPECIFIC_APPS IWantOneButton Wordpress SQL InjectionAttempt updateAJAX.php post_id ASCII (web_specific_apps.rules) 2012417 - ET WEB_SPECIFIC_APPS IWantOneButton Wordpress SQL InjectionAttempt updateAJAX.php post_id UPDATE (web_specific_apps.rules) 2012418 - ET WEB_SPECIFIC_APPS PhreeBooks js_include.php form ParameterCross Site Scripting Attempt 1 (web_specific_apps.rules) 2012419 - ET WEB_SPECIFIC_APPS PhreeBooks js_include.php form ParameterCross Site Scripting Attempt 2 (web_specific_apps.rules) 2012707 - ET TROJAN Suspicious double Server Header (trojan.rules) 2012730 - ET TROJAN Known Hostile Domain ilo.brenz .pl Lookup(trojan.rules) 2012760 - ET WEB_SPECIFIC_APPS Cisco Unified Communications Managerxmldirectorylist.jsp SQL Injection Attempt (web_specific_apps.rules) 2013224 - ET POLICY Suspicious User-Agent Containing .exe (policy.rules) 2013339 - ET TROJAN Win32.FakeAV.Rean Checkin (trojan.rules) 2013435 - ET TROJAN Win32.Shiz.fxm/Agent-TBT Checkin (trojan.rules) 2013438 - ET INFO HTTP Request to a *.uni.cc domain (info.rules) 2013684 - ET INFO HTTP Request to a *.dtdns.net domain (info.rules) 2014169 - ET DNS Query for .su TLD (Soviet Union) Often Malware Related(dns.rules) 2014232 - ET TROJAN UPDATE Protocol Trojan Communication detected on httpports 2 (trojan.rules) 2014492 - ET INFO DYNAMIC_DNS Query to a *.dtdns.net Domain (info.rules) 2014493 - ET INFO DYNAMIC_DNS HTTP Request to a *.dtdns.net Domain(info.rules) 2014500 - ET INFO DYNAMIC_DNS Query to a *.flnet.org Domain (info.rules) 2014788 - ET INFO DYNAMIC_DNS HTTP Request to a 3322.net Domain *.3322.net(info.rules) 2014846 - ET CURRENT_EVENTS Wordpress timthumb look-alike domain list RFI(current_events.rules) 2015800 - ET TROJAN Dorkbot GeoIP Lookup to wipmania (trojan.rules) 2016141 - ET INFO Executable Download from dotted-quad Host (info.rules) 2016275 - ET TROJAN Win32/Xtrat.A Checkin (trojan.rules) 2016777 - ET INFO HTTP Request to a *.pw domain (info.rules) 2016947 - ET TROJAN Win32.Bicololo Response 1 (trojan.rules) 2017515 - ET INFO User-Agent (python-requests) Inbound to Webserver(info.rules) 2017598 - ET TROJAN Possible Kelihos.F EXE Download Common Structure(trojan.rules) 2017603 - ET CURRENT_EVENTS Magnitude EK (formerly Popads) Java Exploit32-32 byte hex java payload request Oct 16 2013 (current_events.rules) 2018008 - ET TROJAN DNS Query Possible Zbot Infection Query fornetworksecurityx.hopto.org (trojan.rules) 2018044 - ET CURRENT_EVENTS Possible Successful Verified by Visa PhishJan 30 2014 (current_events.rules) 2018141 - ET TROJAN Possible Compromised Host AnubisNetworks SinkholeCookie Value Snkz (trojan.rules) 2018191 - ET CURRENT_EVENTS SUSPICIOUS .exe Downloaded from SVN/HTTP onGoogleCode (current_events.rules) 2018242 - ET TROJAN Possible Zeus GameOver Connectivity Check(trojan.rules) 2018430 - ET WEB_CLIENT SUSPICIOUS Possible automated connectivity check (www.google.co