Automagic SQL Injector

http://www.astalavista.com/index.php?section=directory&cmd=detail&id=5574
Sec-1の教育で行われているツールっぽい。vanilla ＝標準的 という意味があることを知った。

The Automagic SQL Injector is part of the Sec-1 Exploit Arsenal provided as part of the Applied Hacking & Intrusion Prevention training courses. In a nutshell it's an automated SQL injection tool designed to help save time on pen tests. It is only designed to work with vanilla Microsoft SQL injection holes where errors are returned. The following features are currently supported: * Browse tables and dump table data to a CSV file (2 methods). * Upload files using debug script method. * Automagical UDP reverse shell * Interactive xp_cmdshell (simulated cmd.exe shell)

時勢的に微妙なツールかもしれんな。