Quick Links

Mobile Security Industry News

[December 08, 2011]

NT OBJECTives Releases Free SQL Invader Tool

(PR Web Via Acquire Media NewsEdge) Irvine, CA (PRWEB) December 08, 2011 NT OBJECTives, a provider of automated, comprehensive and accurate Web Application security software, services and SaaS, today announced the availability of NTO SQL Invader, a free tool which provides pen testers and developers the ability to quickly and easily exploit and demonstrate SQL Injection vulnerabilities in Web applications.

Most organizations understand that SQL Injection vulnerabilities put their sensitive data at risk and it has been the dominant method used in this year’s high-profile web application attacks; with millions of sites attacked in 2011.

Despite the fact that SQL Injection is well documented and there are tools to discover the vulnerabilities, it has been very difficult to determine if the vulnerability can actually be exploited because most existing SQL Injection testing tools are executed from a command line, lack an intuitive user interface or are no longer supported. Without the ability to clearly demonstrate the exploitability of a vulnerability, remediation efforts are often delayed and friction between security and development teams surfaces. NTO SQL Invader allows pen testers and developers to quickly and easily leverage a vulnerability to view the list of records, tables and user accounts on the back-end database.

With a few simple clicks in NTO SQL Invader, a user can exploit a web application vulnerability that was discovered manually or from a Dynamic Application Security Testing (DAST) tool like NTOSpider. NTO SQL Invader works as a stand-alone tool and also includes integration with NTOSpider’s reporting technology to assist pen testers and developers in quickly identifying and validating discovered vulnerabilities. While reviewing and confirming results from NTOSpider, users can leverage NTO SQL Invader to provide a polished, real-world proof-of-concept for the discovered SQL Injection vulnerabilities.

"Accurate vulnerability identification is a crucial and challenging task but it is only half the battle,” says Dan Kuykendall, co-CEO and Chief Technology Officer of NT OBJECTives. “We wanted to support organizations in their analysis and remediation efforts by providing an easy to use tool that enables penetration testers to demonstrate how these vulnerabilities can be exploited. We felt it was important to provide a free and useful tool to our customers and to the entire community.” Product Benefits Overview: Ease of use and validation – NTO SQL Invader’s GUI interface enables users to simply paste the injectable request found by the DAST tool into NTO SQL Invader and then select “Start Detecting Injection” to identify the injectable parameter/input. Users can also feed a more detailed request straight into NTO SQL Invader from NTOSpider’s report or BurpSuite. Once the injection is identified, the user is in control of how much information is harvested, all from the simple to use GUI interface.

Clear Presentation Evidence – NTO SQL Invader provides the evidence required to demonstrate that the vulnerability truly exists in a polished method that can be leveraged in both executive meetings and remediation discussions. NTO SQL Invader users execute are able to clearly shows the acquisition of data from the back-end database in a way that makes it easy for both technical and business viewers to understand. Sometimes it just takes a compelling screenshot or video to silence the skeptics on the validity of a vulnerability. While the command line tools are effective, they do not present polished, organized or clear information in a presentation setting.

Transportable logging data – All of the data harvested from NTO SQL Invader can be saved into a CSV file so the reports can be included as penetration evidence as part of a presentation or POC.

About NT OBJECTives NT OBJECTives, Inc brings together an innovative collection of experts in information security to provide a comprehensive suite of technologies and services to solve today’s toughest application security challenges. NTO solutions are well-known as the most comprehensive and accurate Web Application security solutions available. NT OBJECTIVES is privately held with headquarters in Irvine, CA. For more information on NTO SQL Invader or to view the product video visit http://whttp://www.ntobjectives.com/sqlinvader ### Read the full story at http://www.prweb.com/releases/ntobjectives/SQLInjection/prweb9023695.htm (c) 2011 PRWEB.COM Newswire

[ Back To Mobile Security Homepage's Homepage ]

Request a Demo

Weekly Demonstration: SAP Mobile Secure
Solution including SAP Afaria Cloud

Free 30-day Trial

Best MDM in the cloud. Best MDM
Analytics. Best MDM price.

Featured Whitepapers

What Is Your Mobile Content Policy? A Checklist for Content Risk Mitigation
We are living in a world that only 20 years ago was the realm of science fiction. Devices once just barely imaginable have become common consumer items, carried casually in pockets and purses, with constantly growing capabilities.

SAP Enterprise Mobility: Bringing a Cohesive Approach to a Complex Market
Mobility and consumerization are creating complexity in the enterprise, but embracing the change can lead to more productive mobile workers as well as better communications with employees, partners, customers, and consumers. The trends in the enterprise mobility landscape drive a need for technology solutions to emerge.

View All

Featured Datasheets

Securing Enterprise Mobility for Greater Competitive Advantage
We are living in a world that only 20 years ago was the realm of science fiction. Devices once just barely imaginable have become common consumer items, carried casually in pockets and purses, with constantly growing capabilities.

Secure Mobile Content Management for the Enterprise
Every day employees move business files onto their mobile devices so they can work at home, on the road, or at client sites. The mobile workforce is a reality, as 80% of employees say they need to access work documents from outside the office.1 Instead of insecure, consumer-based tools, enterprises need a safe, reliable platform for managing content on mobile devices.

View All

Featured Webinar

Mobile Drives Field Service Productivity at Satellites Unlimited
Field service has never been more competitive or faster changing than it is today. Going mobile is a must to stay ahead of the competition, provide improved services, and keep up with ever-increasing customer expectations.

View All

Featured Webcast

End to End Mobility Requirements: IDC and SAP explore the 3rd Platform
A new IDC study states that we're in the midst of a shift that takes place once every 20 - 25 years - introducing a new technology platform that will inspire growth and innovation for enterprises of all sizes. IDC calls it the 3rd Platform - built on mobile devices and apps, cloud services, mobile broadband networks, "Big Data", analytics, and social technologies.

View All

Featured On-Demand Webinar

Analyst Webcast: Secure Content Management in a Mobile Age
Securing and managing content is taking on new importance as organizations try to cope with the explosion of business-oriented file sharing services while at the same time taking advantage of the proliferation of "smart" mobile devices.

View All