Yesterday saw the launch of Sqlmap, an open source vulnerability testing tool that can automatically detect and exploit SQL injection flaws for the takeover of database servers.

Thus far, SQL injection has focused on altering data within the database, rather than attacking the underlying operating system. But researcher Bernardo Damele Assumpcao Guimaraes will be upgrading ...

His solution allows SQLmap 0.8 to parses XML data from the SOAP protocol by modifying three files from the package. He’s made the diff files available if you need this functionality for your own ...