Katyusha Scanner — Telegram-Based Fully Automated Sql Injection Tool

Influenza A virus subtype H5N1 novel powerful hacking tool of late introduced inward an undercover forum is making rounds these days, allowing anyone to chop-chop deport website scans for SQL injection flaws on a massive scale — all controlled from a smartphone using the Telegram messaging application.

Dubbed Katyusha Scanner, the fully automated powerful SQLi vulnerability scanner was source surfaced inward Apr this twelvemonth when a Russian-speaking private published it on a pop hacking forum.

Researchers at Recorded Future's Insikt Group threat word partition found this tool for sale on an undercover hacking forum for but $500. Users tin fifty-fifty rent the Katyusha Scanner tool for $200.

According to the researchers, Katyusha Scanner is a web-based tool that's a combination of Arachni Scanner and a basic SQL Injection exploitation tool that allows users to automatically position SQLi vulnerable sites as well as thus exploits it to create got over its databases.

Arachni is an opened upwards source vulnerability scanning tool aimed towards helping users evaluate the safety of their spider web applications.

What makes this tool stand upwards out of draw is its 'Infrastructure-as-a-Service' model.

Remotely Control Hacking Tool Via Telegram

Katyusha Scanner is abusing the Telegram messaging application to command its operations, such equally sending as well as receiving commands.

The Katyusha Scanner tool is quite slowly to setup as well as use, allowing anyone to deport large-scale penetration attacks against a large issue of targeted websites simultaneously alongside the mere utilization of their smartphones.

The Pro version of the tool non but identifies vulnerable websites, but also allows hackers to industrial plant life a "strong foothold inside vulnerable spider web servers" as well as automatically extract "privileged information such equally login credentials."

Once the scan is complete, Katyusha Scanner sends a text message to the criminals alongside the vulnerable site name, its Alexa spider web ratings, helping criminals position pop websites that would probable last to a greater extent than profitable for them to attack, as well as the issue of databases.

The criminals, fifty-fifty alongside no technical knowledge, tin download whatsoever exfiltrated information available past times but clicking on their smartphones to effect commands.

Katyusha Scanner also allows for the automatic dumping of databases as well as tin last used on both Linux equally good equally Windows machines.

"The availability of a highly robust as well as cheap tool...Katyusha Scanner to online criminals alongside express technical skills volition exclusively intensify the compromised information occupation experienced past times diverse businesses, highlighting the importance of regular infrastructure safety audits," researchers at Recorded Future wrote.

Many buyers praised the character of the tool on the dark marketplace site, ane of the satisfied customers who got immediate success inward obtaining access to viii spider web servers wrote:

"Excellent support! The seller has configured the software for my server, which was failing before, however, correct at nowadays it flies divinely! I highly recommend the software, as well as it has found viii SQL vulnerabilities inward one-half a day, groovy automation of the routine. Very grateful to the seller."

Another wrote: "The writer has helped alongside the production setup afterwards the purchase, as well as (Katyusha) has directly found SQL vulnerability. Thank yous for the groovy product."

Initially, Katyusha Scanner was sold for $500, but due to unexpectedly high demand, a lite version of the tool alongside slightly express functionality was released on May 10, 2017, at but $250.

With the unloose of the approximately recent Katyusha 0.8 Pro update at the goal of June, the writer also made the scanner available for rent at $200 per calendar month for the source time.

Share This :