I'm attempting to check for malware, spam and any kind of injection/exploitation on a sql dump that has been provided and was wondering what kind of tools are there already in place to help with this?
As suggested by an admin I should expand this question out to include the scenario I'm facing. Well it basically comes down to a customer sends me a sql dump of their database to import and before proceeding I wish to be able to verify that there is no SQLi or user injection in the SQL and not datasets.
Update: Sometimes I wonder about areas of the InfoSec community's decision not to take things like this serious. However that stated, I did locate some resources that come close but not enough:
- Are there any tools for scanning for SQL injection vulnerabilities while logged in?
Since none of these work for this goal I will be authoring and releasing the code to the public on my github page. I'll post further details here and at http://dwightaspencer.com/ once I have a public beta ready.