SQLMap will become in handy when you already discovery vulnerability on the database. Using SQLMap, we can automated the process and simply dumping the database will get much more easier compare with manual technique.
Here I already setup a vulnerable box on my VMware and SQLMap install on your machine. You can download it here.
Note: For Windows machine you'll need to install python version 2.6 or 2.7 only else it might not work. For your convenience just use Kali Linux.
Here I already setup a vulnerable box on my VMware and SQLMap install on your machine. You can download it here.
Note: For Windows machine you'll need to install python version 2.6 or 2.7 only else it might not work. For your convenience just use Kali Linux.
 |
| What we can do here is analyze every URL and search for vulnerable parameter. |
 |
| We got SQL Error |
 |
| Send the vulnerable parameter to SQLMap using argument --banner --current-user --current-db --is-dba Tips: Use -help or -hh for more information about the SQLMap argument |
 |
| And the parameter is injectable! |
 |
| Dump the password hashes with --users & --passwords arguments |
 |
| You can either use dictionary attack with SQLMap or password cracker tool John the ripper |
 |
| Using John the ripper to crack the password hashes |
 |
| Test the cracked password with username: phpmyadmin password::toor |
 |
| Success login to phpmyadmin |
Comments
Post a Comment