)
Settings
Log out
We have already seen sql injection attacks done manually in the browser side. There we may have very limited data to be exposed. But if we use a automated tool like SQLMap or Havij we can find more data or more databases based on the security provided by the developer.
In this session we are using SqlMap a tool for sql injection from Kali linux. Once we find the vulnerable link, we need to paste the link in the tool and it will do the rest.
Scanning option
Scanning by using tor
Scanning by manually setting the return time
List all databases at the site
List all tables in a specific database
Dump the contents of a DB table
List all columns in a table
Dump only selected columns
Dump a table from a database when you have admin credentials
Get OS Shell
Get SQL Shell