Reviewing Kali Linux – the distro for security geeks
Kali linux is a security oriented linux distribution aimed at digital forensics and penetration testing users. It is the successor of backtrack linux.
Tag Archives: sqlmap
Use sqlmap with tor proxy
When trying to exploit some website using sqlmap, its a good idea to be anonymous. Sqlmap has excellent support for using common proxies or tor. First start tor and ensure that it is running the socks5 daemon on port 9050. Then use the socks5 proxy with sqlmap as follows # ./sqlmap.py –tor –tor-type=SOCKS5 -u "http://www.hackable.org/view_section.php?id=10"… Read More »
How to Install and run Sqlmap on Windows
Sqlmap is the most popular tool for automated exploitation of sql injection vulnerability and database takeover. Its written in python is cross platform. If you are using Backtrack then sqlmap comes pre packaged in it. In this post I am going to show you the simple process to setup and run sqlmap on windows. 1…. Read More »
How to Hack Remote Database with Sqlmap
Sqlmap In the previous post on we learnt how to use sqlmap to hack a vulnerable web application and fetch the list of databases, tables, columns and data rows. In this post we shall see how to do some simple fingerprinting on the remote database to find valuable information that can be used to assist… Read More »
Using sqlmap with login forms
In a previous article we saw how to use sqlmap to exploit vulnerable urls of the form http://www.site.com/section.php?id=59 where the id parameter for example is vulnerable to sql injection. Now we shall try to do the same thing with forms, especially login forms. Forms often submit data via post, so the sytanx for launching the… Read More »
Sqlmap tutorial for beginners – hacking with sql injection
Sqlmap is the most popular tool for carrying out automated sql injections against vulnerable systems. In this tutorial we are going to learn to use it.