Now open SQLmap from the path as shown below. This is a clear sign that the webpage is vulnerable to SQL injection. after the number as shown below.Ĭlick on “Enter” and the page will show an error as shown below. Now introduce a single quote( ‘ ) character in the URL.
Now if you have observed, the “id” parameter in the URL changes as we click on different users. Similarly go back and click on “Founder 2” and “Founder 3”. It will show brief details about him as shown below. It shows about the founders of Vulnerawa.Ĭlick on “founder 1”. You should see the Vulnerawa web page as shown below. Open the browser in Kali linux and type the address as shown below.( the ip address may differ for you ). For this tutorial I am using Vulnerawa as target and it is necessary to setup a webapp pentest lab with it. Sqlmap is an “open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers “. Today we will see how to perform SQL injection with sqlmap.
0 kommentar(er)
