Posts

Showing posts with the label sqlmap

SQLmap installation

Image
SQLmap installation Pranaam to all bhai ji _/_ Today we will learn how to use SQLmap in such linux system where it doesnt installed already penetration testing based linux os like backtrack backbox blackbunut, sqlmap comes already installed . but you can use sqlmap on other system easily :) how ??? ok follow these steps , its really not a big deal ;) SQLmap official website , from where you can download sqlmap source code http://sqlmap.org/ download link :- https://github.com/sqlmapproject/sqlmap/zipball/master sqlmap source code has been saved with name master its zip file, to extract its content run command unzip master. you will get a directory having name sqlmap project something like that, enter into that directory and list files yesssss :) . here is our sqlmap source code . sqlmap is coded in python and sqlmap.py is the main file which is used for performing SQL injection. so lets start >:D<   you can run sqlmap.py in 2 ways, either using python or using ./ ;) pyth...

SQLMap Gui Automatic SQL injection and database takeover tool

Image
SQLMap Gui Automatic SQL injection and database takeover tool This is a awesome sqlmap python gui made by xcedz.To make it work get andinstall python 2.7 and download the last version of sqlMap-dev svn checkout https://svn.sqlmap.org/sqlmap/trunk/sqlmapsqlMap-dev after doing that download the gui scriptfrom : http://code.google.com/p/gui-for-sqlmap/downloads/list sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, toaccessing the underlying file system andexecuting commands on the operating system via out-of-band connections. And here is Another Windows GUI forsqlmap written in C# you have to enter the database parameters, select the table and column that you want to enumerat...