Comments on: Sqlmap tutorial for beginners – hacking with sql injection

By: Malose

Malose — Mon, 21 Aug 2023 17:36:27 +0000

Perfect simple elegant tutorial, this is a wind to my sail, thanks a lot.

By: v

Mon, 20 Mar 2023 18:46:57 +0000

In reply to prem.

https://sqlmap.org/ download zip file you can get it

By: cibafew

cibafew — Fri, 18 Sep 2020 19:46:25 +0000

Nice Tutorial , Excellent Thanks for this post

By: hersjohny

hersjohny — Wed, 22 Apr 2020 19:32:16 +0000

In reply to MichealBestDev. google?

By: Joe

Joe — Wed, 12 Jun 2019 01:16:24 +0000

In reply to prem. If you're running an OS with sqlmap preinstalled (Kali, for example) you don't have to find the file. Just type in 'sqlmap' to use it.

By: Manish

Manish — Thu, 09 May 2019 05:12:52 +0000

Nice Tutorial , Excellent Thanks for this post
Read Advance SQLMAP Tutorial
https://hackingsecuritytools.blogspot.com/2019/01/sqlmap-tutorial-sql-injection-complete-commands.html

By: suladin

suladin — Mon, 11 Jun 2018 18:21:54 +0000

Great Tutorial https://goo.gl/VPdEpD

By: drippy

drippy — Thu, 08 Feb 2018 15:22:20 +0000

But to everyone who uses this its not a very good tool for something you can only hack sites vulnerable to this attack you cant do ma y websites you want. But theirs ,any other tools to help you exploit other webpages just remember a webpage is a server and a server is pretty much a computer.

By: drippy

drippy — Thu, 08 Feb 2018 15:16:55 +0000

In reply to marc. sqlmap can only exploit vulnerable pages but if u made to the admin page u can brute forces it with a couple different tools on kali linux ones you made it in depending on the websites you could probably go and mess with users of that site. If you made it into a site thou i would put a backdoor with weebly

By: mdrakibmon

mdrakibmon — Sun, 26 Nov 2017 12:06:09 +0000

awesome tutorial ,good work man,keep it up.

By: prem

prem — Mon, 06 Nov 2017 18:31:17 +0000

where is sqlmap.py file ?

By: Aljin dave

Aljin dave — Sun, 13 Aug 2017 07:41:21 +0000

How to delete the tables
That is hacked

By: lazer

lazer — Thu, 20 Jul 2017 04:28:32 +0000

In reply to marc. script kitty

By: marc

marc — Mon, 05 Jun 2017 04:14:33 +0000

sqlmap can hacking only vulnerable page?
and if i hacked admin page i can delete someones post?

By: Abhijay

Abhijay — Thu, 23 Mar 2017 05:30:10 +0000

Its pretty good information. But I would like to know if the cms does not allow any kind of files to be uploaded on the server. How do you still hack it?

By: kalilinuxhack

kalilinuxhack — Sun, 05 Mar 2017 08:18:03 +0000

SQL injection is most widely used by hackers for website hacking. It is used by pentester to safeguard the website from hackers and vice versa. SQL injection allows attacker to hack the database of a website.

Some ofhttp://www.kalilinuxhack.com/2016/09/SQL-Injection-Tutorial-to-hack-admin-panel-of-website.html"? SQL Injection examples are:

‘ OR ”=’

‘ OR ‘1’=’1′ —

‘ OR ‘1’=’1′ ({

‘ OR ‘1’=’1′ /*

Alternatively, attacker can also use ‘Havij’ tool. It is available on the hacker forums for free of cost. It comes as an easily useable application like windows tool.

By: Edric

Edric — Sat, 06 Aug 2016 02:55:31 +0000

Neat tutorial, for a more detailed tutorial with example you can visit https://smarterbitbybit.com/how-to-use-sqlmap-with-examples/

By: Maximusweb

Maximusweb — Thu, 30 Jun 2016 12:03:16 +0000

@MichealBestDev: use a .htaccess file with entrys like this: ### Block mySQL injects RewriteCond %{QUERY_STRING} (;||’|”|\)|%0A|%0D|%22|%27|%3C|%3E|%00).*(/\*|union|select|insert|cast|set|declare|drop|update|md5|benchmark) [NC,OR] RewriteCond %{QUERY_STRING} \.\./\.\. [OR] RewriteCond %{QUERY_STRING} (localhost|loopback|127\.0\.0\.1) [NC,OR] RewriteCond %{QUERY_STRING} \.[a-z0-9] [NC,OR] ### Block QUERY STRING EXPLOITS RewriteCond %{QUERY_STRING} boot\.ini [NC,OR] RewriteCond %{QUERY_STRING} tag\= [NC,OR] RewriteCond %{QUERY_STRING} ftp\: [NC,OR] RewriteCond %{QUERY_STRING} http\: [NC,OR] RewriteCond %{QUERY_STRING} https\: [NC,OR] RewriteCond %{QUERY_STRING} (\|%3E) [NC,OR] RewriteCond %{QUERY_STRING} (\|%3E) [NC,OR] RewriteCond %{QUERY_STRING} ^.*(%0|127\.0).* [NC,OR] RewriteCond %{QUERY_STRING} ^.*($|$||'|"|\?|\*|%%|&%%|&"|").* [NC,OR] RewriteCond %{QUERY_STRING} ^.*(globals|encode|localhost|loopback).* [NC,OR] RewriteCond %{QUERY_STRING} (;||’|”|\)|%0A|%0D|%22|%27|%3C|%3E|%00).*(/\*|union|select|insert|cast|set|declare|drop|md5|benchmark) [NC,OR] RewriteCond %{QUERY_STRING} \.\./\.\. [OR] RewriteCond %{QUERY_STRING} (|’|%0A|%0D|%27|%3C|%3E|%00) [NC] RewriteRule ^(.*)$ - [R=404,L]

By: milan

milan — Thu, 16 Jun 2016 08:55:14 +0000

how to protect website sql injection?

By: haktuts

haktuts — Sat, 11 Jul 2015 05:00:00 +0000

Free ethical hacking course