Monday, 30 October 2017

Do PenetrationTesting using SQLMap

What is "sqlmap" Package? 


From Documentation:
sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.

Features:


  • Full support for MySQL, Oracle, PostgreSQL, Microsoft SQL Server, Microsoft Access, IBM DB2, SQLite, Firebird, Sybase, SAP MaxDB, HSQLDB and Informix
  • Full support for six SQL injection techniques: boolean-based blind, time-based blind, error-based, UNION query-based, stacked queries and out-of-band.
  • Support to enumerate users, password hashes, privileges, roles, databases, tables and columns.
  •  For more details: http://sqlmap.org

Installation

  • Open Terminal by pressing command+space then type terminal and hit Enter key.

  • Install homebrew first.

    ruby -e "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)" < /dev/null 2> /dev/null

  • Install sqlmap.

    brew install sqlmap
Now, use sqlmap and Enjoy testing

0 comments:

Post a Comment

 

Copyright @ 2013 Appychip.

Designed by Appychip & YouTube Channel