Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

How do i add a user name and a password to sqlmap?

I was running a SQLInjection with sqlmap. My page has an error of sql but the error shows up once you logged in your account(Example: page.com/login.php and when you log you go to page.com/index.php?id=1 and here the sql error is evident). When i run sqlmap on page.com/index.php?id=1 the page redirects the sqlmap to page.com/login.php.It's possible to provide sqlmap a user and a password to make sqlmap log in the account and then perform the SQLInjection? Thank you for your time

like image 820
jdcaba Avatar asked Apr 16 '17 16:04

jdcaba


People also ask

What happens when sqlmap hits a password?

Whenever sqlmap hits a username and password combination, it will display it. All actions for the run are then written to a log file before the program ends its run. Information is power and hackers first need to know what database instances you have on your system in order to hack into them.

How to use sqlmap on Windows?

So, go to the command line on your computer to use sqlmap. Change to the sqlmap directory that you created in order to run the utility. You do not have to compile any program. The program that you run in order to use sqlmap is called sqlmap.py. It will not run unless you add an option to the end of the program name.

How do I create a username and password barcode for scanners?

Creating Username and Password Barcodes for Scanners To create a barcode that contains a username and password: 1. Go to the barcode generator site. 2. Complete the following: a. Data to Encode:Copy and paste [USER_NAME]~009[PASSWORD]~013into the text editor.

How to use Cookie parameter with sqlmap?

You can use cookie parameter with sqlmap. First, log into your account and learn your cookie information then you can use --cookieparameter. For example when login my account, my cookie is PHPSESSIONID=ajksdgadhakjsdhak. After that, you could do just like command below in your terminal.


1 Answers

You can use cookie parameter with sqlmap. First, log into your account and learn your cookie information then you can use --cookie parameter. For example when login my account, my cookie is PHPSESSIONID=ajksdgadhakjsdhak. After that, you could do just like command below in your terminal.

sqlmap.py --url http://page.com/index.php?id=1 --cookie='PHPSESSIONID=ajksdgadhakjsdhak' --dbs
like image 181
Halil Avatar answered Sep 30 '22 03:09

Halil