Applied Network Security

Extracting data with SQLmap

In order to get the database of a website, we are looking for a web address that end in php?id=. You can use Google hacks/dorks by entering a search on Google for something similar to the following:

• inurl:index.php?id=
• inurl:gallery.php?id=
• inurl:post.php?id=
• inurl:art?id=

You can find an extensive list by typing dork list in the search field. Sometimes you may even stumble upon an updated list of vulnerable websites that could be worth considering as well.

Now before we begin infiltrating a website, you'll need to perform some reconnaissance to gather some information such as the database management system (DBMS) and for that you'll use the following command:

./sqlmap.py -u "URL of a vulnerable web page"--dbs ...