Using sqlmap to find SQL Injection on the login page
SQL Injections are always in the OWASP top three in every iteration of OWASP Web Application Top 10 Vulnerabilities for a reason. They are the most damaging to web applications and thus to businesses as well. Finding an SQL Injection is difficult, but if you happen to find one, exploiting it manually till you get access on the server is even harder and time consuming. Therefore, it is important to use an automated approach because during the penetration testing activity, time is always running out and you will always want to confirm the existence of an SQL Injection sooner than later.
Sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL ...
Get Kali Linux Intrusion and Exploitation Cookbook now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
