Mastering Kali Linux for Web Penetration Testing

SQLI tool school

Now that we know how to tell what each SQLI injection type is doing to its targets and how it is helping the hacker, we need to have some methods to actually detect and exploit these vulnerabilities. Injection attacks, as we're seeing, have a pretty broad spectrum of implementations and impacts, and as you might expect there are a plethora of tools out there to answer the needs of pen testers and hackers. My goal, however, is to get you a solid foundation of tools that can provide coverage everywhere and buy you time while you learn and specialize as needed. In this section, we'll see how to carry identify and exploit SQLI vulns using SQLMap, BBQSQL, SQLNinja, and some good old fashioned browser magic.