+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Hacking Tools (https://sinister.li/Forum-Hacking-Tools)
+--- Thread: SQLmap - Most Powerful SQL Injection Tool (/Thread-SQLmap-Most-Powerful-SQL-Injection-Tool)
SQLmap - Most Powerful SQL Injection Tool - Ultimatum - 01-13-2013
SQLmap is much better than Havij or any other program-related SQLi tool. It is strictly not for GUI-noobs, even though, I have no idea why people struggle with the program even after learning the commands.
You must have Python installed which you can find on their site.
http://www.python.org/download/releases/2.7.3/
You must get the 2.7 or 2.6 version to make the SQLmap work.
SQLmap here: http://sqlmap.org/
A Quick How to Use:
1. Extract and move SQLmap to your documents folder and rename it to "sqlmap"
2. Open CMD.
3. Type "cd documents"
4. Type "cd sqlmap"
5. Then type "sqlmap -u sitehere --dbs"
That will extract all the dbs on the site.
You will find more documentation and help through typing "-h or -hh"
RE: SQLmap - Most Powerful SQL Injection Tool - Charon - 01-13-2013
Nice tutorial but if you're on Windows be sure to use:
Code:
python ./sqlmap.py -u URL here --dbsOtherwise good job Ultimatum!
RE: SQLmap - Most Powerful SQL Injection Tool - Ultimatum - 01-13-2013
(01-13-2013, 02:05 PM)INST1NCT Wrote: Nice tutorial but if you're on Windows be sure to use:
Code:python ./sqlmap.py -u URL here --dbs
Otherwise good job Ultimatum!
Ah yes sorry
Forgot one of the most important OS's!Anyway, excuse my poorly formatted thread, will update when I have reasonable time.