10. SQLMap Tutorial + Authentication Bypass using SQL Injection
InfoSecCamp InfoSecCamp
361 subscribers
40 views
7

 Published On Aug 30, 2024

Disclaimer: This video is made for educational purposes only. Do not run SQLMap without taking permission from target application owner and never run SQLMap on any production application.

We will learn the following:
00:00 - Intro
01:46 - Authentication Bypass (Legacy) by SQL Injection
04:42 - Context
06:24 - SQLMap with POST request
07:40 - SQLMap command to list out all back end databases
09:29 - SQLMap command to list out all tables from specified database
10:26 - SQLMap command to dump all data from specified table

Download SQLMap: https://sqlmap.org/
SQLMap wiki: https://github.com/sqlmapproject/sqlm...
AuthBypass using SQLi: http://testasp.vulnweb.com/Login.asp
username: [any valid username]
password: ' OR '1'='1'--

Setup Local Test Environment:    • 2. Application Security: Local Test E...  
Configure BurpSuite:    • 8. Install and Configure BurpSuite: S...  

show more

Share/Embed