Marown/metasploitable3-solutions
1
0
Fork 0
mirror of https://github.com/ACIC-Africa/metasploitable3.git synced 2024-06-01 20:15:38 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update Payroll_App_Challenge.md

Browse Source
This commit is contained in:
ACIC 2019-06-13 08:32:05 +03:00 committed by GitHub
parent 2553764978
commit 0654af6ffc
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
Payroll_App_Challenge.md
View File

@ -27,7 +27,7 @@ RESULTS: The webpage will be blank
![alt text](https://github.com/ACIC-Africa/metasploitable3/blob/master/images/payroll_app/step-2.png "STEP 2")
![alt text](https://github.com/ACIC-Africa/metasploitable3/blob/master/images/payroll_app/result-2.png "RESULT 2")
2. <b>Try and login using the following credentials:</b>
3. <b>Try and login using the following credentials:</b>
| Field | Value |
| --------- |:--------:|
@ -37,5 +37,10 @@ RESULTS: The webpage will be blank
RESULTS: The web page will return all the user content
![alt text](https://github.com/ACIC-Africa/metasploitable3/blob/master/images/payroll_app/step-3.png "STEP 2")
![alt text](https://github.com/ACIC-Africa/metasploitable3/blob/master/images/payroll_app/result-3.png "RESULT 2")
![alt text](https://github.com/ACIC-Africa/metasploitable3/blob/master/images/payroll_app/step-4-sqlmap.png "STEP 2")
![alt text](https://github.com/ACIC-Africa/metasploitable3/blob/master/images/payroll_app/result-4-1.png "RESULT 2")
4. <b>Use SQLMap to extract the database using the following commands:</b>
```sqlmap -u http://127.0.0.1:7000/payroll_app.php --data="user=admin&password=admin&s=OK" -p user --method POST```
RESULTS: SQLMap will identify whether the web application is vulnerable to SQL Injection
![alt text](https://github.com/ACIC-Africa/metasploitable3/blob/master/images/payroll_app/step-4-sqlmap.png "STEP 4")
![alt text](https://github.com/ACIC-Africa/metasploitable3/blob/master/images/payroll_app/result-4-1.png "RESULT 4")