Lab 10 Ethical Hacking Step 3 - Exploitation SQL Injection Vulnerability
Web SQL Injection Vulnerability Exploitation.
From vega result, look at the sql injection vulnerabilities
Inject with Sql Map in python, so you need to have :
1. Python - 2.7 - set the environment first
2. SQL Map tool - get into your cmd and access to a tool
3. Injection using SQL Map, start with check whether the URL is really injectable or not, then list all databases by using --dbs command, list tables using --tables -D herbs, and get the columns by using --columns
Vulnerable site: http://localhost/iidex14a/search_detail.php?herbid=15
Your own system to test, not others!!