‫We found the SQL injection vulnerability and see the entire table's name and surname values in one go.
‫So if we can do this, what else can we do?
‫As you well, map is a little bit complicated, but a very powerful command line application to exploit
‫as you, well, injection vulnerabilities.
‫You can download and use this free application in any platform, and it's embedded into Kali Linux Askew.
‫You Map has a lot of parameters, so you can use Dash each parameter to learn more.
‫For now, let's build the school map command.
‫The first parameter is the URL.
‫Since the program analyzes all the parameters we don't need to give.
‫But we know that the ID parameter is vulnerable.
‫We can give it as the second parameter.
‫Since we need to have a valid credential to reach the page in -- vulnerable web application, we have
‫to give sequel map a valid cookie.
‫Not necessarily, but it is better to teach a school map when it gets a valid result.
‫In this example, we can give a static part of the valid page, first name and last we have to say what
‫we want from school map.
‫It says the banner is 5.1 Typekit four one three Ubuntu 12.6 underscore lot.
‫Let's ask for the current database at this time.
‫Dash, Dash, current dash.
‫Deb, the current databases DVD A.
‫Let's list the tables of the database.
‫So here we go in deep, let's dump the user's database.
‫It says the database management system is my issue, well, we already know it so we can skip to other
‫database management systems in questions.
‫The default answer is shown in all caps.
‫If you hit enter, the default answer is selected.
‫It says the ID parameter is vulnerable so we can skip other parameters at this point.
‫It found hash values inside the table and asks if we want to save it for further use.
‫Moreover, it offers to crack the hash values, so let's use Sequel Maps Default Dictionary in this
‫example.
‫And finally, we have the dump of the user's table and hash values are cracked.
‫Good job.
‫Blindness fuel injection is used when a Web application is vulnerable to an actual injection.
‫But the results of the injection are not visible to the attacker.
‫The page with the vulnerability may not be one that displays data but will display differently, depending
‫on the results of a logical statement injected into the legitimate SQL statement called for that page.
‫This type of attack has traditionally been considered time intensive because a new statement is needed
‫to be crafted for each bit recovery and depending on its structure, the attack may consist of many
‫unsuccessful requests.
‫Now, thankfully, there are several tools that can automate these attacks.
‫Once the location of the vulnerability and the target information has been established now, we already
‫know one of them.
‫It's a squirrel map.
‫And ask you, Alan Jackson is a well known attack and easily prevented by simple measure, with most
‫development platforms parameter raised queries.
‫Also known as prepared statements that work with parameters can be used instead of embedding user input
‫in the state.
‫A placeholder can only store of value of a given type and not an arbitrary SQL fragment, and the actual
‫injection would simply be treated as a strange and probably invalid parameter value.
‫If the application is developed with an object oriented programming language, using object relational
‫mapping libraries avoids the need to write SQL code.
‫The 000RPM Library, in effect, will generate parameter rised sequel statements from object oriented
‫code.
‫A straightforward, though error prone way to prevent injections is to escape characters that have a
‫special meaning in Eskil.