Member-only story

SQL Injection with SqlMap

Hafiq Iqmal
5 min readFeb 5, 2021

--

SQL Injection is the most nasty vulnerability existed. Its allows an attacker to interfere with the queries that an application makes to its database. A successful SQL injection attack, may cause data leaks such as administration credentials, payment detail and etc. Your data will be in black market if they want to make it as a profit them self. And more worst, it’s allow the attackers to run shell in your server and taking control everything they can.

lynda.com

This vulnerability still relevant this days because of many systems world wide still not serialize user input.

You might want to penetrate your own system whether your system capable to defend from SQL Injection. No system is safe by the way 😅. If your system manage to defend against SQL Injection, the attackers will tried hundreds more way to penetrate your system.

Okay.. The easy way to test SQL Injection is by using a pentest tool called sqlmap.

sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers.

https://realpython.com/prevent-python-sql-injection/

Installation

--

--

Hafiq Iqmal
Hafiq Iqmal

Written by Hafiq Iqmal

Technical Lead | Software Engineer | Laravel Enthusiasts | Tech writer | UiTM Alumni | Husband | Proud father of a beautiful daughter

No responses yet