Learn more about SQL injection<\/a><\/p>\n [\/et_pb_blurb][\/et_pb_column][et_pb_column type=”2_3″][et_pb_divider admin_label=”Divider” color=”#ffffff” show_divider=”off” height=”25″ \/][et_pb_image admin_label=”Image: Hi, my name is or 1=1″ src=”https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2015\/03\/sql_injection.jpg” show_in_lightbox=”off” url_new_window=”off” animation=”right” sticky=”off” alt=”Hi, my name is or 1=1″ \/][\/et_pb_column][\/et_pb_row][et_pb_row][et_pb_column type=”2_3″][et_pb_blurb admin_label=”White hats publish DDoS hijacking manual, turn tables on attackers” title=”White hats publish DDoS hijacking manual, turn tables on attackers” url=”http:\/\/arstechnica.com\/security\/2012\/08\/ddos-take-down-manual\/” url_new_window=”on” use_icon=”off” font_icon=”\ue058” icon_color=”#2EA3F2″ use_circle=”off” circle_color=”#2EA3F2″ use_circle_border=”off” circle_border_color=”#2EA3F2″ icon_placement=”left” animation=”left” background_layout=”light” text_orientation=”center” image=”https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2015\/02\/article_96_96_blue.svg” alt=”Article”]<\/p>\n A handful of command-line strings, the open-source penetration-testing tool SQLMap, and knowledge of a command server’s location are pretty much all that’s required to gain access to its back-end database and server-side configuration files.<\/p>\n Read more<\/a><\/p>\n [\/et_pb_blurb][\/et_pb_column][et_pb_column type=”1_3″][et_pb_blurb admin_label=”What is sqlmap?” title=”What is sqlmap?” url=”http:\/\/sqlmap.org\/” url_new_window=”on” use_icon=”on” icon_color=”#2EA3F2″ use_circle=”off” circle_color=”#2EA3F2″ use_circle_border=”off” circle_border_color=”#2EA3F2″ image=”https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2015\/02\/article_96_96_blue.svg” alt=”Article” icon_placement=”left” animation=”left” background_layout=”light” text_orientation=”center” font_icon=”p”]Sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers.<\/p>\n Visit sqlmap website<\/a><\/p>\n [\/et_pb_blurb][\/et_pb_column][\/et_pb_row][et_pb_row][et_pb_column type=”1_2″][et_pb_divider admin_label=”Divider” color=”#ffffff” show_divider=”off” height=”25″ \/][et_pb_image admin_label=”Image: SQL injection prevention” src=”https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2015\/03\/owasp_sql_injection_example.jpg” alt=”SQL injection prevention” show_in_lightbox=”off” url_new_window=”off” animation=”top” sticky=”off” \/][\/et_pb_column][et_pb_column type=”1_2″][et_pb_blurb admin_label=”SQL Injection prevention cheat sheet” title=”SQL Injection prevention cheat sheet” url=”https:\/\/www.owasp.org\/index.php\/SQL_Injection_Prevention_Cheat_Sheet” url_new_window=”on” use_icon=”off” icon_color=”#2EA3F2″ use_circle=”off” circle_color=”#2EA3F2″ use_circle_border=”off” circle_border_color=”#2EA3F2″ image=”https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2015\/02\/tutorial_96_96_blue.svg” icon_placement=”left” animation=”right” background_layout=”light” text_orientation=”left”]<\/p>\n The following (Java) example is UNSAFE, and would allow an attacker to inject code into the query that would be executed by the database.<\/p>\n The unvalidated \u201ccustomerName\u201d parameter that is simply appended to the query allows an attacker to inject any SQL code they want.<\/p>\n Unfortunately, this method for accessing databases is all too common.<\/p>\n Learn more about how to prevent SQL injection<\/a><\/p>\n [\/et_pb_blurb][\/et_pb_column][\/et_pb_row][et_pb_row][et_pb_column type=”4_4″][et_pb_tabs admin_label=”Tabs: articles, presentations, tutorials, whitepapers”][et_pb_tab title=”Articles”]<\/p>\n The mystery of Sqlmap\u2019s empty files Can hacks become hackers? What I learned exploiting websites with pros<\/a> Advanced sqlmap Sqlmap Tricks for Advanced SQL Injection Automated audit using SQLMap Exploiting a tricky SQL injection with sqlmap<\/a> [\/et_pb_tab][et_pb_tab title=”Presentations”]<\/p>\n Heuristic methods used in sqlmap<\/a> SQL injection: Not only AND 1=1 Advanced SQL injection to operating system full control<\/a> [\/et_pb_tab][et_pb_tab title=”Tutorials”]<\/p>\n How to exploit a POST SQL injection using sqlmap<\/a> Use sqlmap SQL\u00a0injection to hack a website and database in Kali Linux<\/a> Using SQL injection vulnerabilities to dump your database Sqlmap tutorial for beginners \u2013 hacking with sql injection Bypassing web application firewalls with SQLMap tamper scripts <\/p>\n Website Hacking – SQL Injections – Sqlmap Introduction [\/et_pb_tab][et_pb_tab title=”Whitepapers”]<\/p>\n Data retrieval over DNS in SQL injection attacks<\/a> Advanced SQL injection to operation system full control [\/et_pb_tab][\/et_pb_tabs][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fullwidth=”off” specialty=”off” transparent_background=”off” background_color=”#f2f2f2″ inner_shadow=”on” parallax=”on” parallax_method=”on” allow_player_pause=”off”][et_pb_row][et_pb_column type=”4_4″][et_pb_text admin_label=”Title” background_layout=”light” text_orientation=”center”]<\/p>\n [\/et_pb_text][et_pb_divider admin_label=”Divider” color=”#cdcdcd” show_divider=”on” \/][et_pb_filterable_portfolio admin_label=”Filterable Portfolio” fullwidth=”off” posts_number=”4″ include_categories=”111,27,86″ show_title=”on” show_categories=”off” show_pagination=”on” background_layout=”light” \/][\/et_pb_column][\/et_pb_row][\/et_pb_section][et_pb_section fullwidth=”off” specialty=”off” transparent_background=”on” background_color=”#f2f2f2″ inner_shadow=”on” parallax=”on” parallax_method=”on” allow_player_pause=”off”][et_pb_row][et_pb_column type=”4_4″][et_pb_text admin_label=”Title” background_layout=”light” text_orientation=”center”]<\/p>\n [\/et_pb_text][et_pb_divider admin_label=”Divider” color=”#cdcdcd” show_divider=”on” \/][\/et_pb_column][\/et_pb_row][et_pb_row][et_pb_column type=”1_2″][et_pb_blurb admin_label=”Video wall” url_new_window=”off” use_icon=”off” icon_color=”#2EA3F2″ use_circle=”off” circle_color=”#2EA3F2″ use_circle_border=”off” circle_border_color=”#2EA3F2″ image=”https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2015\/02\/technical_video_wall.jpg” icon_placement=”top” animation=”left” background_layout=”light” text_orientation=”center” url=”https:\/\/yt.christiaan008.com\/technical-videos\/” alt=”Video wall” \/][et_pb_cta admin_label=”Call To Action” button_url=”https:\/\/yt.christiaan008.com\/technical-videos\/” button_text=”Video wall” use_background_color=”off” background_color=”#f2f2f2″ background_layout=”light” text_orientation=”center” \/][\/et_pb_column][et_pb_column type=”1_2″][et_pb_blurb admin_label=”Videos by category” url_new_window=”off” use_icon=”off” icon_color=”#2EA3F2″ use_circle=”off” circle_color=”#2EA3F2″ use_circle_border=”off” circle_border_color=”#2EA3F2″ image=”https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2015\/02\/technical_categories.jpg” icon_placement=”top” animation=”right” background_layout=”light” text_orientation=”center” url=”https:\/\/yt.christiaan008.com\/technical-videos-by-category\/” alt=”Videos by category” \/][et_pb_cta admin_label=”Call To Action” button_url=”https:\/\/yt.christiaan008.com\/technical-videos-by-category\/” button_text=”Videos by category” use_background_color=”off” background_color=”#2EA3F2″ background_layout=”light” text_orientation=”center” \/][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":" Sqlmap is an open source command-line automatic SQL injection tool. Its goal is to detect and take advantage of SQL injection vulnerabilities in web applications.<\/p>\n","protected":false},"author":2,"featured_media":6825,"comment_status":"open","ping_status":"open","template":"","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"","_et_gb_content_width":"","inline_featured_image":false,"footnotes":""},"project_category":[111,14,154,155,90,109,198,89],"project_tag":[],"class_list":["post-823","project","type-project","status-publish","has-post-thumbnail","hentry","project_category-database","project_category-grid_slider3","project_category-hacking-main","project_category-information-security-security-management-main","project_category-technical_grid_slider3","project_category-penetration-testing","project_category-rss-all","project_category-software"],"yoast_head":"\n![\"article_96_96_blue\"](\"https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2015\/02\/article_96_96_blue.svg\")
<\/p>\n
\n<\/a>Date: 05-12-2014
\nSource: Will Hack For SUSHI<\/a><\/p>\n
\nDate: 16-10-2014
\nSource: The Guardian<\/a><\/p>\n
\n<\/a>Date: 10-07-2014
\nSource:\u00a0Infosec Institute<\/a><\/p>\n
\n<\/a>Date:\u00a030-12-2013
\nSource: Trustwave<\/a><\/p>\n
\n<\/a>Date: 22-01-2013
\nSource:\u00a0OWASP<\/a><\/p>\n
\nSource: Pentestmonkey<\/a><\/p>\n![\"presentation_128_96_blue\"](\"https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2015\/02\/presentation_128_96_blue.svg\")
<\/p>\n
\nDate: 19-09-2013
\nSource:\u00a0Slideshare\u00a0–\u00a0Miroslav Stampar<\/a><\/p>\n
\n<\/a>Date: 26-06-2009
\nSource:\u00a0Slideshare\u00a0–\u00a0Bernardo Damele A. G.<\/a><\/p>\n
\nDate: 16-04-2009
\nSource:\u00a0Slideshare\u00a0–\u00a0Bernardo Damele A. G.<\/a><\/p>\n![\"tutorial_96_96_blue\"](\"https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2015\/02\/tutorial_96_96_blue.svg\")
<\/p>\n
\nDate: 15-02-2015
\nSource: WonderHowTo<\/a><\/p>\n
\nDate: 28-08-2014
\nSource:\u00a0darkMORE Ops<\/a><\/p>\n
\n<\/a>Date: 05-11-2013
\nSource: jOOQ<\/a><\/p>\n
\n<\/a>Date: 08-08-2012
\nSource:\u00a0BinaryTides<\/a><\/p>\n
\n<\/a>Date: 26-08-2011
\nSource: Websec<\/a><\/p>\n![\"video_tutorial_128_96_blue\"](\"https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2015\/02\/video_tutorial_128_96_blue.svg\")
<\/p>\n
\n<\/a>Date: 18-10-2013
\nSource: YouTube – NetSecNow<\/a><\/p>\n![\"whitepaper_96_96_blue\"](\"https:\/\/yt.christiaan008.com\/wp-content\/uploads\/sites\/3\/2015\/02\/whitepaper_96_96_blue.svg\")
<\/p>\n
\nDate: 30-05-2012
\nSource: Slideshare –\u00a0Miroslav Stampar<\/a><\/p>\n
\n<\/a>Date: 10-04-2009
\nSource: BlackHat<\/a><\/p>\nChange your thoughts and you change your world<\/h1>\n
Believe you can and you\u2019re halfway there<\/h1>\n