Hi, my name is David. Welcome to my course how
hackers find SQL injections in
minutes with SQL map.
In this course, I'm gonna show you how you
can automatically detect and
exploit SQL injection vulnerabilities in
web applications.
Let's start with an introduction.
We are going to talk in this course about SQL injection.
This is a kind of foundation. Right we want
to find out if SQL injection
vulnerability is present in our web
application or not. And if it is present.
Then we want to exploit this vulnerability. That's our
goal. And we want to do it automatically. That's why
we are going to use SQL map.
So this is the foundation we need to have SQL injection.
And for some of you who are not very familiar
with SQL injection. I will make
a very brief introduction.
So SQL injection, what's that?
When the attacker is able to change the
logic of the underlying SQL query
then actually we are talking about SQL injection
attack or SQL injection vulnerability.
What are the consequences of this tag? One of
the consequences is retrieving the
data from the database? So as a consequence of
SQL injection the attacker can fetch
the data from the database, for example, the passwords
of all users. I'm gonna
show you how to do it automatically in this course, but this
is one of the consequences
So we are now talking about confidentiality, right?
We can fetch the data from the database another one
as a result of SQL injection.
The attacker can for example
change the Integrity of the data in the database. So
the attacker can add his own data to
the database, right?
The attacker can even erase the entire
database. So you see that there's
a lot of different consequences. It's
very severe consequences.
of SQL injection attack
and we definitely want to find out
if our web applications or
web applications of our clients are vulnerable
to SQL injection attack or not.
And we can do it in two different ways.
We can either do it manually or we
can invest in automated
testing.
Manual testing is really difficult for
many people because you need
to know a lot of details to go
to really high level
in terms of SQL injection detection and
exploitation. It's not so straightforward, right? So
you have to be really good really proficient
if you want to manually find SQL
injections.
And in addition to this this is time consuming. This
is not very scalable. So it's
good to think about automated testing.
So we've got a lot of Pros related to
automated testing right a lot of advantages.
This is scalable. This is fast. You don't need
to know all these underlying details. Very
nice. Very cool.
So indeed, we are going to focus
on automated SQL injection detection and
exploitation. I want to emphasize one
thing detection and exploitation because what
the attacker wants to do is something like
this first detect SQL injection
of vulnerability. And once this vulnerability
has been detected then the attacker
wants to do exploitation.
That's why detection and exploitation together. And
of course, I'm going to cover both
of them in this course. So we've
got a few keywords here automation SQL injection detection and
exploitation right? Cool. What kind of
tool can we use to make it happen?
SQL map as you already know from the title
of this course is really very popular tool used
by many hackers.
By many successful hackers and you
can just use this tool to make it happen.
Okay, so this is a kind
of introduction to this course
and now we are going to start the journey and the question
is how is the journey going to look like?
Well, let's jump to the table of contents and
see what's exactly covered in
this course.
First I will focus on the basics of actual map.
Right. I want you to be able to.
Just basically use this tool to find some
let's say simple SQL injection.
So just the beginning we just have to start with
this.
Then we are going to go to
something very cool. I'm gonna show you how easily
you can use this tool to dump database
table entries. It's gonna
be fantastic. It's gonna be blazing fast, right? So
I'm gonna show you how easily you
can fetch the data from the database with one
single command with this tool
with SQL map really nice really beautiful
and here you will start seeing the power of
the stall and everything of course will be automated right.
Then I will jump to another very
interesting subject how you
can go from SQL injection to remote code
execution. This is fantastic because what the
attacker wants to do is to
have the most powerful attack,
right?
SQL injection itself is it's really powerful.
You can fetch data from database as I mentioned. You can change the Integrity
of the data in the database. So this is really powerful.
But now imagine that you can jump from
SQL injection to remote code
execution remote code execution as
the name suggests is about launching an
arbitrary code remotely. So it's basically
means that you can do whatever you want on the
vulnerable machine, right? And this is the highest possible
attack that you can launch. If
you've got remote code execution. This actually means
that this system is now yours. It's
full yours, right? So what the attackers want to
do is trying to go from
SQL injection to remote code execution to have more
powerful attack. This is like escalation,
right? We want something even more
powerful at the end. This is how it works. This is
what attackers want to do. And this is what I'm
going to discuss and now imagine
That you can automatically jump from
SQL injection to remote code execution with
this tool. It's gonna be beautiful and it
will open your eyes really.
Okay next when I
discuss the power of exploitation dumping database
table entries going from SQL injection to
remote code execution. Both of them are related to exploitation,
right so exploitation of SQL injection of vulnerability.
And when this subjects are discussed, I will
go deeply into more
advanced testing with SQL
map what I mean here. I'm gonna show you how you can
maximize the power of SQL injection detection with
this tool and it's gonna be a really
nice. So you have to do some kind of tuning of
this tool to really Unleash the Power of the stall,
right? And this is what what I'm going to cover and then
last but not least bypassing web
application of firewalls. Yeah, we've
got web application. Firewalls Waf in
short in our Enterprise, right?
So they are just placed
in between you so user.
And the web application, right?
So what the company is trying to do that they
are actually buying web application firewalls. They put
this fire rules in front of web applications and the
web application firewalls are supposed to detect
different kinds of attacks. Right?
So for example web application of firewalls are supposed
to detect SQL injection attempts.
And once the potential SQL
injection attack is detected the traffic
is blocked, right? So this is and this is it.
But if you want to actually
find SQL injection of vulnerability and
you've got web application firewall, then this is a problem for
you. I mean you are and you as a hacker, right you
as a penetration tester because this device
this Appliance is going
to block your suspicious traffic, right?
And this is an obstacle for you. You have
to bypass web application firewall and then
you can try to detect SQL injection
vulnerability and exploit. Right? So this
is your enemy in terms
of testing and you need to know how to bypass web
application firewalls in order to successfully. Yeah
detect and exploit SQL injection vulnerabilities
in the Enterprise, right? So this is all I'm
going to cover so as you can see a lot
of knowledge is going to be covered in
this course, and I hope you like it.
So let's jump to the next module and
let's discuss the basics of
SQL map.
I hope you will enjoy this course and make the
most of this knowledge.