Okay. This is my testing web application.
As I already told you.
I've got an online shop. And in
this online shop, you can buy a bunch of different things like
firewall Lock super secure firewall
and different different kind of stuff.
Right? This is of course testing web application just to
present some attacks and ideas in
the in the demo.
Okay, so let's assume that
well, I see that firewall. There is a firewall the price
of this firewall is 1000 Euros. Let's assume
that I'm gonna buy this firewall and before buying
I just want to click firewall and see
what what's this product is all about right? So let
me click this.
And I see something like product description by a firewall. Well,
this is just a demo but take a
look at the URL. We've got https example.com items
details dot PHP question mark ID
equal sign 13, right? So the
point here is that when you go
to this URL
And you can see in the upper right corner. I'm not authenticated,
right?
You can just see the details of
this product so I don't have to be authenticated.
To see the details of this product. I know the URL
that leads me to this product or that points
to this product. So I'm just going to copy this
URL because in in a minute I'm going
to
Launch a command in SQL map and I will just
need this URL. Okay. I hope it is clear. So
let me
Let me copy this.
And let me go to the command line.
so what I'm going to do
is I'm going to type SQL map.
Then as I already explained to you in the introduction
Dash you and now in between
the quotes, I'm going to put my
URL, right?
This is My URL and well, I
just want SQL map to find out whether SQL injection
is possible here. So in other
words whether parameter named ID is vulnerable
to SQL injection or not.
And now dash Banner so
dear SQL map if you find SQL
injection.
In ID parameter, then just fetch the
banner. Okay, and that's it.
Hit enter and it's just
doing all this kind of let's say magic. It's not
a magic in a true sense. I mean here well,
everything is automated. Right so different detection
techniques different steps different payloads. It's
just done automatically. Okay.
What I can see is it
tries to do some kind
of exploitation right now, right? Yeah.
So yeah get parameter ID is vulnerable.
This is very nice information for me because this
is what I wanted to achieve and it was so fast.
And so how do I want
to testing other parameters? No, I don't want to testing to do
testing of other parameters because this there's
actually one parameter in our URL.
And yeah, it was it was so fast. Can you see it was
so fast?
And here you can see here you
can see the banner.
Here here is the banner.
The banner has been extracted.
And you see the exact version right of the
database 5.5.48. So
you just see that SQL
injection via ID
parameter is possible.
And as a proof of concept, the banner
has been extracted so very nice.
Very cool. And this is just a starting point because
when I'm going to show you in the next modules is
how to make more powerful things because
what we want to do is fetch sensitive data
from the database.
Launch the most impactful attacks,
right? So this is just the beginning of our
journey. I hope everything is clear up till now.
And I want to invite you to the next module.
Thank you very much.