Okay, guys, welcome in the next module dumping
database table entries in
this module. We'll go step further because
what we have learned so far
is how to find SQL
injections automatically with
SQL map in get parameters and how
to extract the banner in case of successful detection
of SQL injection.
This is just the beginning.
Because as I told you fetching the database Banner
is just a proof of concept.
Now going to the very nice next
step.
Let's dump database table entries
as a result of SQL injection. It sounds
cool. And this is actually what we
want to do. This is what I want to show you because now
you will see how powerful this tool
actually is.
Okay. So the question is how you can do it
how to dump the entire.
Database table entries. It's very very
simple. Let's look at this and compare
with the previous command.
The only difference is that at the
very end of this command you see now dash dash dump
instead of dash dash Banner.
This is only difference.
And now the entire work this kind
of scripting different payloads extracting
data from database. All this
kind of automation is done for you. You just need
to know about this dash dash dump.
It's really really beautiful. And now you see
how how easily you can
adjust your basic standard command
and do very powerful things.
So yeah, it's time to jump to
demo. No need to talk more about this and
let me show you how this powerful switch
dash dash dump Works in
practice.