How to Spider Web Pages with Nmap for SQLi Vulnerabilities « Null Byte :: WonderHowTo

The already robust and ingenious Nmap tool has received a whole slew of new scanning scripts that can be used to do all sorts of naughty endeavors. Notably, the SQLi module, since it is a necessary evil that we must cover here at Null Byte. This major update is going to fuel today's lesson.SQLi stands forSeverQueryLanguageInjection. This is a fancy term for exploiting the program that manages and organizes some web databases. SQLi is a fairly old exploit, yet it is still somehow very prominent in today's world. When a web administrator accidentally (at least, I hope it was an accident) allows remote SQL, the server's information can be viewed and manipulated by passing the page with the broken script an SQL injection.These infamous and easy hacks were used against Sony too many times to count, so they are still very much prominent.RequirementsLinux or Mac OSXStep1Install the Latest NmapText inboldis a terminal command.If you're on Mac, you need to make sure you have Apple developer tools installed when compiling the software.Download the latest Nmap with the scriptshere.Extract the archive source.tar zxvfConfigure and compile the program../configure && makeInstall the software.sudo make isntallYou can also just extract and run the program binaries from within their respective folders (i.e. /nmap, /zenmap) and run them as their binary executables../nmapStep2Scanning for SQLi Vulns with NmapPick a website to scan (make sure you have consent, or that you do not plan to do anything illegal to the site).Ping it for its IP address.ping -c 3 www.example.comCopy the IP address it spits back and save it for use later.Enter this script to scan the root of your choice webserver, spidering for SQLi vulnerabilities. Replace127.0.0.1with the IP of your chosen server.nmap -T4 -A -v --script sql-injection 127.0.0.1Watch this video to get an understanding of how to scan within the GUI interface.Please enable JavaScript to watch this video.Be a Part of Null Byte!Post to theforumsChat onIRCFollow onTwitterCircle onGoogle+Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseRelatedHack Like a Pro:How to Scan the Internet for Heartbleed VulnerabilitiesHow To:SQL Injection Finding Vulnerable Websites..How To:Use NMAP 7 to Discover Vulnerabilities, Launch DoS Attacks and More!Hack Like a Pro:Using the Nmap Scripting Engine (NSE) for ReconnaissanceHow To:Easily Detect CVEs with Nmap ScriptsAdvanced Nmap:Top 5 Intrusive Nmap Scripts Hackers & Pentesters Should KnowHow To:Hack Apache Tomcat via Malicious WAR File UploadAndroid for Hackers:How to Scan Websites for Vulnerabilities Using an Android Phone Without RootHack Like a Pro:How to Hack Web Apps, Part 1 (Getting Started)How To:Identify Web Application Firewalls with Wafw00f & NmapHow To:Break into the Lucrative World of Ethical Hacking with This Reasonably Priced Course BundleHow To:Leverage a Directory Traversal Vulnerability into Code ExecutionHack Like a Pro:How to Find Website Vulnerabilities Using WiktoHack Like a Pro:How to Hack Web Apps, Part 2 (Website Spidering with WebScarab)How to Hack Databases:Hunting for Microsoft's SQL ServerHow To:Beginner's Guide to OWASP Juice Shop, Your Practice Hacking Grounds for the 10 Most Common Web App VulnerabilitiesNews:How-to Design Amazing Web Pages Using Basic HTMLHow To:Exploit Remote File Inclusion to Get a ShellHow To:Get Started Writing Your Own NSE Scripts for NmapHow To:Detect Vulnerabilities in a Web Application with UniscanHow To:Locate & Exploit Devices Vulnerable to the Libssh Security FlawHack Like a Pro:How to Hack Web Apps, Part 6 (Using OWASP ZAP to Find Vulnerabilities)Hacking Reconnaissance:Finding Vulnerabilities in Your Target Using NmapNews:Flaw in Facebook & Google Allows Phishing, Spam & MoreWeekend Homework:How to Become a Null Byte ContributorNews:Null Byte Is Calling for Contributors!How To:How Cross-Site Scripting (XSS) Attacks Sneak into Unprotected Websites (Plus: How to Block Them)How To:Is Your Website Vulnerable to XSS Injections? Here's How to Protect Your VisitorsHow To:How Hackers Use Your IP Address to Hack Your Computer & How to Stop ItIPsec Tools of the Trade:Don't Bring a Knife to a GunfightNews:Bugzilla Cross Site Request ForgeryHow To:Things to Do on WonderHowTo (01/18 - 01/24)Atomic Web:The BEST Web Browser for iOS DevicesNews:Best Hacking SoftwareNews:3 Unique Alternative Web Browsers for Your iOS Device