Posts: 14
Threads: 4
Joined: Oct 2024
Hello,
I would like to know if someone can tell us how to download a database since we have been able to access one through a SQL injection vulnerability. We are a bit novice in this downloading databases but we have knowledge of hacking.
Posts: 26
Threads: 3
Joined: Nov 2024
I think downloading the database depends on the tool you are using to crack the database. Also how did you crack it and what tool did you use?
Posts: 2
Threads: 0
Joined: Nov 2024
Nov 12, 2024, 09:41 AM
(This post was last modified: Nov 12, 2024, 09:42 AM by rootxyz.)
After finding a sql injection vulnerability in any web application, just need to use sqlmap tool to exploit that vulnerability and dump all databases to files
Posts: 1
Threads: 0
Joined: Oct 2024
You need to give more detail about the SQL injection type. If it's a blind SQL injection then yes SQLMap is the best way to go. But this can be a very slow process especially if you are looking to extract the full db.
I'd recommend trying to retrieve the employee/admin/user table first and try to brute force (dict) some passwords to see if you can gain an admin access to make you dump directly inside the app... would save time.
Provide more detail about the injection and we will see if we can help.
Any idea of the size of the db ?
Posts: 4
Threads: 0
Joined: Nov 2024
If you use Sqlmap => ~/.sqlmap/output
Posts: 14
Threads: 4
Joined: Oct 2024
Jan 03, 2025, 12:44 AM
(This post was last modified: Jan 03, 2025, 12:51 AM by cybershadow404.)
(Nov 12, 2024, 04:19 AM)Eham Wrote: I think downloading the database depends on the tool you are using to crack the database. Also how did you crack it and what tool did you use? SQLmap was the tool, we got access through a vulnerability but then we couldn't get access.
(Nov 13, 2024, 06:13 PM)eskaliboor Wrote: You need to give more detail about the SQL injection type. If it's a blind SQL injection then yes SQLMap is the best way to go. But this can be a very slow process especially if you are looking to extract the full db.
I'd recommend trying to retrieve the employee/admin/user table first and try to brute force (dict) some passwords to see if you can gain an admin access to make you dump directly inside the app... would save time.
Provide more detail about the injection and we will see if we can help.
Any idea of the size of the db ? we had access to the admins but the passwords were hashed. what to do then, brute force against the hash?
the size we don't know, so we lost access as if we had been detected .... we had to act fast but we didn't know what to do.
Posts: 10
Threads: 0
Joined: Jan 2025
Jan 26, 2025, 11:51 PM
(This post was last modified: Jan 26, 2025, 11:58 PM by van_icehead.)
maybe try to crack the hash with john, it should be able to crack the hash
Posts: 433
Threads: 25
Joined: Jan 2024
(Jan 03, 2025, 12:44 AM)cybershadow404 Wrote: (Nov 12, 2024, 04:19 AM)Eham Wrote: I think downloading the database depends on the tool you are using to crack the database. Also how did you crack it and what tool did you use? SQLmap was the tool, we got access through a vulnerability but then we couldn't get access.
(Nov 13, 2024, 06:13 PM)eskaliboor Wrote: You need to give more detail about the SQL injection type. If it's a blind SQL injection then yes SQLMap is the best way to go. But this can be a very slow process especially if you are looking to extract the full db.
I'd recommend trying to retrieve the employee/admin/user table first and try to brute force (dict) some passwords to see if you can gain an admin access to make you dump directly inside the app... would save time.
Provide more detail about the injection and we will see if we can help.
Any idea of the size of the db ? we had access to the admins but the passwords were hashed. what to do then, brute force against the hash?
the size we don't know, so we lost access as if we had been detected .... we had to act fast but we didn't know what to do.
dehash it on hashes.com or hashkiller.io web site
|
