SQLmap Tutorial and basic SQL Injection prevention

[ResistIslamToday]

Okay ive been trying to find this for awhile and i seem to be having difficulty finding it for windows 7 in zip format thats ready to go, does anybody know where i could find it?

[WeirdoEntertainment]

@ResistIslamToday sourceforge

[wilsonderick86]

Can anyone help me in this kind of website hacking,?

[MaurisTechChannel]

dude, are you sleeping ?

[Raykoid]

I wasn't eating, i was sick

[miekmuse1exploit]

nice 1 but stop eating :)

[aFiRAbdel]

Nice Tuto =)

[Raykoid]

@aFiRAbdel thank you

[aFiRAbdel]

@Raykoid You're welcome bro

[RaverDK]

WTF is up whit the purple UI ?! :S

[AlterMondialiste1]

plz how can irun it on windows

[TypeYourLoginHere]

Hi, please, can you confirm on SQLmap having trojan virus inside? Eset software did not want to pass it through and put it into quarantine. Please, help

[Raykoid]

It doesn't.

If you don't trust it, compile it from source yourself.

Thing is. It has a shell that it could possibly upload through the SQL injection vulnerability to a website. This shell is detected as a virus (If i'm right, it's just PHP code even, like a c99 shell is detected. Correct me if i'm wrong though, i don't use this feature but i know of the antivirus detecting it.)

Thanks!

[TypeYourLoginHere]

you're correct, i found it yesterday too :) only php, asp and aspx files. Sqlmap is fine, but you still need the username and password, don't you?

[Raykoid]

Not always. It depends, if stacked queries are supported you can do it through those.

Besides, the username/password isn't hard to get, but most of the sql servers run on localhost. But that's a whole different issue

[TypeYourLoginHere]

Do you think Acunetix vul scanner is enough when scanning for some security hole?

[Raykoid]

I would say don't put all your money on one horse. Use nikto/acunetix/w3af/nessus/...

[kenzor101]

:o :o :o :o :o

[k1mpman]

Looks great. :)