Original subtitles

1

Let's type a scale map and let's fill in the file that we have just saved by using the option dash are

2

and let's provide the file as input Escuela.

3

Now, there are a lot of options that we can use with a scale map, but to keep it simple, I'm just

4

going to show you the most commonly used options when exploiting sequel injection vulnerabilities.

5

So in this process, the first thing that we do is to dump the databases available that can be done

6

using dash dash DBS option.

7

If you hit enter a skill map is going to dump the list of databases by exploiting the sequel injection

8

vulnerability in the login page, specifically by using the one that will perimeter's username and password.

9

In fact, we can specify which parameter we want to exploit by using the option dashboard so that the

10

user, when we specify the parameter ESKIL map is going to test for a skill injection only using this

11

specific parameter.

12

So we can do that if we are specifically testing one single parameter.

13

Otherwise, a scale map is going to test all the available parameters.

14

OK, so let's remove this and let's get into.

15

I have run this command earlier, so Eskil Map is using the previously stored resource, I haven't removed

16

those results just to keep the demo faster.

17

Otherwise it is going to take longer to exploit this because it's a blind SQL injection vulnerability

18

in your case, since you're doing it for the first time.

19

It may take longer when Eskil Map shows this output to you.

20

OK, so in the output we can see that there are a few databases we have gotten and what we are interested

21

in is the user's table, which is here.

22

So let's clear the screen and let's change this scale map command to specifically tell a skill map to

23

dump tables from the user's database.

24

So to do that, I'm specifying the database by using the Bagby B flag and I'm instructing a skill map

25

to dump the tables by using dash dash tables flag.

26

So let's hit enter and see if we can get the list of tables from the user database.

27

Look at that, we have got in two tables from the users database, the first table is admin and the

28

second table is users.

29

We can dump the column names from both these tables by specifying dash dash columns option.

30

So let's remove this dash dash tables and let's replace that with the columns where at the same time

31

we will have to specify which table we want to dump these columns from.

32

So that can be done by using the nasty flag.

33

So I'm just going to use the user's table from the user's database.

34

OK, so let's hit enter.

35

Once again, the list of columns are dumped very quickly because I have run this command earlier.

36

Now we can see that there are three columns here, idy password and username.

37

Now, what we are interested in is to dump the actual data from this table.

38

So I'm just going to clear the screen once again.

39

And just add dash, dash dump at the end, when we run this command, Eskil map is going to dump all

40

the content from the user's table, which is in the user's database.

41

OK, so let's hit enter and see what we get.

42

Look at that, there are three entries in the user's table with three different users, admin Bob and

43

John.

44

This is how sequinned map can be used.

45

There are many more options that can be used with a skill map.

46

I would recommend you to go through the ESKIL maps, help options and see what else can be done using

47

a skill map.

48

That's all for this video.

49

See you in the next one.