Searching SQL Deficit on Site Using NMap

Kullanıcı1233 · 10 May 2020

Hi friends, today i will tell you how to scan SQL Injection vulnerability on the site using the pentest tool (NMap) among the 10 most common Kali Linux

tools.

(~) What is NMAP ?

Its an NMap Pentest tool and lets us scan port/vulnerability of a website. One of the indispensable tools of Linux.

NMap Usage Topic : https://www.turkhackteam.org/web-server-guvenligi/1900111-nmap-nasil-kullanilir-siber-guvenlik-kulubu-herorahim.html

NMap XSS Scan Topic : https://www.turkhackteam.org/web-server-guvenligi/1900815-nmap-kullanarak-site-uzerinde-xss-tespiti-yapma-siber-guvenlik-kulubu-herorahim.html

(~) Using

We first open the terminal and install or update NMap.

Kod:

[COLOR="Lime"]sudo apt-get install nmap[/COLOR]

Let's check if it works.

Let's scan SQL on the site.

Kod:

[COLOR="Lime"]nmap -p80 --script http-sql-injection herorahim.com[/COLOR]

He determined up to the ports open to us, but SQL could not find the vulnerability.

If SQL finds a vulnerability ;

Kod:

[COLOR="Orange"]http-sql-injection: | Possible sqli for queries: | http://site.com/page.php?param=[/COLOR]

It appears in the form.

Translator: Secret Person
Subject source: https://www.turkhackteam.org/web-server-guvenligi/1903008-nmap-kullanarak-sitede-sql-acigi-tarama-herorahim.html#post9019428

Searching SQL Deficit on Site Using NMap

Kullanıcı1233

Kıdemli Üye

Sosyal medya sayfalarımız