Date: 21 Feb 2025

Imp links :

• manual (will study later)
• sql (will study today)
• After opening kali: refere this

1. sudo apt-get install sqlmap
2. sqlmap -u http://testphp.vulnweb.com/listproducts.php?cat=1 --dbs

🔹 Command 1:

sudo apt-get install sqlmap

✅ What it does:

• sudo: Runs the command with superuser privileges, because installing software requires admin rights.
• apt-get: The package manager for Debian-based Linux distributions (like Ubuntu).
• install sqlmap: Tells apt-get to download and install sqlmap.

🧠 What is sqlmap?

• It's a powerful open-source penetration testing tool used to automate the process of detecting and exploiting SQL injection vulnerabilities in web applications.
• Super helpful for security testing or ethical hacking.

🔹 Command 2:

sqlmap -u http://testphp.vulnweb.com/listproducts.php?cat=1 --dbs

✅ What it does:

• sqlmap: Runs the sqlmap tool.
• -u: Specifies the target URL with a GET parameter (cat=1) that might be vulnerable to SQL injection.
• http://testphp.vulnweb.com/listproducts.php?cat=1: This is the target website. The cat parameter is what sqlmap will test for injection.
• --dbs: Tells sqlmap to enumerate the available databases if it finds an SQL injection vulnerability.

🧪 What happens:

• sqlmap sends specially crafted queries to the URL to see if it can manipulate the SQL behind the cat=1 parameter.
• If successful, it will return a list of database names found on the target server.