So we did the first step.
We have Web site here.
And this Web site we need to testify is vulnerable to SQL injection or not.
And if so we need to know what can we get from this vulnerability.
So what I'm going to do I'm gonna start using a certain ability scanning tool the tools that will scans
or websites for any vulnerability secret injection cross site scripting any vulnerability.
And according to the result you're going to see what would be the next step.
So there is many tools that allow you to do that in clinics or even go to Kelly.
And we're gonna go to what we just say the a little bit
so tools for scanning an x ray go.
And then let's see if we have anything related to work application wireless web application and work
ability scanning.
And there is many tools but myself I prefer the.
There is a tool by the name of Vega.
So very very powerful tool we can try all of them.
I mean they would give you different result.
But I'm going to start with Vega.
Vega is a mobility scanning I mean it will not exploit.
It will not hack.
It will just show you the vulnerability inside the web application.
And if there is a secret injection it will give you the infected link and that what you need to do is
another tool which is a second map tool to
start dumping the information from this database.
So I opened Vega application which is a vulnerability scanning and go to a new scan.
So I'm going to scan and then choose new scan and here I'm going to put you out in so I didn't thing
I don't think that I took the You Are end.
So let's copy again what I'm looking for.
Number one if a Web application is vulnerable or not.
Number two if it is vulnerable to SQL injection and it's an infected link.
So I'm going to put here and you're going to click on Next and whatever I mean and I'm going to keep
the same.
I will not change any sitting next.
Next and finish and then I'm going to start scanning.
This may take time.
Depend on the size of the web application.
It may take a few minutes it may take 30 35 minutes it take time according to the size.
So what are we gonna do we're going to just pause until we finish because it might take like 10 15 minutes
and then we're going to see the result and see from where to take it.
What should be the next step.
So after completing the scanning he's giving you a summary here and we can see that he's infected with
two sequence injections that is tooling infected to sequence injection.
Okay.
So sequel injection we have two now from where can we get this link.
You double click here on the left side and the here is showing you the result.
And those are the result of the scanning the higher one is 34 and we're gonna check the second injection
you Ringo have to link and this is the first link it's infected the sequence.
Now let's take this thing and copy it and put it inside the browser because this what will be working
on it.
This is what I'm looking for.
The infected link so I'll open here a browser so that you open
an I will open a new tab and this is the infected secret injection like this what do you need to be
able to get the remaining of information.
So once I get this link I actually have to I mean if this one is not working you can press the second
but definitely if he's getting use the infected link most of the time I'm gonna work on the next lecture
we're going to see how to use this infected link to check what that it is they have on the server what
information they have inside.
What are the user accounts and the user puzzle and the password is encrypted he'll also decrypt the
possible.
So we're gonna start using this amazing tool called and that sequel map.
Let's see how to use it.