Let's take another example.
But a life on.
But in this example we will not die if that deep.
I mean we will reach a stage where we are comfortable that we can get everything but we will not do
anything illegal.
So there is differently in Google that allow you to search for infected website that is something called
Google Docs.
So if you google it just search for Google Docs for let me show it to you
Google Docs for database.
Google looks for second injection and it would give you some keywords that allow you to search for an
infected website.
Not I mean hundred percent infected but you know you will find a good list of the infected Web sites
that you can use.
So if you search you'll be able to get some search key searching key like this one or that one that
allow you to search for an infected Web site.
So I tried one and I will just show you a proof of concept no more.
And this is a site.
And uh I'll take it.
This is a you are and I'm going to try to sequence map on that and let's see if it's going to work or
not.
So uh here you go.
Let me opens the terminal.
A terminal.
Uh open terminal and OKAY.
NOW WHAT I'M GONNA DO I'M GONNA JUST TYPE let me increase the size for you.
It would be clearer zoom in zoom in again and let's try
sequel man.
Minus Hugh.
And let's try first to get information about the database inside this one.
The minus minus the B S
Okay we'll get the first question.
Click on yes and the second one.
Also yes.
So he's trying to enumerate the database on the server and let's see if would be able to get something
or not.
Now one more time to this stage if you're doing that online is OK.
I mean getting the database name is fine.
It's not the perfect thing to do but it's fine.
It's not something that will you know cause your problem.
But if you go deeper than that.
This will be a problem.
So we're just going to stop once we get some information.
And once you know that you can go deeper than that.
But do not do that life.
Okay.
So you know seem great because he was able to get me that there is a zero using Microsoft sequel five
and this is the available database.
We have two different database information schema and the Romanian is v as information scheme measure
is not a database.
Just having some metadata.
So most probably this would be zone.
So if you continues the comments that we explained and getting the table inside the database checking
the right table and getting the column and then getting the data you'll be able to get a valid user
name and password.
You will be able to get all the user name pass and even say if they could have more information they
could have Social Security personal information credit card.
So this is how sequel injection work.
And this is two different example.
One of them is in our lab.
And the second one is a demo.
I will not and I will I will I will not go deeper than that.
When it come to life unless I have a permission and I use encourage you not to do more than set for
life website unless you have the permission of course.
So this is secret injection.
If you need more resources because actually second injection it's a very very deep subject but it's
very powerful.
I mean if you master the secret injection this tool actually will be very very good skills to have.
If you need more resources let me know.
I can share with you a very very good resources if you plan to dive deeper into secret injection practice
it and practice on the swap application as a broken web applications that I showed you how to install
it and how to run it in a virtual machine.
It has many web application test work see how it works.
I just want to add one point that there is one option in sequel map.
It's called minus minus level.
Sometimes when you try to to to use a sequel map it will tell you that you know he was not able to find
anything.
You know that this link is infected but if you try to use minus minus use it regularly it will not get
you any reason.
So in this case what will do its type minus minus level and you have from one to five from one to five.
And this will do a more deeper search.
I mean he will use as a sequel injection mythology and other sequel injection tool to be able to get
more information but this will take time and it will exhaust the database.
So if it didn't work on the first time try to use minus minus level two or three or five is the maximum.
But this is in your lab to not try the minus minus level in a production environment or on the Life
website because it's because problem.
So this is one more tools that you can use that will drive a little bit or will dig a little bit deeper
into the database checking or manipulating the information inside.