And all of the lectures so far we were exploiting.
Eskil injections manually.
So we were injecting the code into the L or into the text boxes and this video I'm going to show you
a tool called askew mob which allows you to do everything we learned so far and even more stuff.
This tool can be used against my school databases.
Which one was that we were having.
The example on it can also be used against Microsoft.
SAGAL Oracle and other database types the tool is very useful and is very handy in many cases.
Sometimes the injections aren't as nice as the one we see sometimes you only get one output for each
record and you have to look through all the outputs so the tool can automate that and just do everything
for you.
Much easier and much simpler so let's first of all get the URL that we were using for the injection.
So I have that text file here that we were using and I have the URL that we were using before.
So as the user ID for the HP user name is admin password admin pass you don't really need to know what
the username and password.
So I'm actually just going to put anything here.
So just to assume that we don't know the password so we're only injecting injecting Eskil injections
we don't really need to know any of this stuff.
All I'm gonna do is copy this and then I'm gonna run a school map.
And I'm gonna do you specify the URL and I'll put my target and I'm gonna make sure that I have it between
two quotation marks so that it doesn't ignore anything and any signs in the middle so we have some signs
and characters in the middle that I wanted to all be treated as one year out.
So all I did is ask your mob you my target and I'm gonna hit enter and the will automatically look through
all the parameters.
So it's going to look through the user info through the username and password to see if any of them
is injectable.
And then once it does that it's going to store it in its memory so it's going to know that this is injectable
and then we'll be able to further exploit the target.
So as you can see now it's thinking that our target could be my school or POS dressed as girl.
That's asking me if I if it should skip other tests and I'm gonna say yes because I know it's my Eskil
and now it's asking me if it should do all the tests for both databases and I'm gonna say yes assuming
that I'm not sure which one it is.
I know it's my skill but I'm just gonna let it do its thing and we'll see if it can do it properly or
not.
So at the moment it's chicken if it's progress que el and I'm assuming it's gonna know that it's not
and then we're going to it's gonna know that it's my escape.
It just found out that the user name seems to be injectable and sure enough it's still in us here that
the parameter username is vulnerable and we can inject it.
So it's asking me do I want to check the other parameters such as the password and all of them.
I can say yes and that'd do it.
I'm gonna say no because I don't mind if it just uses the user name for the injections so it's all good.
Now I ask you Mark knows that the target is injectable and it knows that it's going to use the user
name parameter to inject stuff and I can see that it's figured out that it's running Linux you want
to and it's figured out that it's using view with a patch two point 2.8 and it's used in my ask crowd
server as the database server so let's run a scale map help and see what we can do now.
Now this tool is really big and it allows you to do a lot of things.
So in this video I'm actually just going to show you a quick look on the video and I recommend you spend
more time with it and try to see what else you can do with it.
OK so let's try to get the current user and we're going to try to get the current database so we're
going to use the same command that we used before.
And I'm just going to add to it.
D.B. I'm asked to get the current databases
or DB is sorry as you can see we got all the database that we have.
So we have the v w a we have information schema which exploit my as well.
I was 10 which was the one that we were exploiting before antique weeki.
Now if we do current user
you can see that we are rude and if I do current database
will see that I was 10 is our current database.
So now let's try to get the tables for Rs 10.
So remember when we did select table name from information schema the tables where table name were a
table schema is equal to ours then we're gonna do we're gonna let ask you a map do all of that for us.
And so the command is going to be we're going to ask it to get all the tables for us and we're going
to use the D option to specify the database and our database is going to be called I was 10
and as you can see it got us all the tables that exist.
And remember it's the same we've got accounts logs table and the credit cards as well.
And now if we want to get the columns then we can use the same command again and we're gonna say Get
me the columns
where the table is called accounts and the database is I was 10 and right here we can see that we got
the columns so we have these admin password and username and we can get the data using the dump option
so it's the same command that we used before so we'll get in the from the table that's called accounts
and the database that is called I was 10 I want you to get me all the data and here we go we got all
the data we have the admin it's password admin pass and we have Adrian and his password is some password
and we got all the data right here.
So I is it.
As I said the tool is very useful it can be used to make our life much easier and it does everything
automatically and it can do everything we did and it can even do more stuff.