Jijo K Jose

Personal Website

Archive for November, 2012

November 30th, 2012

Hacking, Linux, OS

2 Comments »

Hacking Website Database with SQLmap in Backtrack 5 or Linux OS

All we needed is a vulnerability webpage. Lets say you have a url like this

http://www.site.com/section.php?id=51

and that it is prone to sql injection because the developer of that site did not properly escape the parameter id.

This can be simply tested by trying to open the url

http://www.site.com/section.php?id=51'

We just added a single quote in the parameter. If this url throws an error then it is clear that the database has reacted with an error because it got an unexpected single quote..

To understand the process please change video quality to 1080p and watch in HD Quality

Test and Boot an ISO Image Using Virtual Machine

To test an ISO image without burning to a disc using Oracle VirtualBox or VMWare Workstation. Of course, you can use any of the other virtual machine software to get a similar result. I also have Virtual PC installed and it too does a good job of mounting ISO images for testing, but for this article VirtualBox is used because it’s freely available to run on all Windows and Unix systems.

Simply follow the steps to load an ISO image into VirtualBox:

Step 1

Download and install VirtualBox.

Step 2

Run VirtualBox.