SQL injection attack automation with SQLMap
The Structured Query Language (SQL) is a programming language that’s universal to pretty much all modern database engines. It’s used on commercial big iron systems such as Oracle, db2, and Microsoft SQL, as well as on Free Open Source Software (FOSS) systems such as MySQL, MariaDB, and PostgreSQL. The web applications in the Metasploitable2 virtual machine, as well as legitimate web applications such as WordPress and Joomla, are all powered by some sort of a FOSS database engine. This works well, as long as there are no security bugs or configuration errors in either the web server software or the database engine software. These types of problems can expose your server to SQL injection attacks. An attacker who’s clever with SQL injection can perform lots of different malicious deeds, such as:
- Spoofing user identities
- Tampering with existing data
- Accessing sensitive data in databases
- Destroying...