TD Cyber Labs

Cyber LabsBY TUTORIALS DOJO

Labs Tool Trainers Learning Paths Docs

No sign-in required

BackCyber Labs / SQL Injection with sqlmap Simulated 0 / 100 pts

SQL Injection with sqlmap

A product page passes an id straight into a query. Confirm the injection with sqlmap, enumerate the databases, and dump the users table to recover the flag.

Available tools: sqlmap · curl · nmap
Target: shop.corp.lab (10.10.10.95)

✓

Which GET parameter is injectable?

25 pts

Point sqlmap at the URL with the id parameter.

✓

Name the application database (not a default one)

30 pts

List databases with --dbs.

✓

Dump the users table and submit the admin flag

45 pts

Dump the table with --dump.

Applications

target 10.10.10.95--:--

learner@kali: ~ — Terminal

Congratulations!

You completed SQL Injection with sqlmap.

Points: 0 / 100
Tasks solved: 0 / 3