Selected Node
SQL Methodology
sqldatabasestart
Purpose
Identify database-backed functionality, injection points, DBMS type, authentication paths, exposed database services, and post-exploitation options.
Why It Matters
SQL issues can lead to credential theft, file read/write, command execution, service-account compromise, or lateral movement.
If You See This
- •Login/search/filter/order parameters.
- •SQL errors.
- •Exposed MSSQL/MySQL/Postgres.
- •Database credentials found.
Commands
SQLMap controlled test
sqlmap -u 'http://TARGET/page?id=1' --batch --risk 1 --level 2
Initial low-risk SQL injection validation.
Manual error probes
'
"
'-- -
"-- -
')-- -
' OR '1'='1'-- -
Manual probes to identify injectable behavior.
Rabbit Holes
- •Running destructive SQLMap options early.
- •Skipping manual confirmation.
- •Not identifying DBMS.
- •Ignoring database creds in config files.
Evidence to Capture
- •Injection parameter
- •DBMS
- •Database user
- •Privileges
- •Data accessed