+- Sinisterly (https://sinister.ly)
+-- Forum: Hacking (https://sinister.ly/Forum-Hacking)
+--- Forum: Website & Server Hacking (https://sinister.ly/Forum-Website-Server-Hacking)
+--- Thread: How to steal website database without sql injection (/Thread-How-to-steal-website-database-without-sql-injection)
How to steal website database without sql injection - iii23 - 05-09-2020
Sqlmap can't be the only the way to steal dbs, so are their any other options?
RE: How to steal website database without sql injection - myorder - 05-12-2020
Kind of new to this myself, however, have you ever tried "index of /" "/whatyourlookingfor/" for example: "index of /" "/user/orders/" search this with the "" on google? I find alot of DB. but dont understand how to access the .php server side of file? i have Nord VPN but just learning it as well.
RE: How to steal website database without sql injection - Pikami - 05-12-2020
(05-09-2020, 03:27 PM)iii23 Wrote: Sqlmap can't be the only the way to steal dbs, so are their any other options?
Sql injection isn't the only way to get a sites database.
Here's a couple of things you can do:
- You can use dirbuster to find open directories that might host interesting stuff like db backups or configs.
- You can search for site's admins credentials in leaks from other sites.
- You can hack the server hosting the site and dump it from there
RE: How to steal website database without sql injection - Stratus - 06-25-2020
Theres other tools you can use too, but like sqlmap is just the most popular. Ulitimately all the sql tools do the samish thing. If you're looking to avoid sqli, its gonna be a case by case thing for each site.
RE: How to steal website database without sql injection - deadlyfamous - 07-31-2020
You can use dirbuster, pretty good u can find tuts on youtube