The SQLMap Essentials module teaches the basics of using SQLMap to discover various types of SQL Injection vulnerabilities, all the way to the advanced enumeration of databases to retrieve all data of interest.s.
SQLMap Essentials - Skills Assessment
You are given access to a web application with basic protection mechanisms. Use the skills learned in this module to find the SQLi vulnerability with SQLMap and exploit it accordingly. To complete this module, find the flag and submit it here.
What's the contents of table final_flag?Walkthrough
I first started exploring the website using BurpSuite in order to find potential attack vectors.
At some point a found a POST request that have an ID in the body, so I saved that one in order to try it.
I went with:
sqlmap -r ../req.txt --batch --dump
Which was able to obtain the database and table’s names but not their contents.
So I switched to:
qlmap -r ../req.txt --dump -D production -T final_flag --tamper=between
to get the contents. This worked fine so I was able to get the flag.