-
Book Overview & Buying
-
Table Of Contents
Metasploit Penetration Testing Cookbook - Third Edition
By :
Metasploit has several modules that exploit SQL injection vulnerabilities, allowing us to test and verify whether our targets are susceptible to this attack.
For this recipe, we will install a vulnerable version of ATutor, a free open source LMS.
To download ATutor 2.2.1, go to https://www.exploit-db.com/exploits/39514/ and click the save button next to the vulnerable app:

To install ATutor, follow the installation instructions at the official site: http://www.atutor.ca/atutor/docs/installation.php.
This module exploits a SQL injection vulnerability and an authentication weakness vulnerability in ATutor 2.2.1, meaning that we can bypass authentication, reach the administrator's interface, and upload malicious code.
exploit/multi/http/atutor_sqli exploit options:
check command to verify if the target is vulnerable:msf exploit(atutor_sqli) > check [+] 192.168.216.136:80 The target...
Change the font size
Change margin width
Change background colour