Working with Sqlsus Tool on Kali Linux

Example/Usage: 1) Firstly, generate a configuration file by using the following command

sudo sqlsus -g sql.cfg

2) Now, Enter the target URL in sql.cfg file. Use a text editor to open the file.

mousepad sql.cfg

3) Run the sql.cfg file along with the tool.

sudo sqlsus ./sql.cfg

4) Now, we are onto the database, we can retrieve the data from the database.

We have got the database details of the target web application.

We have retrieved the table names of the target database.

Sqlsus tool is an automated cyber security tool developed in the Perl Language which has the capability of detecting SQL Injection and Takeover the access of the database if the web application is vulnerable. Sqlsus tool is a command-line-based tool so you can pass the flags or tags in the command itself. Sqlsus can retrieve the structure of the database, inject your custom SQL payload for more assurance to exploitation, download files for the webserver or crawl the website. Many offensive tasks can be done through this. So let’s move to the installation of the tool on Kali Linux Machine

Note: Make Sure You have Perl Installed on your System, as this is a Perl-based tool. Click to check the Installation process: Perl Installation Steps on Linux