database Archives - Tech Chronicles

BSQLinjector – Blind SQL Injection Tool Download in Ruby

Majordomo — Fri, 13 Dec 2019 13:18:46 +0000

BSQLinjector is an easy to use Blind SQL Injection tool in Ruby, that uses blind methods to retrieve data from SQL databases. The download is below.

The author recommends using the “--test” switch to clearly see how configured payload looks like before sending it to an application.

What is Blind SQL Injection?

Blind SQL Injection is a type of SQL Injection (SQLi) attack that asks the database true or false questions and determines the answer based on the application’s response. This attack is often used when the web application is configured to show generic error messages but has not mitigated the code that is vulnerable to SQL injection.

Using BSQLinjector for Blind SQL Injection

  –file	    Mandatory – File containing valid HTTP request and SQL injection point (SQLINJECT). (–file=/tmp/req.txt)<br />
  –pattern	    Mandatory – Pattern to look for when query is true. (–pattern=truestatement)<br />
  –prepend	    Mandatory – Main payload. (–prepend=”abcd’and’a’=’b’+union+select+’truestatement’+from+table+where+col%3d’value’+and+substr(password,”<br />
  –append	    How to end our payload. For example comment out rest of SQL statement. (–append=’#)<br />
  –schar	    Character placed around chars. This character is not used while in hex mode. (–schar=”‘”)<br />
  –2ndfile	    File containing valid HTTP request used in second order exploitation. (–2ndfile=/tmp/2ndreq.txt)</p>
<p>  –mode	    Blind mode to use – (between – b (generates less requests), moreless – a (generates less requests by using “<“, “>”, “=” characters), like – l (complete bruteforce), equals – e (complete bruteforce)). (–mode=l)<br />
  –hex		    Use hex to compare instead of characters.<br />
  –case	    Case sensitivity.</p>
<p>  –ssl		    Use SSL.<br />
  –proxy	    Proxy to use. (–proxy=127.0.0.1:8080)</p>
<p>  –test	    Enable test mode. Do not send request, just show full payload.<br />
  –special	    Include all special characters in enumeration.<br />
  –start	    Start enumeration from specified character. (–start=10)<br />
  –max		    Maximum characters to enumerate. (–max=10)<br />
  –timeout	    Timeout in waiting for responses. (–timeout=20)<br />
  –only-final	Stop showing each enumerated letter.<br />
  –comma	    Encode comma.<br />
  –bracket	    Add brackets to the end of substring function. –bracket=”))”<br />
  –hexspace	Use space instead of brackets to split hex values.<br />
  –verbose	    Show verbose messages.

—file Mandatory – File containing valid HTTP request and SQL injection point (SQLINJECT). (—file=/tmp/req.txt)

—pattern Mandatory – Pattern to look for when query is true. (—pattern=truestatement)

—prepend Mandatory – Main payload. (—prepend=“abcd’and’a’=’b’+union+select+’truestatement’+from+table+where+col%3d’value’+and+substr(password,”

—append How to end our payload. For example comment out rest of SQL statement. (—append=‘#)

–schar Character placed around chars. This character is not used while in hex mode. (–schar=”‘“)

–2ndfile File containing valid HTTP request used in second order exploitation. (–2ndfile=/tmp/2ndreq.txt)

–mode Blind mode to use – (between – b (generates less requests), moreless – a (generates less requests by using “<“, “>“, “=” characters), like – l (complete bruteforce), equals – e (complete bruteforce)). (–mode=l)

–hex Use hex to compare instead of characters.

–case Case sensitivity.

–ssl Use SSL.

–proxy Proxy to use. (–proxy=127.0.0.1:8080)

–test Enable test mode. Do not send request, just show full payload.

–special Include all special characters in enumeration.

–start Start enumeration from specified character. (–start=10)

–max Maximum characters to enumerate. (–max=10)

–timeout Timeout in waiting for responses. (–timeout=20)

–only-final Stop showing each enumerated letter.

–comma Encode comma.

–bracket Add brackets to the end of substring function. –bracket=”))“

—hexspace Use space instead of brackets to split hex values.

—verbose Show verbose messages.

Example usage:

 ruby ./BSQLinjector.rb –pattern=truestatement –file=/tmp/req.txt –schar=”‘” –prepend=”abcd’and’a’=’b’+union+select+’truestatement’+from+table+where+col%3d’value’+and+substr(password,” –append=”‘#” –ssl

1	ruby ./BSQLinjector.rb —pattern=truestatement —file=/tmp/req.txt —schar=“‘” —prepend=“abcd’and’a’=’b’+union+select+’truestatement’+from+table+where+col%3d’value’+and+substr(password,” —append=“‘#” —ssl

The most famous Blind SQL injection tool would definitely be sqlmap, which automates it.

You can download BSQLinjector here:

BSQLinjector.rb

Or read more here.

The post BSQLinjector – Blind SQL Injection Tool Download in Ruby appeared first on Tech Chronicles.

Manage MySQL / MariaDB & PostgreSQL Database Server with Adminer

Majordomo — Thu, 17 Jan 2019 17:28:58 +0000

Admirer is a free and open source Database management system that is packaged in a single PHP file. This guide will discuss how you can install and use Adminer to manage MySQL, MariaDB and PostgreSQL database servers. Admirer has supports for MySQL, MariaDB, PostgreSQL, SQLite, MS SQL, Oracle, SimpleDB, Elasticsearch, MongoDB, Firebird e.t.c.

You can replace phpMyAdmin with Adminer and enjoy its simple and intuitive user interface. See phpMyAdmin vs Adminer page. The only requirement of Admirer is PHP 5/7 with enabled sessions.

Features of Adminer Database Management Tool

Here are the standard features of Admirer.

Connect to a database server with username and password
Select an existing database or create a new one
List fields, indexes, foreign keys and triggers of table
Change name, engine, collation, auto_increment and comment of table
Alter name, type, collation, comment and default values of columns
Add and drop tables and columns
Create, alter, drop and search by indexes including fulltext
Create, alter, drop and link lists by foreign keys
Create, alter, drop and select from views
Create, alter, drop and call stored procedures and functions
Create, alter and drop triggers
List data in tables with search, aggregate, sort and limit results
Insert new records, update and delete the existing ones
Supports all data types, blobs through file transfer
Execute any SQL command from a text field or a file
Export table structure, data, views, routines, databases to SQL or CSV
Print database schema connected by foreign keys
Show processes and kill them
Display users and rights and change them
Display variables with links to documentation
Manage events and table partitions (MySQL 5.1)
Schemas, sequences, user types (PostgreSQL)

Install Adminer on Linux

Adminer requires PHP, let’s ensure it is installed in our system.

Step 1: Install PHP

----- Install PHP on Ubuntu / Debian ------
$ sudo apt -y install php php-common php-pear php-mbstring libapache2-mod-php php-mysql

----- Install PHP on CentOS / Fedora ------
$ sudo yum -y install php php-pear php-mbstring php-mysqlnd

Once PHP is installed, download Adminer php script.

Step 2: Install Apache Web Server

We’ll use Apache httpd web server to host Adminer on Linux.

----- Install Apache on Ubuntu / Debian ------
$ sudo apt -y install apache2 wget
$ sudo systemctl enable --now wget

----- Install Apache on CentOS / Fedora ------
$ sudo yum -y install httpd wget
$ sudo systemctl enable --now httpd

Step 3: Install Adminer on Linux – Ubuntu / Debian / CentOS / Fedora

Now download the latest Adminer PHP script and place it in your Web document root.

export VER="4.7.4"
sudo wget -O /var/www/html/adminer.php https://github.com/vrana/adminer/releases/download/v${VER}/adminer-${VER}.php

Access Adminer Dashboard on http://serverip/adminer.php.

Connect to your database by selecting the type on the dropdown menu.
Input database access details.
You should get to a dashboard.

A supported PHP extension is required when connecting to a database backend.

The post Manage MySQL / MariaDB & PostgreSQL Database Server with Adminer appeared first on Tech Chronicles.

How To Install MariaDB 10.4 on Fedora 31/30/29

Majordomo — Sun, 13 Jan 2019 23:02:12 +0000

This guide will discuss the steps required to install MariaDB 10.4 on Fedora 31/30/29. MariaDB is a widely used relational database server that is community-developed, forked from MySQL relational database management system.

MariaDB is an open-source and free software released under the General Public License version 2. The latest stable release as of this article writing is version 10.4. The MariaDB packages are distributed as binaries on mariadb.org. But you also have an option to build it from source should you choose to do so.

So let’s start to install MariaDB 10.4 on Fedora 31/30/29.

Step 1: Update Fedora machine

Let’s make sure we’re running the latest versions of Fedora packages in our system.

sudo dnf -y update

Reboot the server after upgrade.

sudo systemctl reboot

Step 2: Add MariaDB RPM repository

Now add the MariaDB RPM repository to your system.

Fedora 31/30:

sudo tee /etc/yum.repos.d/mariad.repo<http://yum.mariadb.org/10.4/fedora30-amd64
gpgkey=https://yum.mariadb.org/RPM-GPG-KEY-MariaDB
gpgcheck=1
EOF

Fedora 29:

sudo tee /etc/yum.repos.d/mariad.repo<http://yum.mariadb.org/10.4/fedora29-amd64
gpgkey=https://yum.mariadb.org/RPM-GPG-KEY-MariaDB
gpgcheck=1
EOF

Step 3: Install MariaDB 10.4 on Fedora 31/30/29

Now install MariaDB 10.4 on Fedora 31/30/29 Linux system.

sudo dnf -y install MariaDB-server

Below is the dependency tree and list of packages to be installed.

Dependencies resolved.
===================================================================================================================================================
 Package                                    Architecture               Version                                   Repository                   Size
===================================================================================================================================================
Installing:
 MariaDB-server                             x86_64                     10.4.8-1.fc30                             mariadb                      25 M
Installing dependencies:
 boost-program-options                      x86_64                     1.69.0-9.fc31                             fedora                      161 k
 libaio                                     x86_64                     0.3.111-6.fc31                            fedora                       24 k
 lsof                                       x86_64                     4.93.2-2.fc31                             fedora                      240 k
 perl-Carp                                  noarch                     1.50-439.fc31                             fedora                       29 k
 perl-DBI                                   x86_64                     1.642-5.fc31                              fedora                      701 k
 perl-Data-Dumper                           x86_64                     2.174-440.fc31                            fedora                       57 k
 perl-Digest                                noarch                     1.17-439.fc31                             fedora                       24 k
 perl-Digest-MD5                            x86_64                     2.55-439.fc31                             fedora                       36 k
 perl-Encode                                x86_64                     4:3.01-439.fc31                           fedora                      1.8 M
 perl-Errno                                 x86_64                     1.30-446.fc31                             fedora                       25 k
 perl-Exporter                              noarch                     5.73-440.fc31                             fedora                       32 k
 perl-File-Path                             noarch                     2.16-439.fc31                             fedora                       36 k
 perl-File-Temp                             noarch                     1:0.230.900-439.fc31                      fedora                       60 k
 perl-Getopt-Long                           noarch                     1:2.51-1.fc31                             fedora                       60 k
 perl-HTTP-Tiny                             noarch                     0.076-439.fc31                            fedora                       55 k
 perl-IO                                    x86_64                     1.40-446.fc31                             fedora                       92 k
 perl-MIME-Base64                           x86_64                     3.15-439.fc31                             fedora                       30 k
 perl-Math-BigInt                           noarch                     1:1.9998.16-439.fc31                      fedora                      185 k
 perl-Math-Complex                          noarch                     1.59-446.fc31                             fedora                       57 k
 perl-Net-SSLeay                            x86_64                     1.88-3.fc31                               fedora                      355 k
 perl-PathTools                             x86_64                     3.78-439.fc31                             fedora                       86 k
 perl-Pod-Escapes                           noarch                     1:1.07-439.fc31                           fedora                       20 k
 perl-Pod-Perldoc                           noarch                     3.28.01-442.fc31                          fedora                       85 k
 perl-Pod-Simple                            noarch                     1:3.39-2.fc31                             fedora                      214 k
 perl-Pod-Usage                             noarch                     4:1.69-439.fc31                           fedora                       32 k
 perl-Scalar-List-Utils                     x86_64                     3:1.52-439.fc31                           fedora                       66 k
 perl-Socket                                x86_64                     4:2.029-4.fc31                            fedora                       56 k
 perl-Storable                              x86_64                     1:3.15-441.fc31                           fedora                       97 k
 perl-Term-ANSIColor                        noarch                     4.06-440.fc31                             fedora                       44 k
 perl-Term-Cap                              noarch                     1.17-439.fc31                             fedora                       22 k
 perl-Text-ParseWords                       noarch                     3.30-439.fc31                             fedora                       16 k
 perl-Text-Tabs+Wrap                        noarch                     2013.0523-439.fc31                        fedora                       23 k
 perl-Time-Local                            noarch                     2:1.280-439.fc31                          fedora                       32 k
 perl-URI                                   noarch                     1.76-5.fc31                               fedora                      108 k
 perl-Unicode-Normalize                     x86_64                     1.26-439.fc31                             fedora                       97 k
 perl-constant                              noarch                     1.33-440.fc31                             fedora                       23 k
 perl-interpreter                           x86_64                     4:5.30.0-446.fc31                         fedora                      6.1 M
 perl-libnet                                noarch                     3.11-440.fc31                             fedora                      117 k
 perl-libs                                  x86_64                     4:5.30.0-446.fc31                         fedora                      1.7 M
 perl-macros                                x86_64                     4:5.30.0-446.fc31                         fedora                       21 k
 perl-parent                                noarch                     1:0.237-439.fc31                          fedora                       14 k
 perl-podlators                             noarch                     1:4.12-2.fc31                             fedora                      113 k
 perl-threads                               x86_64                     1:2.22-439.fc31                           fedora                       58 k
 perl-threads-shared                        x86_64                     1.60-440.fc31                             fedora                       44 k
 MariaDB-client                             x86_64                     10.4.8-1.fc30                             mariadb                      11 M
 MariaDB-common                             x86_64                     10.4.8-1.fc30                             mariadb                      81 k
 galera-4                                   x86_64                     26.4.2-1.fc30.fc30                        mariadb                      14 M
Installing weak dependencies:
 perl-IO-Socket-IP                          noarch                     0.39-440.fc31                             fedora                       42 k
 perl-IO-Socket-SSL                         noarch                     2.066-6.fc31                              fedora                      239 k
 perl-Mozilla-CA                            noarch                     20180117-6.fc31                           fedora                       12 k

Transaction Summary
===================================================================================================================================================
Install  51 Packages

Total download size: 64 M
Installed size: 237 M
Downloading Packages:

Step 4: Configure MariaDB service on Fedora 31/30/29

After installation of MariaDB 10.4 on Fedora 31/30/29, start the service and set it to start at system boot.

sudo systemctl enable --now mariadb

Check service status:

$ systemctl status mariadb
● mariadb.service - MariaDB 10.4.8 database server
   Loaded: loaded (/usr/lib/systemd/system/mariadb.service; enabled; vendor preset: disabled)
  Drop-In: /etc/systemd/system/mariadb.service.d
           └─migrated-from-my.cnf-settings.conf
   Active: active (running) since Sun 2019-11-03 07:13:45 UTC; 8s ago
     Docs: man:mysqld(8)
           https://mariadb.com/kb/en/library/systemd/
  Process: 3671 ExecStartPre=/bin/sh -c systemctl unset-environment _WSREP_START_POSITION (code=exited, status=0/SUCCESS)
  Process: 3672 ExecStartPre=/bin/sh -c [ ! -e /usr/bin/galera_recovery ] && VAR= ||   VAR=`/usr/bin/galera_recovery`; [ $? -eq 0 ]   && systemctl>
  Process: 3712 ExecStartPost=/bin/sh -c systemctl unset-environment _WSREP_START_POSITION (code=exited, status=0/SUCCESS)
 Main PID: 3681 (mysqld)
   Status: "Taking your SQL requests now..."
    Tasks: 30 (limit: 2345)
   Memory: 63.2M
      CPU: 189ms
   CGroup: /system.slice/mariadb.service
           └─3681 /usr/sbin/mysqld

Nov 03 07:13:45 fed31.computingforgeeks.com mysqld[3681]: 2019-11-03  7:13:45 0 [Note] InnoDB: 10.4.8 started; log sequence number 139827; transac>
Nov 03 07:13:45 fed31.computingforgeeks.com mysqld[3681]: 2019-11-03  7:13:45 0 [Note] Plugin 'FEEDBACK' is disabled.
Nov 03 07:13:45 fed31.computingforgeeks.com mysqld[3681]: 2019-11-03  7:13:45 0 [Note] InnoDB: Loading buffer pool(s) from /var/lib/mysql/ib_buffe>
Nov 03 07:13:45 fed31.computingforgeeks.com mysqld[3681]: 2019-11-03  7:13:45 0 [Note] Server socket created on IP: '::'.
Nov 03 07:13:45 fed31.computingforgeeks.com mysqld[3681]: 2019-11-03  7:13:45 0 [Note] InnoDB: Buffer pool(s) load completed at 191103  7:13:45
Nov 03 07:13:45 fed31.computingforgeeks.com mysqld[3681]: 2019-11-03  7:13:45 0 [Note] Reading of all Master_info entries succeeded
Nov 03 07:13:45 fed31.computingforgeeks.com mysqld[3681]: 2019-11-03  7:13:45 0 [Note] Added new Master_info '' to hash table
Nov 03 07:13:45 fed31.computingforgeeks.com mysqld[3681]: 2019-11-03  7:13:45 0 [Note] /usr/sbin/mysqld: ready for connections.
Nov 03 07:13:45 fed31.computingforgeeks.com mysqld[3681]: Version: '10.4.8-MariaDB'  socket: '/var/lib/mysql/mysql.sock'  port: 3306  MariaDB Serv>
Nov 03 07:13:45 fed31.computingforgeeks.com systemd[1]: Started MariaDB 10.4.8 database server.

Harden you MariaDB server installation.

$ sudo mysql_secure_installation

NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB
      SERVERS IN PRODUCTION USE!  PLEASE READ EACH STEP CAREFULLY!

In order to log into MariaDB to secure it, we'll need the current
password for the root user. If you've just installed MariaDB, and
haven't set the root password yet, you should just press enter here.

Enter current password for root (enter for none): 
OK, successfully used password, moving on...

Setting the root password or using the unix_socket ensures that nobody
can log into the MariaDB root user without the proper authorisation.

You already have your root account protected, so you can safely answer 'n'.

Switch to unix_socket authentication [Y/n] Y
Enabled successfully!
Reloading privilege tables..
 ... Success!


You already have your root account protected, so you can safely answer 'n'.

Change the root password? [Y/n] Y
New password: 
Re-enter new password: 
Password updated successfully!
Reloading privilege tables..
 ... Success!


By default, a MariaDB installation has an anonymous user, allowing anyone
to log into MariaDB without having to have a user account created for
them.  This is intended only for testing, and to make the installation
go a bit smoother.  You should remove them before moving into a
production environment.

Remove anonymous users? [Y/n] Y
 ... Success!

Normally, root should only be allowed to connect from 'localhost'.  This
ensures that someone cannot guess at the root password from the network.

Disallow root login remotely? [Y/n] Y
 ... Success!

By default, MariaDB comes with a database named 'test' that anyone can
access.  This is also intended only for testing, and should be removed
before moving into a production environment.

Remove test database and access to it? [Y/n] Y
 - Dropping test database...
 ... Success!
 - Removing privileges on test database...
 ... Success!

Reloading the privilege tables will ensure that all changes made so far
will take effect immediately.

Reload privilege tables now? [Y/n] Y
 ... Success!

Cleaning up...

All done!  If you've completed all of the above steps, your MariaDB
installation should now be secure.

Thanks for using MariaDB!

Use the root user and password set to access MariaDB shell:

$ mysql -u root -p
Enter password: 
Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 19
Server version: 10.4.8-MariaDB MariaDB Server

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

Version installed can be checked from the DB shell.

MariaDB [(none)]> SELECT VERSION();
+----------------+
| VERSION()      |
+----------------+
| 10.4.8-MariaDB |
+----------------+
1 row in set (0.000 sec)

This confirms successful installation of MariaDB 10.4 on Fedora 31/30/29 Linux system.

The post How To Install MariaDB 10.4 on Fedora 31/30/29 appeared first on Tech Chronicles.