SQL Injection to Shell
This exercise used a vulnerable machine provided by PenTester Labs ( https://pentesterlab.com ). The goal of this exercise was to use SQL injection in a PHP based website to examine how an attacker gains access to the administration pages. The only other resource used to complete this exercise was a hash decrypter found at https://hashkiller.co.uk/md5-decrypter.aspx . Structured Query Language (SQL), according to http://sqlcourse.com : "SQL stands for Structured Query Language. SQL is used to communicate with a database. According to ANSI (American National Standards Institute), it is the standard language for relational database management systems. SQL statements are used to perform tasks such as update data on a database, or retrieve data from a database. Some common relational database management systems that use SQL are: Oracle, Sybase, Microsoft SQL Server, Access, Ingres, etc. Although most database systems use SQL, most of them also have their own additional propr...