Quick Question About Sql/Map

What is the easiest way to extract admin user from a website with sql error?

2 Likes

You’d honestly just need to first see if a admin exists in the database of the website. There are many swicthes you can use in sqlmap to accomplish the retreival of this kind of data. You can try these switches to find out if the user is a root user, the privedges and roles that root or admin user has.
Ideally you’d want to make sure you are asking the server the correct way of providing you data.
Look up these switches to give you a better understanding of exactly what they do. Sqlmap is a very powerful tool and can give you alot of results if you learn how to use it properly.

“–is-dba --privileges --roles --users”

1 Like