{"id":1424,"date":"2018-02-01T15:18:24","date_gmt":"2018-02-01T15:18:24","guid":{"rendered":"https:\/\/hardsoftsecurity.es\/?p=1424"},"modified":"2018-03-08T15:12:55","modified_gmt":"2018-03-08T15:12:55","slug":"sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql","status":"publish","type":"post","link":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/02\/01\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\/","title":{"rendered":"SQLiv, buscar autom\u00e1ticamente p\u00e1ginas web con inyecciones SQL."},"content":{"rendered":"<p>Hola a tod@s hoy os traigo una herramienta que me ha gustado bastante, esta herramienta se basa en al b\u00fasqueda automatizada de p\u00e1ginas vulnerables a inyecciones SQL. Seg\u00fan descrito por su creador en su <a href=\"https:\/\/github.com\/Hadesy2k\/sqliv\" target=\"_blank\" rel=\"noopener\">GitHub<\/a>, esta herramienta es utilizada para la b\u00fasqueda masiva de inyecciones sql, tambi\u00e9n menciona que la herramienta realiza las tareas de b\u00fasqueda de manera que aprovecha la ventaja de multiproceso y as\u00ed esta herramienta es mucho m\u00e1s r\u00e1pida.<\/p>\n<p><img data-recalc-dims=\"1\" fetchpriority=\"high\" decoding=\"async\" data-attachment-id=\"1433\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2018\/02\/01\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\/sql-injection\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/SQL-Injection.jpg?fit=1000%2C482&amp;ssl=1\" data-orig-size=\"1000,482\" data-comments-opened=\"1\" data-image-title=\"SQL-Injection\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/SQL-Injection.jpg?fit=800%2C386&amp;ssl=1\" class=\" wp-image-1433 aligncenter\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/SQL-Injection.jpg?resize=703%2C339&#038;ssl=1\" alt=\"\" width=\"703\" height=\"339\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/SQL-Injection.jpg?w=1000&amp;ssl=1 1000w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/SQL-Injection.jpg?resize=300%2C145&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/SQL-Injection.jpg?resize=768%2C370&amp;ssl=1 768w\" sizes=\"(max-width: 703px) 100vw, 703px\" \/><\/p>\n<p><!--more--><\/p>\n<ul>\n<li>Enlace recomendado: <a href=\"https:\/\/hardsoftsecurity.es\/index.php\/2018\/02\/01\/como-explotar-inyeccion-sql-con-sqlmap\/\" target=\"_blank\" rel=\"noopener\">Como explotar inyecci\u00f3n SQL con SQLmap.<\/a><\/li>\n<\/ul>\n<p>Instalaci\u00f3n de SQLiv:<\/p>\n<ol>\n<li>git clone\u00a0<a href=\"https:\/\/github.com\/Hadesy2k\/sqliv.git\">https:\/\/github.com\/Hadesy2k\/sqliv.git<\/a><\/li>\n<li>sudo python2 setup.py -i<\/li>\n<\/ol>\n<p>Tras instalar SQLiv vamos a comenzar con una b\u00fasqueda b\u00e1sica utilizando uno de los Google dorks para encontrar el m\u00e1ximo de p\u00e1ginas web vulnerables a estas inyecciones SQL, entonces lanzamos el siguiente comando:<\/p>\n<p><img data-recalc-dims=\"1\" decoding=\"async\" data-attachment-id=\"1434\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2018\/02\/01\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\/screenshot_1-13\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/Screenshot_1.png?fit=610%2C27&amp;ssl=1\" data-orig-size=\"610,27\" data-comments-opened=\"1\" data-image-title=\"Screenshot_1\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/Screenshot_1.png?fit=610%2C27&amp;ssl=1\" class=\"size-full wp-image-1434 aligncenter\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/Screenshot_1.png?resize=610%2C27&#038;ssl=1\" alt=\"\" width=\"610\" height=\"27\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/Screenshot_1.png?w=610&amp;ssl=1 610w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/Screenshot_1.png?resize=300%2C13&amp;ssl=1 300w\" sizes=\"(max-width: 610px) 100vw, 610px\" \/><\/p>\n<p>-d: Sirve para indicarle el dork que quieres buscar.<\/p>\n<p>-e: Como se ve en el comando este par\u00e1metro sirve para indicar en que motor de b\u00fasqueda quieres que busque el dork indicado.<\/p>\n<p>Tras lanzar el anterior comando nos aparecer\u00e1n en pantalla todas las URI vulnerables que podemos realizar un ataque SQL injection, pero no siempre la herramienta acierta, a veces arroja falsos positivos:<\/p>\n<p><img data-recalc-dims=\"1\" decoding=\"async\" data-attachment-id=\"1435\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2018\/02\/01\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\/screenshot_2-14\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/Screenshot_2.png?fit=850%2C224&amp;ssl=1\" data-orig-size=\"850,224\" data-comments-opened=\"1\" data-image-title=\"Screenshot_2\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/Screenshot_2.png?fit=800%2C211&amp;ssl=1\" class=\"size-full wp-image-1435 aligncenter\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/Screenshot_2.png?resize=800%2C211&#038;ssl=1\" alt=\"\" width=\"800\" height=\"211\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/Screenshot_2.png?w=850&amp;ssl=1 850w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/Screenshot_2.png?resize=300%2C79&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/Screenshot_2.png?resize=768%2C202&amp;ssl=1 768w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/p>\n<p>El siguiente paso de la herramienta es que nos presenta en un cuadro visualmente m\u00e1s c\u00f3modo ya que en la anterior captura nos sale tanto URI vulnerables como las que no son vulnerables, tambi\u00e9n nos muestra que tipo de base de datos es y su servidor web, junto a la versi\u00f3n:<\/p>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" data-attachment-id=\"1436\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2018\/02\/01\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\/screenshot_3-12\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/Screenshot_3.png?fit=1167%2C425&amp;ssl=1\" data-orig-size=\"1167,425\" data-comments-opened=\"1\" data-image-title=\"Screenshot_3\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/Screenshot_3.png?fit=800%2C291&amp;ssl=1\" class=\"alignnone size-full wp-image-1436\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/Screenshot_3.png?resize=800%2C291&#038;ssl=1\" alt=\"\" width=\"800\" height=\"291\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/Screenshot_3.png?w=1167&amp;ssl=1 1167w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/Screenshot_3.png?resize=300%2C109&amp;ssl=1 300w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/Screenshot_3.png?resize=768%2C280&amp;ssl=1 768w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/Screenshot_3.png?resize=1024%2C373&amp;ssl=1 1024w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>Bueno espero que os guste este post.<\/p>\n<p>Un saludo, David. Gracias por visitar el blog.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hola a tod@s hoy os traigo una herramienta que me ha gustado bastante, esta herramienta se basa en al b\u00fasqueda automatizada de p\u00e1ginas vulnerables a inyecciones SQL. Seg\u00fan descrito por &#8230;<\/p>\n","protected":false},"author":1,"featured_media":1433,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_hide_featured_image":false,"_jetpack_featured_image_duplicate_dismissed":0,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[3,7],"tags":[173,172,170,32,169,171],"class_list":["post-1424","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-guias","category-seguridad-informatica","tag-dork","tag-google","tag-injection","tag-kali-linux","tag-sql","tag-sql-injection"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>SQLiv, buscar autom\u00e1ticamente p\u00e1ginas web con inyecciones SQL. - Hardsoft Security<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/hardsoftsecurity.es\/index.php\/2018\/02\/01\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SQLiv, buscar autom\u00e1ticamente p\u00e1ginas web con inyecciones SQL. - Hardsoft Security\" \/>\n<meta property=\"og:description\" content=\"Hola a tod@s hoy os traigo una herramienta que me ha gustado bastante, esta herramienta se basa en al b\u00fasqueda automatizada de p\u00e1ginas vulnerables a inyecciones SQL. Seg\u00fan descrito por ...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/hardsoftsecurity.es\/index.php\/2018\/02\/01\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\/\" \/>\n<meta property=\"og:site_name\" content=\"Hardsoft Security\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/HardSoftDavid\" \/>\n<meta property=\"article:published_time\" content=\"2018-02-01T15:18:24+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2018-03-08T15:12:55+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/SQL-Injection.jpg?fit=1000%2C482&ssl=1\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"482\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"david\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@DavidDeMaya\" \/>\n<meta name=\"twitter:site\" content=\"@DavidDeMaya\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"david\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minuto\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2018\\\/02\\\/01\\\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2018\\\/02\\\/01\\\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\\\/\"},\"author\":{\"name\":\"david\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#\\\/schema\\\/person\\\/dfe289b1e4ae2daf72695e85a8b3dd7a\"},\"headline\":\"SQLiv, buscar autom\u00e1ticamente p\u00e1ginas web con inyecciones SQL.\",\"datePublished\":\"2018-02-01T15:18:24+00:00\",\"dateModified\":\"2018-03-08T15:12:55+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2018\\\/02\\\/01\\\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\\\/\"},\"wordCount\":292,\"commentCount\":15,\"image\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2018\\\/02\\\/01\\\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2018\\\/02\\\/SQL-Injection.jpg?fit=1000%2C482&ssl=1\",\"keywords\":[\"dork\",\"google\",\"injection\",\"Kali Linux\",\"sql\",\"sql injection\"],\"articleSection\":[\"Gu\u00edas\",\"Seguridad inform\u00e1tica\"],\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2018\\\/02\\\/01\\\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2018\\\/02\\\/01\\\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\\\/\",\"url\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2018\\\/02\\\/01\\\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\\\/\",\"name\":\"SQLiv, buscar autom\u00e1ticamente p\u00e1ginas web con inyecciones SQL. - Hardsoft Security\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2018\\\/02\\\/01\\\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2018\\\/02\\\/01\\\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2018\\\/02\\\/SQL-Injection.jpg?fit=1000%2C482&ssl=1\",\"datePublished\":\"2018-02-01T15:18:24+00:00\",\"dateModified\":\"2018-03-08T15:12:55+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#\\\/schema\\\/person\\\/dfe289b1e4ae2daf72695e85a8b3dd7a\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2018\\\/02\\\/01\\\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2018\\\/02\\\/01\\\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2018\\\/02\\\/01\\\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\\\/#primaryimage\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2018\\\/02\\\/SQL-Injection.jpg?fit=1000%2C482&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2018\\\/02\\\/SQL-Injection.jpg?fit=1000%2C482&ssl=1\",\"width\":1000,\"height\":482},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2018\\\/02\\\/01\\\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/hardsoftsecurity.es\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SQLiv, buscar autom\u00e1ticamente p\u00e1ginas web con inyecciones SQL.\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#website\",\"url\":\"https:\\\/\\\/hardsoftsecurity.es\\\/\",\"name\":\"Hardsoft Security\",\"description\":\"Chasing (In)Security\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/hardsoftsecurity.es\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#\\\/schema\\\/person\\\/dfe289b1e4ae2daf72695e85a8b3dd7a\",\"name\":\"david\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g\",\"caption\":\"david\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"SQLiv, buscar autom\u00e1ticamente p\u00e1ginas web con inyecciones SQL. - Hardsoft Security","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/02\/01\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\/","og_locale":"es_ES","og_type":"article","og_title":"SQLiv, buscar autom\u00e1ticamente p\u00e1ginas web con inyecciones SQL. - Hardsoft Security","og_description":"Hola a tod@s hoy os traigo una herramienta que me ha gustado bastante, esta herramienta se basa en al b\u00fasqueda automatizada de p\u00e1ginas vulnerables a inyecciones SQL. Seg\u00fan descrito por ...","og_url":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/02\/01\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\/","og_site_name":"Hardsoft Security","article_publisher":"https:\/\/www.facebook.com\/HardSoftDavid","article_published_time":"2018-02-01T15:18:24+00:00","article_modified_time":"2018-03-08T15:12:55+00:00","og_image":[{"width":1000,"height":482,"url":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/SQL-Injection.jpg?fit=1000%2C482&ssl=1","type":"image\/jpeg"}],"author":"david","twitter_card":"summary_large_image","twitter_creator":"@DavidDeMaya","twitter_site":"@DavidDeMaya","twitter_misc":{"Escrito por":"david","Tiempo de lectura":"1 minuto"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/02\/01\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\/#article","isPartOf":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/02\/01\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\/"},"author":{"name":"david","@id":"https:\/\/hardsoftsecurity.es\/#\/schema\/person\/dfe289b1e4ae2daf72695e85a8b3dd7a"},"headline":"SQLiv, buscar autom\u00e1ticamente p\u00e1ginas web con inyecciones SQL.","datePublished":"2018-02-01T15:18:24+00:00","dateModified":"2018-03-08T15:12:55+00:00","mainEntityOfPage":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/02\/01\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\/"},"wordCount":292,"commentCount":15,"image":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/02\/01\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/SQL-Injection.jpg?fit=1000%2C482&ssl=1","keywords":["dork","google","injection","Kali Linux","sql","sql injection"],"articleSection":["Gu\u00edas","Seguridad inform\u00e1tica"],"inLanguage":"es","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/hardsoftsecurity.es\/index.php\/2018\/02\/01\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/02\/01\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\/","url":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/02\/01\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\/","name":"SQLiv, buscar autom\u00e1ticamente p\u00e1ginas web con inyecciones SQL. - Hardsoft Security","isPartOf":{"@id":"https:\/\/hardsoftsecurity.es\/#website"},"primaryImageOfPage":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/02\/01\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\/#primaryimage"},"image":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/02\/01\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/SQL-Injection.jpg?fit=1000%2C482&ssl=1","datePublished":"2018-02-01T15:18:24+00:00","dateModified":"2018-03-08T15:12:55+00:00","author":{"@id":"https:\/\/hardsoftsecurity.es\/#\/schema\/person\/dfe289b1e4ae2daf72695e85a8b3dd7a"},"breadcrumb":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/02\/01\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/hardsoftsecurity.es\/index.php\/2018\/02\/01\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/02\/01\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\/#primaryimage","url":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/SQL-Injection.jpg?fit=1000%2C482&ssl=1","contentUrl":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/SQL-Injection.jpg?fit=1000%2C482&ssl=1","width":1000,"height":482},{"@type":"BreadcrumbList","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/02\/01\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/hardsoftsecurity.es\/"},{"@type":"ListItem","position":2,"name":"SQLiv, buscar autom\u00e1ticamente p\u00e1ginas web con inyecciones SQL."}]},{"@type":"WebSite","@id":"https:\/\/hardsoftsecurity.es\/#website","url":"https:\/\/hardsoftsecurity.es\/","name":"Hardsoft Security","description":"Chasing (In)Security","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/hardsoftsecurity.es\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Person","@id":"https:\/\/hardsoftsecurity.es\/#\/schema\/person\/dfe289b1e4ae2daf72695e85a8b3dd7a","name":"david","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/secure.gravatar.com\/avatar\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g","caption":"david"}}]}},"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p7xGFx-mY","jetpack-related-posts":[{"id":1438,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/02\/01\/como-explotar-inyeccion-sql-con-sqlmap\/","url_meta":{"origin":1424,"position":0},"title":"Como explotar inyecci\u00f3n SQL con SQLmap.","author":"david","date":"febrero 1, 2018","format":false,"excerpt":"Hola a tod@s, aprovechando la anterior entrada\u00a0que trata de la b\u00fasqueda autom\u00e1tica de p\u00e1ginas web vulnerables a inyecciones SQL, aprovechar\u00e9 esta entrada para hacer una gu\u00eda b\u00e1sica de como explotar esta vulnerabilidad con la herramienta SQLmap. As\u00ed describe la web oficial de SQLmap la herramienta: SQLmap es una herramienta de\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/sqlinjection2.png?fit=1140%2C600&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/sqlinjection2.png?fit=1140%2C600&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/sqlinjection2.png?fit=1140%2C600&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/sqlinjection2.png?fit=1140%2C600&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/sqlinjection2.png?fit=1140%2C600&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":3638,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/01\/25\/como-usar-sqlmap-guia-con-caso-practico\/","url_meta":{"origin":1424,"position":1},"title":"\u00bfC\u00f3mo usar SQLMap? Gu\u00eda con caso pr\u00e1ctico.","author":"david","date":"enero 25, 2024","format":false,"excerpt":"\u00a1Hola! Hoy vamos a sumergirnos en el fascinante mundo de SQLMap, una herramienta indispensable para aquellos que se dedican a garantizar la seguridad de las bases de datos y, por supuesto, para los curiosos del pentesting. Imagina tener una navaja suiza que puede detectar y explotar vulnerabilidades en bases de\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/01\/image-2.png?fit=724%2C362&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/01\/image-2.png?fit=724%2C362&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/01\/image-2.png?fit=724%2C362&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/01\/image-2.png?fit=724%2C362&ssl=1&resize=700%2C400 2x"},"classes":[]},{"id":3991,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2026\/08\/26\/offensive-ai-vulnerable-mcp-server-lab\/","url_meta":{"origin":1424,"position":2},"title":"Offensive AI &#8211; Vulnerable MCP Server Lab","author":"david","date":"agosto 26, 2026","format":false,"excerpt":"A self-hosted, intentionally vulnerable MCP (Model Context Protocol) server for security research and education. This lab demonstrates how MCP servers can be enumerated, interacted with, and exploited using common vulnerability classes. WARNING:\u00a0This lab is intentionally vulnerable. Run it in an isolated environment only. Do not expose it to the internet.\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2026\/08\/image.png?fit=753%2C271&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2026\/08\/image.png?fit=753%2C271&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2026\/08\/image.png?fit=753%2C271&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2026\/08\/image.png?fit=753%2C271&ssl=1&resize=700%2C400 2x"},"classes":[]},{"id":3654,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/04\/02\/hacking-wordpress-guia-de-explotacion-basica\/","url_meta":{"origin":1424,"position":3},"title":"Hacking WordPress &#8211; Gu\u00eda de explotaci\u00f3n b\u00e1sica","author":"david","date":"abril 2, 2024","format":false,"excerpt":"\u00a1Hola a todos! Hoy vamos a meternos en el mundo de WordPress con este nuevo post \"Hacking WordPress - Gu\u00eda de explotaci\u00f3n b\u00e1sica\", pero desde una perspectiva un poco diferente. No, no vamos a hablar sobre c\u00f3mo crear el blog de tus sue\u00f1os o la p\u00e1gina de tu negocio online.\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image.png?fit=1200%2C648&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image.png?fit=1200%2C648&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image.png?fit=1200%2C648&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image.png?fit=1200%2C648&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/02\/image.png?fit=1200%2C648&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":1465,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/02\/13\/como-hacer-mysql-mas-seguro\/","url_meta":{"origin":1424,"position":4},"title":"\u00bfC\u00f3mo hacer MySQL m\u00e1s seguro?","author":"david","date":"febrero 13, 2018","format":false,"excerpt":"Hola a tod@s hoy os traigo una peque\u00f1a entrada donde vamos a ver como hacer nuestro servidor de MySQL m\u00e1s seguro, esto nos permitir\u00e1 tener un control completo de nuestro servidor, ya que en estos tiempos existen much\u00edsimos bots continuamente escaneando la red para atacar nuestros servicios. Voy a dar\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/06\/mysql-logo-1329320869.jpg?fit=800%2C413&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/06\/mysql-logo-1329320869.jpg?fit=800%2C413&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/06\/mysql-logo-1329320869.jpg?fit=800%2C413&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/06\/mysql-logo-1329320869.jpg?fit=800%2C413&ssl=1&resize=700%2C400 2x"},"classes":[]},{"id":3706,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/09\/27\/mssql-python-shell\/","url_meta":{"origin":1424,"position":5},"title":"MSSQL Python Shell","author":"david","date":"septiembre 27, 2024","format":false,"excerpt":"This post presents an enhanced Python script for interacting with Microsoft SQL Server using the\u00a0pymssql\u00a0library. This improved script is based on the original\u00a0MSSQL\u00a0Shell\u00a0Script\u00a0by Alamot. My modified version introduces the use of the more modern and maintained\u00a0pymssql\u00a0library and added functionality for file uploads, ensuring that commands and file transfers are handled\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/09\/image-1.png?fit=800%2C418&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/09\/image-1.png?fit=800%2C418&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/09\/image-1.png?fit=800%2C418&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/09\/image-1.png?fit=800%2C418&ssl=1&resize=700%2C400 2x"},"classes":[]}],"jetpack_likes_enabled":true,"jetpack_featured_media_url":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/SQL-Injection.jpg?fit=1000%2C482&ssl=1","_links":{"self":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts\/1424","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/comments?post=1424"}],"version-history":[{"count":4,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts\/1424\/revisions"}],"predecessor-version":[{"id":1478,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts\/1424\/revisions\/1478"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/media\/1433"}],"wp:attachment":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/media?parent=1424"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/categories?post=1424"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/tags?post=1424"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}