I'm gonna copy this request.

@declanmidd

40.0K followers · usually 2.5K views a post

Views

19.5K

Likes

1.1K

Comments

11

Shares

14

Selling · SaaS › Developer Tool

SQLMap

Why it worked

The video demonstrates a practical cybersecurity technique using popular tools like Burp Suite and SQLMap, appealing to an audience interested in ethical hacking and penetration testing. The clear, step-by-step demonstration makes complex processes accessible.

Summary

The creator demonstrates capturing an HTTP request using Burp Suite and then saving it to a file. They then show how to use SQLMap with the saved request, indicating a potential security testing or exploitation scenario.

Structure

1Capture request with Burp Suite
2Save request to a file
3Open terminal
4Introduce SQLMap
5Prepare to use SQLMap with the saved request

Product placement

Burp Suite: This is a web application security testing tool. It ACTS as a proxy to intercept, inspect, and modify web traffic. Removing it would change the video's demonstration of web traffic interception. SQLMap: This is an open-source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over database servers. It ACTS as a tool to exploit vulnerabilities. Removing it would change the video's demonstration of exploitation.

Original caption

Me using Burpsuite to capture request then use a popular tool called sqlmap. In next video. Educational only content #CyberSecurity #reelsinstagram #KaliLinux

More from @declanmidd

Their other posts in the index, biggest breakout first.

On-screen text

Intercept on Forward Drop Request Proxy Proxy Intercept HTTP History WebSockets history Match and replace Proxy Inspector Selection POST /administrator/login.php HTTP/1.1 Host: shop.nyx Content-Length: 38 Cache-Control: max-age=0 Accept-Language: en-US,en;q=0.9 Origin: http://shop.nyx Content-Type: application/x-www-form-urlencoded Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/ *;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://shop.nyx/administrator/index.php Accept-Encoding: gzip, deflate, br Cookie: PHPSESSID=6bkrmbsibv0k9fclb4rnqqge2n Connection: keep-alive username=test123&password=test&submit= I'm gonna copy this request. copy it and go open up. Let's just open up default terminal here. TERMINAL TERMINAL. GET TERMINAL TERMINAL. GET my terminal. What do I actually have on here? while. Okay. Size: 83 x 26 Saved test.req username=test123&password=test&submit= Size: 67 x 21 Saved test.req username=test123&password=test&submit= Size: 16, 39 ft:unknown unix UTF-8Alt-g: bindings, Ctl Saved test.req username=test123&password=test&submit= Size: 1, 1 ft:unknown unix UTF-8Alt-g: bindings, Ctl Saved test.req username=test123&password=test&submit= I'm gonna save this and then. Yes. this and then. Yes. Yes. Okay. I'm gonna leave this sequel map. Let's take a look. Ok, I think I just do this. I think I'll just say pipe request. request is equal to test request. Ha, I said equal to. What am I doing? Programming? Alright, test request. and then I also want to do.

Transcript

I'm gonna copy this request. I'm going to copy it, and then I'm going to go open up, let's just open up default terminal here. terminal, terminal, get my terminal. What do I actually have on here? It's been a while. Ok. Uh no, not. Let's just call this I don't know. Do I want to call it a test request? I guess. So I'm going to call this request. Uh just test request. I could do orQ, doesn't really matter. I'm going to save this, and then yes. Ok, I'm going to leave this. seq map, let's take a look. Ok, I think I'd just do this, I think. I'll just say pipe request. request is equal to test request. Ha, I said equal to. What am I doing? Programming? Alright, test request. and then I also want to do