sql injection using sqlmap

Below are notes on a sql injection lab. First I identify that the page is susceptible to injection then run sqlmap to extract database content.

The page has a simple news page with the news item requested through an id=# parameter.  First I enter an invalid ID but with a true OR clause and the page returns content:

responder hash capture hashcat crack

Quick steps below for capturing a NTLM hash and trying to crack it using the tools Responder and Hashcat.  Below I forced a direct connection attempt to the pentest machine to get the hash.

sudo responder -I wlan0 -rdw

Once I try connecting to the pentest machine on \\192.168.50.165 I get the hash which I save to adminhash.txt