I want to start learning about databases from pentesters perspective and I would like to know what things will be useful on the long run . Also do you know any good book to kickstart my experience at databases ? Thank you in advance.
This question is very broad. In general you need to know how all different technologies are configured and what their weaknesses are (refer to google).
"Databases" is a broad term. There are many types of databases using different languages:
When pentesting you can either focus on the service provided by the database itself:
The means can be different as well: you might want to dump the contents from the database or you might try to make the database issue a command (if it runs as SYSTEM/root you can get access to the underlying server to stage more attacks).
There are tons of different books on databases. In general I always look at everything O'Reilly has to offer. They have a quite rigorous reviewing and admission process. I suggest starting with SQL and LDAP as you will see these more in the wild than any other protocols.
Depending on what you need, database itself might be a nice first step to infiltrate or exfiltrate the rest of the OS. Learn the commands that allow you filesystem access (e.g. LOAD DATA INFILE)
Using data from databases can be very effective for enumeration of accounts. Often database names, users' names, table name match system user's names.
Passwords are my favorite content of databases. People tend to reuse passwords, so you can use them on system user accounts, email accounts, etc. Another thing about passwords in databases, they're usually stored using lousy hashes, like the old MySQL hash, or oracle's DES based hash, which are all very quickly crackable.
Also, you can find out more about the system with
Then you will usually have some sort of subshell mechanism, or at least ability to run SQL scripts from the filesystem. That's more DB<->filesystem communication, which can be useful.
I would like to tell you that apart from the above learn sql injection also. The sql injection is mainly for developers, but its good to know that since you are thinking like a penetration tester.