Collaborate Disseminate
If I want to scan this web application with SQLmap, how should I craft the command?
I tried this command but it didn’t work. How do I fix it?
sqlmap –batch -u http://192.168.56.103:8754/payment-details/2 –data="id=1&Credit_Card… Continue reading How to use SQLmap for automatic scanning [closed]
I test the web application of the target virtual machine provided by my professor:
sqlmap –batch -u http://192.168.56.103:8754/payment-details/2 \
–cookie=’ JSESSIONID=<D38AEB6139DFC666E65D0D38BD82CE96>’ -level=3 –risk=3
This is my code in phpm I was wondering if there is a way to bypass sql protection, because everything is already blocked.
Is this secure?
$max = 10;
if (isset($_GET[‘max’]) && !is_array($_GET[‘max’]) && $_GET[‘max’]>0)… Continue reading Is sql injection possible here ? or I can consider this as safe? [closed]
I’ve come across a webpage that uses Iron cookies. These cookies have the exemplary format: Fe26.2**0cdd607945dd1dffb7da0b0bf5f1a7daa6218cbae14cac51dcbd91fb077aeb5b*aOZLCKLhCt0D5IU1qLTtYw*g0ilNDlQ3TsdFUqJCqAm9iL7Wa60H7eYcHL_5oP136TOJREkS3B… Continue reading How to ignore asterisk characters in sqlmap?
How to sort the results of Google Dorks in Sqlmap using the –scope option?
The post request like this:
POST /api/test/ HTTP/1.1
Host: example.com
Cookie: .ASPXAUTH=5B8094E
Content-Type: application/json; charset=utf-8
Connection: close
Content-Length: 179
{"Verb":"GET","Url":"… Continue reading SQLmap custom injection point in JSON
I recently performed a vulnerability assessment on a system using ZAP (Zed Attack Proxy) and received a finding indicating a likely SQL injection vulnerability.
The query time is controllable using parameter value [case
randomblob(1000000… Continue reading Adding Payload to URL-based SQL Injection: Seeking Guidance and Best Practices
I am trying to automate sql injection using sqlmap by using the following command:
sqlmap -r req.txt –dump
where req.txt is the request which is captured with Burp Suite. sqlmap couldn’t find the vulnerability,
[WARNING] Cookie parameter… Continue reading sqlmap base64 encoded cookie with working manual sql injection
Sqlmap says "found x targets, y of them are testable". What makes a testable target for sqlmap?
How is the scan with –ignore-code different from a scan without it?
Continue reading What does Sqlmap option –ignore-code do? [closed]