Collaborate Disseminate
I am trying to access the database of a web application
After successfully creating Interception through Burp Suite I copied ‘Request’ to /tmp/user.request file.
Here is my user.request file
After that i started sqlmap and typed this in te… Continue reading CRITICAL : all tested parameters do not appear to be injectable [closed]
Using sqlmap I was able to gain access to one database and using –current-user and –privileges. I can confirm that the user is root@localhost with full privileges.
The part I have problem with is that I don’t understand how the –os-shel… Continue reading Paths in web servers
I am trying to make sqlmap to avoid fetch data from stored session. How do I achieve that? I have performed sqlmap check once on a target and now that target is offline, I want sqlmap to just stop the checks if target is offline and even i… Continue reading Never use stored session in sqlmap
I have a file /tmp/urls which has following URLs:
http://127.0.0.1:8081/?id=1
http://127.0.0.1:8081/?id2=1
I am using this command to perform checks on file URLs concurrently:
python3 sqlmap.py –threads=5 -m /tmp/urls –batch
Now in order to be familiar with a site’s table , I need to dump the last row of a table named "account" . can you please tell me what parameters I can use to dump only the last row of a certain table? Here is the command I’m usi… Continue reading How can I dump the last row of a table?
I have a question about SQL File privilege. Recently, I found SQL injection vulnerability for user who had FILE privilege and I used sqlmap to get some interesting files. And I was wondering, how this whole file thing works? I tried to goo… Continue reading SQL File Privilege
I am trying to use sqlmap. Although every time I use it, I just get a response of:
[13:39:11] [CRITICAL] previous heuristics detected that the target is protected by some kind of WAF/IPS
[13:39:11] [INFO] testing if the target URL content … Continue reading sqlmap won’t give me results i’m looking for [closed]
I run this command python sqlmap.py -u https://acme.com/post.php –data "id=1" –tamper="between,randomcase,space2comment" -v 3 –random-agent –dbs but SQLMap only returns information_schema database.
Is there somethin… Continue reading SQLMap Only Returns information_schema
I ran the OWASP SQL injection scanner tool on a website’s sign-in page I formerly operated and two vulnerable parameters displayed. The first parameter was "returnURL" and the second one was "isLogin" showing POST DATA:… Continue reading How to determine possible SQL injection vulnerability?
I am working on Hack the VM (hard machine) for my OSCP preparation
There is a web app with two drop down boxes.. Year and month.. both contain numbers and a submit to fetch data from DB based on year and month
Now when I change the month v… Continue reading Sqlmap not detects error based injection