Collaborate Disseminate
how can I run the SQL query like delete, update and insert by using sqlmap in Kali Linux? if I can then please give me a tutorial.
Continue reading can sqlmap be used for insert,delete and update data SQL injection?
I have a local application which will be accessible only after login. Its single URL application, URL of application won’t change, just it use ‘XMLHttpRequest’ to refresh the content of screen based on action and other parameters.
Under the authorization of my friend, I am testing his website against potential vulnerabilities.
I was trying to find if I was able to inject a SQL query into a POST request parameter hi’ or 1=1 –:
query=hi’%20or%201%3d1%20–
I’ve been able to successfully download SQLMap and a lower version of Python than what I already had. Unfortunately it doesn’t seem to function properly. The commands I enter just don’t seem to register. I’ve tried /, -, –, putting the we… Continue reading SQLmap is repeatedly showing error messages [closed]
I am practicing on some vulnerable application, and I am asked to find an injection vulnerability with a payload. it states there is a common and simple filter in place. Then I need to extract the flag value from the chlns ta… Continue reading Is this SQLMap query is correct?
in sql injection attack is possible update dump value using sqlmap or sql-shell ? for example update username value. if yes, what is the order ?
Continue reading in sql injection attack is possible update dump value using sqlmap or sql-shell?
So I’ve managed to break into the database and I’m given the following vulnerabilities
Parameter: postids (GET)
Type: boolean-based blind
Title: Boolean-based blind – Parameter replace (original value)
Payload: d=1&cmd=g… Continue reading Set injection method to Boolean blind rather than time based
I’m trying to gain access to a web server after I found blind SQLi on the website. I used sqlmap to automate things.
I can read the databases and tables. tried to find a way to get a shell from SQL injection. I found a lot… Continue reading how to get shell from blind sql injection? [on hold]
I’m struggling to find a solution to a knotty problem.
How could I prove that there’s a SQLi issue starting from the following url:
http://sitey1.com/welcome.php?welcome=<h2>Welcome! <br><br>We’re currentl… Continue reading how to prove SQLi issue during penetration test [on hold]
I installed Oxid eShop CE 6.0.2 on my local webserver to analyze the last SQL-injection vulnerability in this webapp.
I found out that it is possible to inject SQL via the sorting parameter (GET). So with the following URL, … Continue reading Exploiting SQL-Injection Vulnerability in Oxid eShop CE 6.0.2 with SQLMAP [on hold]