Collaborate Disseminate
I’m wondering, if it’s possible to discover all the endpoints for any product which is prone to SQL injection.
I want all the endpoints where I can apply SQL injection on my site.
Continue reading Is there any way to find all the endpoints for any website for sql injection?
I was participating in a CTF and there was a SQL Injection challenge. There is a Wordpress page with a vulnerable plugin parameter (let’s call the website https://vulnerable.com/), and the solution comes from leaking values from the databa… Continue reading Understanding SQLMAP payload
Note: this is a challenge in a past CTF.
There is a webapp where you can submit an image that contains some text and the app will run an OCR and search for the text in a database. The app is vulnerable to Blind SQLi, and I h… Continue reading How to send file with SQLMap
I am trying to run sqlmap in order to find a flag for a CTF. The injection string is sent via a POST request in the parameter called search. The response is received as either 1, 2, or 3 (error codes), or flag{flag_name} (suc… Continue reading Boolean blind SQLi with sqlmap
I have access to a database, but the problem is that I need the email and password from a specific user, but for some reason this is what I see when I try to get them:
[img]https://i.imgur.com/DjxcTWt.png[/img]
It says th… Continue reading Can’t find information on specific user (sqlmap) [on hold]
I’m trying to dump using sqlmap, I have 3 columns: userid, email, password with 2900000 entries in each.
When I just –dump the table, it will start from 1 to 2900000.
I don’t want all the 2900000, how can I tell it to star… Continue reading Dump specific rows from database using sqlmap
httrack has icon of sqlmap on kali linux rolling. Why?
Continue reading ‘httrack’ has icon of ‘sqlmap’ on kali linux. Why?
I cannot seem to get sqlmap to successfully exploit and retrieve schema information from OWASP’s deliberately vulnerable Juice Shop web application.
I’ve tried to be very specific in my sqlmap command line options to help it… Continue reading How do I use sqlmap to dump the OWASP Juice Shop schema?
I was reading about the ‘risk’ param for sqlmap, and the docs contain information, that risk 3 level can update tables. What does it mean? As far as I understand, this can happen either in the app update injection or if the a… Continue reading Sqlmap, update query and risk param
I have a college project and the professor asked my group to perform a sql injection or man in the middle in a previously known LAN. We’ll have to configure a Cisco router then use a Docker image to “hack” other servers in th… Continue reading Best way to do sql injection/man in the middle on a private LAN [on hold]