Collaborate Disseminate
After I bypass this error message:
the server encountered an internal error or misconfiguration and was unable to complete your request
I find that I have another mistake when I upload the SSI web shell and run my command
… Continue reading how to bypass Internal Server Error [on hold]
I’m running the command:
sqlmap -r Path_Of_Myfile -p UserName
It’s running good. But I want to include password parameter as well. And I tried all combinations like UserName,Password / UserName&Password, but no combina… Continue reading How to include multiple parameters in SQLmap post command
I’m using the following command to inject the Username parameter:
sqlmap -r Path_Of_Myfile -p UserName
It’s running well. But there’s also a second parameter of Password. How can I also attempt to inject the Password param… Continue reading How to include multiple parameters in sqlmap POST request
While testing using SQLMap with tamper script for Post parameter, I’m providing tamper script data with sqlmap command like tamper=apostrophemask,apostrophenullencode,base64encode,between,chardoubleencode,charencode,charunico… Continue reading In SQLmap, tamper script command not working for the post parameter data
i’m struggling to bypass a website WAF that uses Sucuri WAF, i saw some tutorials online, and tried to mix them with some pre-defined sqlmap tampers, such as “randomcaso, charencode”, but i wasn’t able to succeed, it’s like t… Continue reading effective way to bypass Sucuri WAF on Sqlmap?
I’m using sqlmap with –crawl option. Whenever a URL is found, it asks me whether to scan it
GET http://127.0.0.1:80/demo/sqli.php?id=1
do you want to test this URL? [Y/n/q]
How should I ask sqlmap to test all URLs without asking?
P.S … Continue reading Using sqlmap –crawl without asking questions
Dumping limited entries from a given table (eg. users) from postgreSQL database using sqlmap with –start and –stop is NOT working for me.
So I tried to use –sql-query=”select * from users limit 2″
But in the output I do … Continue reading How to retrieve column names along with the data when trying to fetch limited entries using sqlmap –sql-query
why it says the parameter is not vulnerable although owasp found it vulnerable here
https://www.com/users/login-fast.php?looking_for=Worker%27+AND+%271%27%3D%271%27+–+
Worker ‘AND’ 1 ‘=’ 1 ‘- and the parameter is look_for an… Continue reading vulnerabilitate [on hold]
I need to run sqlmap (for educational use) on a part of website, which is only accessible after login. How would you do that? When I try to paste the url in without logging in I just get redirect and sqlmap doesnt find anythi… Continue reading How to run sqlmap after login on site
After a lesson to explain SQL Injection, they proposed me a challenge: try to become an admin to this site:
http://188.166.48.124/login
It’s completely legal! This site is up right for this scope!
I’ve tried to disable Java… Continue reading SQL Injection Challenge