Collaborate Disseminate
I am using sqlmap to fetch some data from database but unfortunately some data are not accurate. For example, the real data is “APPLE” but sqlmap fetches ‘@PPLE’ or something like this.
In some other cases when I select mult… Continue reading SQLMAP inaccurate data fetch
down vote
favorite
I’m trying to use following code
sqlmap -u “http://exp.com/portal/pd.jsp action=edit&info=products&sub_info=price”
–cookie=”JSESSIONID…..” –dbms Oracle -D PRODUCTS -T PRICE –threads 10
–sql-… Continue reading How to update table with sqlmap and without stacked queries?
I have set up a local web application that has a vulnerable login form. When I manually enter ‘ OR 1=1; — as username, the web application responds with the HTTP-Code 302 and redirects me to another site. Otherwise, the webs… Continue reading Boolean-based blind sql injection returning HTTP-Code 302 with sqlmap
Using SQLMap in this way:
sqlmap -u “xxxxx” –dbms=MySql –dbs –user-agent=”Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0″ -D xxxxx -T “#__xxxxx” –columns
I am obtaining this warning:
[23:39:07… Continue reading SQLMap Strange Dump Result
I’m using sqlmap to get a website’s DB and found out that the site is time based boolean vulnerable; but the target is showing SQL errors, what made me think that it would be a based injection error.
I was curious, so I tur… Continue reading sqlmap: bypass website security filtereing SQL reserved words
I’m testing a site that automatically redirects http request to https. When I’m using Burp I set the target to use https and the request goes through without a problem. However when I use the same request in sqlmap I get a fo… Continue reading sqlmap load https request using "-r REQUESTFILE Load HTTP request from a file"
I’m testing a site that automatically redirects http request to https. When I’m using Burp I set the target to use https and the request goes through without a problem. However when I use the same request in sqlmap I get a fo… Continue reading sqlmap load https request using "-r REQUESTFILE Load HTTP request from a file"
Someone is trying to SQLi my domain using sqlmap. I’m getting a lot of errors from mysql.
My server access log shows:
– – HTTP/1.1″ 200 10559 “-” “sqlmap/1.0.4.0#dev (http://sqlmap.org)”
I have tried block… Continue reading someone trying to SQLi server using sqlmap
I have a target that http post request from that encoded As follows:
data request post first url encoded and then base64 encoded.
example request post from mentioned target As follows:
POST /test/test-page.php HTTP/1.1
Hos… Continue reading run sqlmap with http post request with encoding data
I would like to return a list of all the subdirectories in a given .sqlmap/output/ folder which have found previously sql injections. For example:
Given an output directory like:
www.securesite.com (not vulnerable)
www.un… Continue reading Searching .sqlmap directory to find previously successful injection points