Collaborate Disseminate
I have the results for sqlmap:
./sqlmap.py -u “http://REDACTED/browse?destination_id=12” –identify-waf –random-agent -v 3 –dbs
GET parameter ‘destination_id’ is vulnerable. Do you want to keep testing the others (if an… Continue reading Scrambled database name / unable to retrieve the number of databases with SQLMap
I have the results for sqlmap:
./sqlmap.py -u “http://REDACTED/browse?destination_id=12” –identify-waf –random-agent -v 3 –dbs
GET parameter ‘destination_id’ is vulnerable. Do you want to keep testing the others (if an… Continue reading Scrambled database name / unable to retrieve the number of databases with SQLMap
I am trying to use UPDATE or insert after getting victim database information, for that I am using command:
sqlmap -u somewebsite.com/id=2 –sql-shell
After that:
> sql-shell : UPDATE username FROM ….
I am trying to use UPDATE or insert after getting victim database information, for that I am using command:
sqlmap -u somewebsite.com/id=2 –sql-shell
After that:
> sql-shell : UPDATE username FROM ….
I’m currently pentesting my friends website. I found an SQL injection with acunetix’ help:
– URL encoded GET input for was set to 1#####
Error message found:
supplied argument is not a valid MySQL result
So I tried runnin… Continue reading Special sqlmap injection
I’m currently pentesting my friends website. I found an SQL injection with acunetix’ help:
– URL encoded GET input for was set to 1#####
Error message found:
supplied argument is not a valid MySQL result
So I tried running a normal sql… Continue reading Special sqlmap injection
I’m currently pentesting my friends website. I found an SQL injection with acunetix’ help:
– URL encoded GET input for was set to 1#####
Error message found:
supplied argument is not a valid MySQL result
So I tried runnin… Continue reading Special sqlmap injection
I was wondering if anyone else had come across this problem that myself and a colleague are facing with the SQLiPy plugin in Burpsuite Pro.
After downloading the latest standalone for jython, pointing BS to it and installin… Continue reading Burpsuite SQLiPy plugin no start button
I was wondering if anyone else had come across this problem that myself and a colleague are facing with the SQLiPy plugin in Burpsuite Pro.
After downloading the latest standalone for jython, pointing BS to it and installin… Continue reading Burpsuite SQLiPy plugin no start button
This is the first time I’m using sqlmap against SQLite.
When I run:
sqlmap -u www.site.com:80/index.php?vulnParametr=p –dump-all –keep-alive –dbms=sqlite
It gives me this:
What is that? Is SQLite using some sort of e… Continue reading Weird table names in SQLite database