Collaborate Disseminate
Say you want to exclude pages from facebook.com and github.com from the results when using the ‘-g’ switch. How to do that?
-g GOOGLEDORK Process Google dork results as target URLs
While I was pentesting, I came across a blind sql injection in a website that uses IIS. I tried this payload " AND 11=11 AND (‘Hlua’=’Hlua" and it works and it gives success page then i tried " AND 11=12 AND (‘Hlua’=’Hlua&qu… Continue reading sql injection in Microsoft SQL Server 2017 problem retrieving db names
While I was pentesting, I came across a blind sql injection in a website that uses IIS. I tried this payload " AND 11=11 AND (‘Hlua’=’Hlua" and it works and it gives success page then i tried " AND 11=12 AND (‘Hlua’=’Hlua&qu… Continue reading sql injection in Microsoft SQL Server 2017 problem retrieving db names
I have a URL, which looks like:
POST /v1/api/user/resetUserPassword
this API only accepts 1 parameter: email
and the response looks like:
200 when parameter is valid, and everything is OK in backend, e.g. email=iamgood@example.com, ret… Continue reading Is it possible to sqli a url, which throw blank body and 400 code when SQL error? [closed]
sqlmap is not showing the database when i run a sql-shell
SELECT current_database(): ‘odb’
When I run sqlmap with –dbs it is not showing that odb and I cannot retrieve data from it.
What can be going on? The databases with –dbs are usel… Continue reading SQLMap does not show current database
I am going through some basic security training involving exploiting an SQL injection in a test service. I am trying to get sqlmap to dump the DB contents. I found a vulnerable endpoint, I can manually construct a request that retrieves in… Continue reading sqlmap UNION query based injection, fix certain column values
I am scanning my website
sqlmap -u http://127.0.0.1/form –forms –random-agent –data="password=NotEmpty" –batch -t logtraffic.txt
yet if I open logtraffic.txt I get
VIEWSTATE=FilledWithCorrectValue&VIEWSTATEGENERATOR=Fill… Continue reading sqlmap form data is empty
mod security is a waf that protects web applications as well as sql injection attacks. This guy mentions that he can bypass the mod security with specific behavior,
I wonder which two tampers of sqlmap this guy uses, one is urlencode, and … Continue reading sqlmap tampers for the specific waf tutorial
mod security is a waf that protects web applications as well as sql injection attacks. This guy mentions that he can bypass the mod security with specific behavior,
So this is the payload from the link,
-1+union(select+1)+ — +
First he ur… Continue reading sqlmap tampers for the specific waf tutorial [closed]
pretty much on every resource I go, it says the sqlmap’s verbose value -v can be from 1 to 6 and default is 1, I try to look anywhere to see the difference between those values, but I can not find any specific information,
Can anyone tell… Continue reading sqlmap verbose level