+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: how to find sql injection point of any site (/showthread.php?tid=4683120)
how to find sql injection point of any site - arun hacker - Feb 12, 2015
hi friends, I want to hack a particular site but i don't know where to start.
I know sqli but i can't see any id=something in that site. So, do you know any method by which i can find the injection point of any site
thanks
* - Viktory - Feb 13, 2015
Use Acunetix or WVS to scan the website for vulnerabilities.
* - uberalles - Feb 13, 2015
I agree with Viktory. Acunetix is a nice piece of software.
* - Frosteh - Feb 13, 2015
The best thing I find if you're looking manually is to spider the entire site and enumerate all the URLs and check to see if any accept parameters, and check all the posts to see if they accept parameters.
If you proxy a web request through Zed Attack Proxy (ZAP) then right click the site you select "attack" and then "spider site" and it will enumerate all the urls for you, any that have brackets on the end with a list of params are ones you can look at testing.