+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: SQLMAP - SQLinjection Error Message Bypass (/showthread.php?tid=4881510)
SQLMAP - SQLinjection Error Message Bypass - madlab7071 - Jun 26, 2015
Hello all i am using sql injection from last fews months now days i am facing on error message that
[::**] [CRITICAL] unable to access item '__sunleooeeo__'
i tried searching online for resolving this issue but i didnt find anything that can help me to bypass this error message so if any one on hack form community knows how to bypass this error then please let me know..
Thank You
🤝
* - XPRMX - Jun 26, 2015
Why not do manual SQL injections instead of using a tool. You arnt learning anythung
* - madlab7071 - Jun 26, 2015
(Jun 26, 2015 03:22 AM)XPRMX Wrote: Why not do manual SQL injections instead of using a tool. You arnt learning anythung
i agree but before moving to manual i want to master tool first i dont want to jump directly and using sqlmap i got to know different and some rare type of sql injections that i didnt find when i use to search for sql injections types... well this is how i think thank you for the advice but i need to bypass this error for better understanding.....
🤝🤝
* - Th3PonyWizard - Jun 26, 2015
We won't know it until we get the URL
* - F-Nuke - Jun 26, 2015
The error is basically SQLMap not being able to access the table (or DB) which might be from a DB other than the current one. This might be due to magic_quotes being used.
* - Th3PonyWizard - Jun 26, 2015
(Jun 26, 2015 04:34 AM)F-Nuke Wrote: The error is basically SQLMap not being able to access the table (or DB) which might be from a DB other than the current one. This might be due to magic_quotes being used.If SQLMAP managed to reach all the way to pull tables - magic_quotes ain't gonna stop it. magic_quotes_gpc prevents you from using single quotes and double quotes. That's as effective in protecting against SQLi as putting a picture of jesus at the admin panel saying "I will be very dissapointed if you hack this".
* - F-Nuke - Jun 26, 2015
(Jun 26, 2015 04:39 AM)Th3PonyWizard Wrote: If SQLMAP managed to reach all the way to pull tables - magic_quotes ain't gonna stop it. magic_quotes_gpc prevents you from using single quotes and double quotes. That's as effective in protecting against SQLi as putting a picture of jesus at the admin panel saying "I will be very dissapointed if you hack this".
lol. But i'm talking about tables from different DB's other than the current DB. But that error is sure for not being able to access any row/table/db.
* - Th3PonyWizard - Jun 26, 2015
(Jun 26, 2015 05:12 AM)F-Nuke Wrote: lol. But i'm talking about tables from different DB's other than the current DB. But that error is sure for not being able to access any row/table/db.Yeah can be caused from a shitload of stuff
what I have in mind is the site blocking the usage of the dot operator in the URL (SELECT table_name FROM INFORMATION_SCHEMA.TABLES)
* - F-Nuke - Jun 26, 2015
(Jun 26, 2015 05:14 AM)Th3PonyWizard Wrote: Yeah can be caused from a shitload of stuff
what I have in mind is the site blocking the usage of the dot operator in the URL (SELECT table_name FROM INFORMATION_SCHEMA.TABLES)
Prolly yeah. If OP could give us the URL, it will be helpful.
* - madlab7071 - Jun 29, 2015
(Jun 26, 2015 05:17 AM)F-Nuke Wrote: Prolly yeah. If OP could give us the URL, it will be helpful.
Well if i will share the url it will be unfair with the website owner.. but this is the error i am getting [::**] [CRITICAL] unable to access item '__sunleooeeo__'
😭
* - Th3PonyWizard - Jun 29, 2015
(Jun 29, 2015 02:17 AM)madlab7071 Wrote: Well if i will share the url it will be unfair with the website owner.. but this is the error i am getting [::**] [CRITICAL] unable to access item '__sunleooeeo__'Right now, it's not fair for your brain as you're insulting it by using a tool. Learn manual.
😭
* - ProblemSolva - Jun 30, 2015
Op have you already tryed to use a tamper script, or the hex option? Sometimes you need to configure sqlmap, for some situations for example if you want to bypass a WAF.
* - UnKnOwN333 - Jun 30, 2015
Brother All SQL Website Cannot Be Hacked Just %40 Can Be Hack Use SQL Inj3ction For Hacking SQL Website
* - Th3PonyWizard - Jun 30, 2015
(Jun 30, 2015 11:08 AM)UnKnOwN333 Wrote: Brother All SQL Website Cannot Be Hacked Just %40 Can Be Hack Use SQL Inj3ction For Hacking SQL WebsiteYou seem to have the stupid.