+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Need help with injecting (/showthread.php?tid=5120028)
Need help with injecting - irishsecurity - Jan 3, 2016
Hello. So i did a uniscan and acunetix test and both came positive for sql injection but i cant seem to find a place to inject. Can someone please help me out glenceltic.com
* - Mr.0_0 - Jan 3, 2016
What was the output of the scans that your ran?
* - irishsecurity - Jan 3, 2016
it came up with sql injection verified
* - SIM-2793336 - Jan 3, 2016
(Jan 3, 2016 12:00 PM)irishsecurity Wrote: it came up with sql injection verifiedhi ...
tnx to MR O_O ..
you should upload scan result ..
server on your target :
Code
Apache/2.2.29 (Unix) mod_ssl/2.2.29 OpenSSL/1.0.1e-fips mod_bwlimited/1.4 Server at www.glenceltic.com Port 80send your result ..maybe in result ..we can find thing ...
scanner = helper
good luck
* - Gee4rce - Jan 4, 2016
Usually i don't help people who just run scanners, but we can learn something here...
The only place an injection could take place is this the "pageid" parameter here: http://www.glenceltic.com/index.php?pageid=[SQLi]
But i checked back on this and it seems to be not vulnerable.
Thus, Acunetix produced a "false positive" result... and that's why you not use scanners 😅
Cheers, Gee.
* - hаckеr - Jan 4, 2016
I never use scanners. Unless it's nmap or Nessus. Everything else has false positives basically. Learn to find vulns manually.
* - irishsecurity - Jan 5, 2016
Thanks for the help guys.