+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: SQL Vulnerable? (/showthread.php?tid=5542989)
SQL Vulnerable? - Triops - Feb 4, 2017
I was pentesting a website I found through one of my friends. This site has a structure sorta like this:
http://www.example.com/(username goes here) for its members.
When I typed in a random string of letters it actually gave me {member_username} where it would normally display the members actual username.
Is there any possible way of exploiting this somehow to get more information?
* - egyy - Feb 4, 2017
My guess is no, it's probably not. Looks more of like a template, but I mean you could always throw it into sqlmap and see what happens.