+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: SQLi HELP Plsssss Not getting vulnerable column!!! (/showthread.php?tid=5796156)
SQLi HELP Plsssss Not getting vulnerable column!!! - aravindor - Feb 7, 2018
Not getting here , The number of columns are 35 , When using Union statement page doesnt show the vulnerable column,
URL Here
pastebin(.)com/HNWWTJup
Not showing any vulnerable columns ... pls help
😭 😭 😭 😭
RE: SQLi HELP Plsssss Not getting vulnerable column!!! - w0rd - Feb 14, 2018
There isn't a vulnerable column, its going to be a blind / time-based injection.
RE: SQLi HELP Plsssss Not getting vulnerable column!!! - w0rd - Feb 14, 2018
Posted twice, either my connection or HF is laggy af today
RE: SQLi HELP Plsssss Not getting vulnerable column!!! - pishicat - Feb 14, 2018
hi...
It has vulnerable column!
you should do some work for convert a column to multiple query ! if you do that one of columns is in source . for other columns you should use multi query ..
and inject the second query for show the vulnerable columns!(some of they will be in source)...
I think another person was asked it here ..
I don't need to showing me big by this method...
i want to help you and go to learn ... nothing never be found without trying !
proof : s8.picofile . com/file/8319414900/asasad.JPG
good luck ..
RE: SQLi HELP Plsssss Not getting vulnerable column!!! - aravindor - Feb 15, 2018
Okay, first of all thank you very much. I just went through some GHI tutorials about Routed Sql injection , tried some live sites from examples too.
But when I tried to do it in my URL.
my first problem is i'm unable to terminate statement by adding
pastebin(.)com/uNaB1TVh
Every time I get a blank page.
and I leave it there and try to do routed sqli like
pastebin(.)com/sHAH0Qqz
still blank page...
I spend a day here looking for solutions and don't know what I am doing wrong...
I'm not asking you the direct solution, but if u could just point out what are the things I should look , then it will be great . thank you very much
RE: SQLi HELP Plsssss Not getting vulnerable column!!! - Disparity - Feb 21, 2018
Looks like a time-based injection. If you need help exploiting it send Janus a PM, he knows a ton about SQLi.
http://securityidiots.com/Web-Pentest/SQL-Injection/time-based-blind-injection.html
RE: SQLi HELP Plsssss Not getting vulnerable column!!! - aravindor - Feb 27, 2018
@Disparity Yes I thought first , But 'Phishicat' showed in his answer that it is possible to get the vul column by multy query injection...
RE: SQLi HELP Plsssss Not getting vulnerable column!!! - linhtinh - Apr 4, 2018
I think another person was asked it here ..and got same result like this topic ,nothing lol :))
RE: SQLi HELP Plsssss Not getting vulnerable column!!! - linhtinh - Dec 27, 2018
Try change column 13 to 1(or true) ,and routed query in column 3 .
and false +Un*IoN+Al*L+SeL*eCt+1,2,Routed query here,4,5,6,7,8,9,10,11,12,true,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36-- -&cid=gxatbulpxszmiq&paged=710