Hack Forums
Can't inject Boolean SQLi vulnerable (link inside) - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: Can't inject Boolean SQLi vulnerable (link inside) (/showthread.php?tid=5924126)



Can't inject Boolean SQLi vulnerable (link inside) - krlo-s - Dec 30, 2018

Greetings hackforums,

I found a vulnerable site to Boolean SQLi. MySQL version is 5.6.41 and I even found database name, confirming the injection. The problem is when I run SQLmap it says it's not vulnerable, I even tested all tamper scripts and it doesn't detect any WAF. I must use automated tools as the vulnerability is Blind. Here's the link with the query I'm using:

https://www.dropbox.com/s/3097hgxvtw6jkqb/post%20url.txt?dl=0

Thank you ✌