+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: SQLi pentesting question (/showthread.php?tid=6081577)
SQLi pentesting question - gjariolg1657 - May 25, 2020
Hi,
I am pentesting sqli using sqlmap.
Sqlmap sometimes detects 'it looks like the back-end DBMS is 'CrateDB'', sometimes detects 'it looks like the back-end DBMS is 'Mysql''.
And always detects any one dbms.
Of course, no result.
Is this WAF problem? Is it impossible sqli?
And I am looking for other good sqli pentest tool than sqlmap, which one is better than sqlmap?
Thank you.
RE: SQLi pentesting question - gjariolg1657 - May 25, 2020
(May 25, 2020 05:07 AM)James! Wrote: Could you share some of the log please?
And in answer to your second question, sqlmap is one of the best options for CLI tools. There is SQLi Dumper and Havij that are both GUI based.
Thank you for your reply.
there isn't useful log during test, it says "the parameter is not injectable"
I think there is a WAF, so I tested with all tamper script,
Do u think is it impossible to sqli?
RE: SQLi pentesting question - gjariolg1657 - May 25, 2020
(May 25, 2020 06:20 AM)James! Wrote: Don't you have your answer then? The parameter isn't injectable.
I want to know how to you use tamper for WAF bypass, if you know about sqlmap well.
My test dbms is mysql and php site.
I tested with all tamper scripts, do u make tamper yourself for sqli test ? or giveup?
Thanks
RE: SQLi pentesting question - pizza500 - May 25, 2020
sqlmap is not good for pentest, its especially for automated database dump
sqlmap alternatives
https://linuxsecurity.expert/tools/sqlmap/alternatives/
RE: SQLi pentesting question - gjariolg1657 - May 25, 2020
(May 25, 2020 06:57 AM)pizza500 Wrote: sqlmap is not good for pentest, its especially for automated database dump
sqlmap alternatives
Thank you for your good answer.
I'd like to use sqlmap for tamper scripts, sqlmap alternatives also have WAF bypassing functions,too?
RE: SQLi pentesting question - pizza500 - May 25, 2020
waf bypassing need do manually, you dont really will have success with script
shoot me your target
(May 25, 2020 07:57 AM)gjariolg1657 Wrote: Thank you for your good answer.
I'd like to use sqlmap for tamper scripts, sqlmap alternatives also have WAF bypassing functions,too?
RE: SQLi pentesting question - xBlackMax - May 25, 2020
If you use scripts for WAF you probably have no idea what occurs behind the scenes and you'll never get better this way.
You may hit me up with additional details and I'll solve it to you and explain you the process step by step.
RE: SQLi pentesting question - gjariolg1657 - May 25, 2020
I think WAF bypassing is the most important problem in sqli, so I'd like to use tamper with sqlmap.
So is there any other important option for sqli success?
Thanks
RE: SQLi pentesting question - kuramiqnko - May 27, 2020
Whenever I have the same error, finding the backend, but cannot fetch any database I try with --random-agent and/or --hex, sometimes when the injections are plain text they are detected, but when is used with --hex you have better chance not getting detected.
Try it out !