+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: SQL Injection Tools vs. Manual Injection (/showthread.php?tid=6114775)
SQL Injection Tools vs. Manual Injection - 1337ITWizKid - Oct 9, 2020
Which process is more effective? I would figure that learning how to perfect my skill manually would be more fruitful and more efficient that using tools?
Are there things that Havij can't do that you could otherwise do perform manually? Or is Havij a completely comprehensive tool?
Thanks!
RE: SQL Injection Tools vs. Manual Injection - NeverMore - Oct 11, 2020
you cant compare between human mind and tools .
but there are a few points you need to understand about using Tools in sql injection ;
first if there is a WAF or any defense mechanism the tools will be useless , unless you made some manual tests to figure out how the WAF works then you can use your tools to bypass it, etc Tampers scripts in sqlmap .
second , when it comes to blind types of sql injection ( boolean + time ) based , you better uses Tools like sqlmap .
because dump data in blind types is time consuming and will take alot of hours.
third , DONT ever use tools in update / insert injection , inject it manually .
RE: SQL Injection Tools vs. Manual Injection - niqscann - Oct 11, 2020
yeah humand mind of course better but its up to your knowledge.
better use tools if your knowledge is not good