+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: mysql syntax error (/showthread.php?tid=6245579)
mysql syntax error - night4pe - Jul 3, 2023
I have found mysql syntax error in the some site.
Then it has failed to sqli with sqlmap.
I have not found suitable way yet.
Who has experience, please discuss with me.
followings is the error message.
1064:You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ``44O``` at line 1
RE: mysql syntax error - Money- - Jul 3, 2023
Force SQLMAP to inject on the vulnerable parameter with the flag " -p "
if not do manual , link the site here , let us all play around.
RE: mysql syntax error - night4pe - Jul 3, 2023
(Jul 3, 2023 09:25 PM)Money- Wrote: Force SQLMAP to inject on the vulnerable parameter with the flag " -p "
if not do manual , link the site here , let us all play around.
I am too know that option '-p' and has used.
Below is the cmd i has used in the sqlmap.
--current-db -p keyword --dbms=mysql --random-agent --tamper=space2comment --threads=5
RE: mysql syntax error - Money- - Jul 4, 2023
(Jul 3, 2023 09:42 PM)night4pe Wrote: I am too know that option '-p' and has used.
Below is the cmd i has used in the sqlmap.
--current-db -p keyword --dbms=mysql --random-agent --tamper=space2comment --threads=5
Do it manual then , is there filtering in place since you used that tamper script space2comment?
RE: mysql syntax error - night4pe - Jul 4, 2023
It seems to no.
And i executed sqlmap in manual mode.
I has not used batch option.
RE: mysql syntax error - Money- - Jul 4, 2023
(Jul 4, 2023 01:19 AM)night4pe Wrote: It seems to no.
And i executed sqlmap in manual mode.
I has not used batch option.
I mean like manual SQLI , manual injection on the parameter without the use of tools like SQLMAP.