+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: A help for SQL SQLMAP (/showthread.php?tid=6305047)
A help for SQL SQLMAP - passerino - Aug 5, 2025
hi everyone
a beginner question is it possible for a site to contain a DBS from another site? I'm scanning a site for the sale of clothes and shoes, and inside there is a DBS not only IT?!! I was able to find the administrator's name and password and was able to log in as Admin. in the site dashboard, there are these options dashBOARD-Warehouse-Site Management - shipping-mailing.
1- the problem that when I try to visit the BULLETIN BOARD you ask me for the password!? I tried with the passwordin here I logged in and at the dashwide it tells me wrong password!!
2- My problem is that when I download all the data like payments in PayPal and user id I get blank data, How can I recover my payment details and password without being locked out for SQLMAP injection??
3- when I visit the new ones written in the site I see the SQL attacks.
Any suggestion will be appreciated thanks
RE: A help for SQL SQLMAP - DramaKing - Aug 5, 2025
A bulletin board on a subdomain will be a separate platform and database.
RE: A help for SQL SQLMAP - passerino - Aug 5, 2025
(Aug 5, 2025 07:50 PM)DramaKing Wrote: A bulletin board on a subdomain will be a separate platform and database.
you're right bro. I noticed that 8 sites are connected. Why do you think the password is on the bulletin board?
RE: A help for SQL SQLMAP - Nyx Shadowbyte - Aug 6, 2025
Hi bro! Can you share target link here so that we can discuss in more detail?
RE: A help for SQL SQLMAP - ▄︻デ══━一一一一━ - Aug 6, 2025
(Aug 5, 2025 05:04 PM)passerino Wrote: hi everyone
a beginner question is it possible for a site to contain a DBS from another site? I'm scanning a site for the sale of clothes and shoes, and inside there is a DBS not only IT?!! I was able to find the administrator's name and password and was able to log in as Admin. in the site dashboard, there are these options dashBOARD-Warehouse-Site Management - shipping-mailing.
1- the problem that when I try to visit the BULLETIN BOARD you ask me for the password!? I tried with the passwordin here I logged in and at the dashwide it tells me wrong password!!
2- My problem is that when I download all the data like payments in PayPal and user id I get blank data, How can I recover my payment details and password without being locked out for SQLMAP injection??
3- when I visit the new ones written in the site I see the SQL attacks.
Any suggestion will be appreciated thanks
Bulletin Board Password: It likely uses separate credentials or session handling. Check for hidden forms, network requests, or submodules requiring direct auth.
Blank Data (e.g., PayPal): The admin role may be restricted, or the data may be filtered by server-side permissions. Use Burp to inspect API calls and replay them with sqlmap only if explicitly authorized.
Visible SQL Attacks: These may be from other testers or bots. Log and test inputs safely using parameterized tools.
RE: A help for SQL SQLMAP - passerino - Aug 8, 2025
(Aug 6, 2025 02:42 AM)▄︻テ══━一 Wrote: Bulletin Board Password: It likely uses separate credentials or session handling. Check for hidden forms, network requests, or submodules requiring direct auth.
Blank Data (e.g., PayPal): The admin role may be restricted, or the data may be filtered by server-side permissions. Use Burp to inspect API calls and replay them with sqlmap only if explicitly authorized.
Visible SQL Attacks: These may be from other testers or bots. Log and test inputs safely using parameterized tools.
thanks bro I try to follow your advice. It is a dropshiping site where stores such as Amazon and eBay and other online stores are associated. in dashoard I see orders
(Aug 6, 2025 12:29 AM)lendai-token Wrote: Hi bro! Can you share target link here so that we can discuss in more detail?
you have telig?
RE: A help for SQL SQLMAP - ▄︻デ══━一一一一━ - Aug 8, 2025
(Aug 8, 2025 12:05 AM)passerino Wrote: thanks bro I try to follow your advice. It is a dropshiping site where stores such as Amazon and eBay and other online stores are associated. in dashoard I see orders
you have telig?
Good luck with it.
RE: A help for SQL SQLMAP - wei88588 - Aug 17, 2025
很简单的兄弟 [warn]
RE: A help for SQL SQLMAP - passerino - Aug 17, 2025
(Aug 17, 2025 12:07 AM)wei88588 Wrote: 很简单的兄弟 [warn]
by chance you are an administrator or staff of the site!?
RE: A help for SQL SQLMAP - pwningtheunpwned - Sep 9, 2025
How can you find bait? I can run sqlmap and can do all of these fancy tools (including nmap) yet the sites I find are either extremely shit or not vulnerable. I guess key is Google dorking the entire day of the day
RE: A help for SQL SQLMAP - ▄︻デ══━一一一一━ - Sep 9, 2025
(Aug 17, 2025 12:07 AM)wei88588 Wrote: 很简单的兄弟 [warn]
English?
(Sep 9, 2025 02:13 PM)pwningtheunpwned Wrote: How can you find bait? I can run sqlmap and can do all of these fancy tools (including nmap) yet the sites I find are either extremely shit or not vulnerable. I guess key is Google dorking the entire day of the day
You are in wrong direction.
RE: A help for SQL SQLMAP - pwningtheunpwned - Sep 10, 2025
What is the direction then? I forgot to mention I also run Shodan and sometimes Censys scans. Cannot always rely on G00gl3.