Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Vulnerable Forum 3k members

Did you dump a list of all of the available databases?

What about running a search with sqlmap for column names in case you missed something?
(Mar 25, 2015 10:33 PM)sluggerz Wrote:  Lol dude you're just missing it because that information is definitely in there.

Are you saying this because you've seen it, or just to say something? It could be that the forum authentication data is in a separate database technology that isn't accessible from the injection point we have, or even hosted on another system.

I havnt looked so I'm not saying this is the case, I'm just saying it could be that there is no auth data here.
(Mar 26, 2015 10:57 AM)sluggerz Wrote:  I wonder if they are running two DBS. I would try a different parameter.

But wouldn't you see the other DB? For the hell of it I ran the link in havij(I know the basics of sqli so far but havij was faster while I did other things) and I click get DB at least 5 times and only info_schem and interplay came
There's no admin or id in that vulnerable site :3


Possibly Related Threads...
Thread / Author Replies Views Last Post
by C0ldplayJun 12, 2016 10:40 AM 3 273 Jun 12, 2016 10:40 AM
Last Post: 7h3_Ph3n0m
by JackVRipperJun 25, 2015 05:42 AM 3 226 Jun 25, 2015 05:42 AM
Last Post: JackVRipper
by ♆ ∂їş†∪яßΣ∂ ♆Apr 5, 2015 12:00 PM 13 732 Apr 5, 2015 12:00 PM
Last Post: ♆ ∂їş†∪яßΣ∂ ♆