Did you dump a list of all of the available databases?
What about running a search with sqlmap for column names in case you missed something?
What about running a search with sqlmap for column names in case you missed something?
Vulnerable Forum 3k members |
(Mar 25, 2015 10:33 PM)sluggerz Wrote: Lol dude you're just missing it because that information is definitely in there. Are you saying this because you've seen it, or just to say something? It could be that the forum authentication data is in a separate database technology that isn't accessible from the injection point we have, or even hosted on another system. I havnt looked so I'm not saying this is the case, I'm just saying it could be that there is no auth data here. (Mar 26, 2015 10:57 AM)sluggerz Wrote: I wonder if they are running two DBS. I would try a different parameter. But wouldn't you see the other DB? For the hell of it I ran the link in havij(I know the basics of sqli so far but havij was faster while I did other things) and I click get DB at least 5 times and only info_schem and interplay came |
|
|
| Possibly Related Threads... | |||
| Thread / Author | Replies | Views | Last Post |
| by C0ldplayJun 12, 2016 10:40 AM | 3 | 273 |
Jun 12, 2016 10:40 AM Last Post: 7h3_Ph3n0m |
| by JackVRipperJun 25, 2015 05:42 AM | 3 | 226 |
Jun 25, 2015 05:42 AM Last Post: JackVRipper |
| by ♆ ∂їş†∪яßΣ∂ ♆Apr 5, 2015 12:00 PM | 13 | 732 |
Apr 5, 2015 12:00 PM Last Post: ♆ ∂їş†∪яßΣ∂ ♆ |