Cheap KYC Verifications & Openups ◆ ProxiesFood: Unlimited Residential Proxy ◆ Anvilpoint CyberOps - Hacker for Hire ◆ Spoof Call and Spoof SMS set any caller ◆
Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact
Hack Forums Hacks, Exploits, and Various Discussions Grayhat • Purple Team • Hybrid Security Website Hacking SQL Injection Attacks › [TUT] Use An SQL Injection to Hack a Website on Windows Using SQLMap[TUT]

New Reply 

[TUT] Use An SQL Injection to Hack a Website on Windows Using SQLMap[TUT]
Coeg
Guest
 
Feb 22, 2015 11:05 PM
why i get a message like these?
[11:13:03] [WARNING] using unescaped version of the test because of zero knowled
ge of the back-end DBMS. You can try to explicitly set it using option '--dbms'
[11:17:17] [WARNING] GET parameter 'page' is not injectable
[11:17:17] [CRITICAL] all tested parameters appear to be not injectable. Try to
increase '--level'/'--risk' values to perform more tests. Also, you can try to r
erun by providing either a valid value for option '--string' (or '--regexp') If
you suspect that there is some kind of protection mechanism involved (e.g. WAF)
maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment')

What do i do to fix that?
Abdilo
Abdilo Offline
Skids Aggravate me
***
HF Ub3r
Posts:
2,228
Threads:
180
Credibility:
000
Popularity:
3
βytes:
β 0
Game XP:
0
Feb 23, 2015 12:58 AM
(Feb 22, 2015 11:05 PM)Coeg Wrote:  why i get a message like these?
[11:13:03] [WARNING] using unescaped version of the test because of zero knowled
ge of the back-end DBMS. You can try to explicitly set it using option '--dbms'
[11:17:17] [WARNING] GET parameter 'page' is not injectable
[11:17:17] [CRITICAL] all tested parameters appear to be not injectable. Try to
increase '--level'/'--risk' values to perform more tests. Also, you can try to r
erun by providing either a valid value for option '--string' (or '--regexp') If
you suspect that there is some kind of protection mechanism involved (e.g. WAF)
maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment')

What do i do to fix that?
that means from the tests it did it is not vuln to sqli
do --level=4 --risk=4
Obimoto
Obimoto Offline
[closed@HF:]
Posts:
3,109
Threads:
61
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Feb 23, 2015 01:05 AM (This post was last modified: Feb 23, 2015 01:06 AM by Obimoto.)
(Feb 23, 2015 12:58 AM)Abdilo Wrote:  that means from the tests it did it is not vuln to sqli
do --level=4 --risk=4
Yeah the last part is this ^^^

The first part is saying it does not know what the back-end dbms is, so by default it is using the unescaped version...

You would use the -dbms option to fix that...
i.e.
-dbms=MySql
Coeg
Guest
 
Feb 23, 2015 08:02 PM
I'm trying to inject this site with sqlmap
www*trisakti*ac*id/?page=jobs&ID=1105
Could you help and show me how to inject that site please?
Abdilo
Abdilo Offline
Skids Aggravate me
***
HF Ub3r
Posts:
2,228
Threads:
180
Credibility:
000
Popularity:
3
βytes:
β 0
Game XP:
0
Feb 24, 2015 12:37 AM (This post was last modified: Feb 24, 2015 12:38 AM by Abdilo.)
(Feb 23, 2015 08:02 PM)Coeg Wrote:  I'm trying to inject this site with sqlmap
www*trisakti*ac*id/?page=jobs&ID=1105
Could you help and show me how to inject that site please?
im going to laugh my ass off if there is no sqli and you think all sites are vuln to sqli because they have ?id=
Arka
Guest
 
Feb 24, 2015 02:24 PM
(Feb 24, 2015 12:37 AM)Abdilo Wrote:  im going to laugh my ass off if there is no sqli and you think all sites are vuln to sqli because they have ?id=

He may not think that. He asked for help with the same URL in a thread he made --> https://hackforums.net/showthread.php?tid=4700000

The site was proven to be vulnerable.
rUNEY
rUNEY Offline
[n00b@HF:]
*
Registered
Posts:
8
Threads:
2
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Feb 24, 2015 03:17 PM
Dear OP you made one mistake from what i can see, The code on the sixth step says "slqmap.py" Its supposed to be "sqlmap.py" thought i'd clear that up so people don try 7-8 times like i did anyways Some help with this would be appreciated i1107.photobucketDOTcom/albums/h381/raylaw1/Untitled_zpsioddncmt.png
swatcity
Guest
 
Feb 24, 2015 03:19 PM
this is literally full blown aids.

lol @ not even mentioning --help
Balde
Balde Offline
[user@HF:]
*
Registered
Posts:
125
Threads:
13
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Feb 26, 2015 11:45 AM
Great Tutorial bro, Thanks for this!
Triload
Triload Offline
[n00b@HF:]
*
Registered
Posts:
24
Threads:
0
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Feb 28, 2015 07:45 AM
Great tutorial, much to read through which is nice
devtheacc
devtheacc Offline
[user@HF:]
*
Registered
Posts:
110
Threads:
18
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Mar 1, 2015 02:44 PM (This post was last modified: Mar 1, 2015 02:47 PM by devtheacc.)
Thank you!

Will try to learn now!

!!!!!!
mradin1
mradin1 Offline
[n00b@HF:]
*
Registered
Posts:
35
Threads:
1
Credibility:
000
Popularity:
0
βytes:
β 0
Game XP:
0
Mar 2, 2015 09:14 PM
Nice tutorial, really appreciate this :)
LionRagex
LionRagex Offline
[user@HF:]
*
Registered
Posts:
100
Threads:
21
Credibility:
100
Popularity:
4
βytes:
β 0
Game XP:
0
Mar 4, 2015 03:03 PM
Do these kind of errors also make the website sql vulnerable or it's only erros mentioning sql gyazo.com/d6d874e6daeb3e29834ffe71c2d523e3
ŜHΔÐΣ
ŜHΔÐΣ Offline
[closed@HF:]
Posts:
1,733
Threads:
225
DO NOT DEAL WITH THIS MEMBER
βytes:
β 0
Game XP:
0
Mar 4, 2015 10:01 PM
what does inurl mean i need to put the actual url ?
http://heroes-wow.com/wotlk/admin/login.php
Lexica
Guest
 
Mar 4, 2015 10:17 PM
(Mar 4, 2015 10:01 PM)ŜHΔÐΣ Wrote:  what does inurl mean i need to put the actual url ?
http://heroes-wow.com/wotlk/admin/login.php

Here you go, just click this LMGTFY.
Next Oldest | Next Newest
New Reply 


Possibly Related Threads...
Thread / Author Replies Views Last Post
by Sh1z15Aug 22, 2026 02:07 PM 6 430 Aug 22, 2026 02:07 PM
Last Post: CyberXero
by ๖ۣۜCσмρℓεxιтүJan 19, 2026 06:22 PM 5 696 Jan 19, 2026 06:22 PM
Last Post: SpiderSpicy
by -DownFallMay 19, 2025 09:38 PM 467 71,435 May 19, 2025 09:38 PM
Last Post: jabba