[cloudz4me]

any suggestion not getting blocked again?



sqlmap.py -u "http://website.com" --no-cast --batch --level 5 --risk 3 --technique E --dbs -risk 3 -level 5 -tamper space2comment,randomcase,between -drop-set-cookie


https://prnt.sc/uolhph

[INBA]

install and use it with --tor , probable the IP get blocked

[cloudz4me]

install and use it with --tor , probable the IP get blocked

ok thanks but theirs another problem a captcha before login.

[INBA]

try optain the host real IP with different methode and put in sqlmap the direct link (with the IP)

[SUDOCODES]

you will most likely get a captcha if you use a service like tor because all tor exist nodes are know.
Rather use socks proxy or a VPN, you have better chances of it not asking for a captcha.

[cloudz4me]

you will most likely get a captcha if you use a service like tor because all tor exist nodes are know.
Rather use socks proxy or a VPN, you have better chances of it not asking for a captcha.

captcha makes this difficult it wont intercept even burpsuite.
http://prntscr.com/uot5qy

anyone how to bypass this captcha?

[linkinpork]

any suggestion not getting blocked again?

Hope I'm not too late for the party.

You need to make your requests as normal as possible. Start with a "normal" user agent like Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:80.0) Gecko/20100101 Firefox/79.0, then make sure your requests are delayed in such a way that you seem like you're just browsing the website normally.

The --risk argument also sends more "abnormal" requests, and in my experience ends up giving me more false positives.

Finally in my work it's very rare I find an SQLi vector in the URL. Best you intercept and inject in the POST data.

Have fun.

[cloudz4me]

Hope I'm not too late for the party.

You need to make your requests as normal as possible. Start with a "normal" user agent like Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:80.0) Gecko/20100101 Firefox/79.0, then make sure your requests are delayed in such a way that you seem like you're just browsing the website normally.

The --risk argument also sends more "abnormal" requests, and in my experience ends up giving me more false positives.

Finally in my work it's very rare I find an SQLi vector in the URL. Best you intercept and inject in the POST data.

Have fun.

thanks sent you some pm

[niqscann]

i think nothing to do with that.
catchpa bypass is hard.
i even tried with browser than copied made a file to work with sqlmap , exactly same infos as browser and again catchpa appeared