[night4pe]

I have found  mysql syntax error in the some site.

Then it has failed to sqli with sqlmap.

I have not  found suitable way yet.

Who has experience, please discuss with me.

followings is the error message.

1064:You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ``44O``` at line 1

[Money-]

Force SQLMAP to inject on the vulnerable parameter with the flag " -p "

if not do manual , link the site here , let us all play around.

[night4pe]

Force SQLMAP to inject on the vulnerable parameter with the flag " -p "

if not do manual , link the site here , let us all play around.

I am too know that option '-p' and has used.

Below is the cmd i has used in the sqlmap.

--current-db -p keyword --dbms=mysql --random-agent --tamper=space2comment --threads=5

[Money-]

I am too know that option '-p' and has used.

Below is the cmd i has used in the sqlmap.

--current-db -p keyword --dbms=mysql --random-agent --tamper=space2comment --threads=5

Do it manual then , is there filtering in place since you used that tamper script space2comment?

[night4pe]

It seems to no.

And i executed sqlmap in manual mode.

I has not used batch option.

[Money-]

It seems to no.

And i executed sqlmap in manual mode.

I has not used batch option.

I mean like manual SQLI , manual injection on the parameter without the use of tools like SQLMAP.