Okay so a couple of days back i injected a site and found over 1,200 usernames and passwords. I knew by the popularity of the site that i'd run into alot of data, and only had my tablet handy at the time, so i attacked that site with 'DroidSQLi' and successfully pulled 4 databases. My only issue is, as far as i know, there is no way of copying all of that data into some form of text file, so i attacked it again, but this time using Havij, and i couldn't get in. I then tried The Mole, again no luck. Finally i tried BSQL Hacker and still no luck, so just out of curiosity I decided to use DroidSQLi again, and i get in straight away. Can someone tell me what i'm missing? Also, apart from the ones I have already mentioned, can anyone recommend me any good SQL Injection tools for windows please.If anyone wants me to post website link for whatever reason just say so. Thanks all
Injection works on Android, but fails on Havij, Mole and BSQL? |
Using tablet you're sending to the webserver 'mobile' type of the user-agent that redirect you to the mobile version of the site that could be vuln for sqli, if you are using Havji it sends by default regular (PC's) user agent which is probably not vuln to the sqli. Solution is to fix user-agent to m-one.
Mar 17, 2016 01:13 AM
(This post was last modified: Mar 17, 2016 01:14 AM by -zYMTOM'.)
(Mar 17, 2016 01:10 AM)one_nice Wrote: Using tablet you're sending to the webserver 'mobile' type of the user-agent that redirect you to the mobile version of the site that could be vuln for sqli, if you are using Havji it sends by default regular (PC's) user agent which is probably not vuln to the sqli. Solution is to fix user-agent to m-one. Or it could also be that Havij is pretty shit. Try SQLmap and see if that solves the issue, otherwise sniff your data on your tablet and get the whole request and copy it as closely as possible(i.e useragent, referrer etc, potentially the query too) |
|
|