[captn_nemo]

I have a little problem, i don't know how to find url's with parameters quickly.

I know how to execute some url's with sqlmap.
SQL Dumper or what do you guys use for it?

[Vicci]

Just check the urls manually because there's no point in scanning a bunch of old chinese websites.

[captn_nemo]

Do you guy's don't use tools?

[Macr0]

SQL Dumper is fairly decent and easy to use if u have some knowledge and u could also import new dork lists with that but like Vicci said better off doing it manually once you have a target site.

[captn_nemo]

SQL Dumper is fairly decent and easy to use if u have some knowledge and u could also import new dork lists with that but like Vicci said better off doing it manually once you have a target site.

I have something done with SQLMap, so i don't be a ultra new kid.
But i have a problem to find exploitable URL's on a Target.

[Qcsmoker]

You could use Burp suite proxy to navigate on the target website then you could analyse all the parameters (post, get, useragent, cookies etc...) to check if there is any that could lead to a Sqli.

With a simple google search, you could use Burp Intruder to scan for sqli also.

Check this url, It seems fairly easy to do.

http://resources.infosecinstitute.com/fu...-intruder/

[captn_nemo]

Thanks a lot men!
This is what i mean. :)

[ElmagoLoko]

Hey, good night.

Another tip for you.

If you want a single website, you can make a scan using netsparker.

This software it's the best on market.

[DevinThePancake]

i use sqlmap.. what i use to find vuln websites is google dorks which is like you would type

Code

inurl:.php?id=

on google

here is a huge list of google dorks: http://www.mediafire.com/download/pofoxx...x/dork.txt

[captn_nemo]

My problem is not to find any vuln Websites, my problem is to find id etc on one website. :)

[SIM-2263652]

Ctrl + F, no problem mate.