[aravindor]

Not getting here , The number of columns are 35 , When using Union statement page doesnt show the vulnerable column,

URL Here  
pastebin(.)com/HNWWTJup

Not showing any vulnerable columns ... pls help

😭  😭  😭  😭

[w0rd]

There isn't a vulnerable column, its going to be a blind / time-based injection.

[w0rd]

Posted twice, either my connection or HF is laggy af today

[pishicat]

hi...
It has vulnerable column!
you should do some work for convert a column to multiple query ! if you do that one of columns is in source . for other columns you should use multi query ..
and inject the second query for show the vulnerable columns!(some of they will be in source)...
I think another person was asked it here ..
I don't need to showing me big by this method...
i want to help you and go to learn ... nothing never be found without trying !
proof : s8.picofile . com/file/8319414900/asasad.JPG
good luck ..

[aravindor]

Okay, first of all thank you very much. I just went through some GHI tutorials about Routed Sql injection  , tried some live sites from examples too.

But when I tried to do it in my URL.

my first problem is i'm unable to terminate statement by adding

pastebin(.)com/uNaB1TVh
Every time I get a blank page.

and I leave it there and try to do routed sqli like

pastebin(.)com/sHAH0Qqz

still blank page...


I spend a day here looking for solutions and don't know what I am doing wrong...


I'm not asking you the direct solution, but if u could just point out what are the things I should look , then it will be great . thank you very much

[Disparity]

Looks like a time-based injection. If you need help exploiting it send Janus a PM, he knows a ton about SQLi.

http://securityidiots.com/Web-Pentest/SQ...ction.html

[aravindor]

@Disparity Yes I thought first , But 'Phishicat' showed in his answer that it is possible to get the vul column by multy query injection...

[linhtinh]

I think another person was asked it here ..and got same result like this topic ,nothing lol :))

[linhtinh]

Try change column 13 to 1(or true) ,and routed query in column 3 .
and false +Un*IoN+Al*L+SeL*eCt+1,2,Routed query here,4,5,6,7,8,9,10,11,12,true,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36-- -&cid=gxatbulpxszmiq&paged=710