Greetings hackforums,
I found a vulnerable site to Boolean SQLi. MySQL version is 5.6.41 and I even found database name, confirming the injection. The problem is when I run SQLmap it says it's not vulnerable, I even tested all tamper scripts and it doesn't detect any WAF. I must use automated tools as the vulnerability is Blind. Here's the link with the query I'm using:
https://www.dropbox.com/s/3097hgxvtw6jkq...l.txt?dl=0
Thank you ✌
I found a vulnerable site to Boolean SQLi. MySQL version is 5.6.41 and I even found database name, confirming the injection. The problem is when I run SQLmap it says it's not vulnerable, I even tested all tamper scripts and it doesn't detect any WAF. I must use automated tools as the vulnerability is Blind. Here's the link with the query I'm using:
https://www.dropbox.com/s/3097hgxvtw6jkq...l.txt?dl=0
Thank you ✌