[passerino]

hi everyone
a beginner question is it possible for a site to contain a DBS from another site? I'm scanning a site for the sale of clothes and shoes, and inside there is a DBS not only IT?!! I was able to find the administrator's name and password and was able to log in as Admin. in the site dashboard, there are these options dashBOARD-Warehouse-Site Management - shipping-mailing.
1- the problem that when I try to visit the BULLETIN BOARD you ask me for the password!? I tried with the passwordin here I logged in and at the dashwide it tells me wrong password!!
2- My problem is that when I download all the data like payments in PayPal and user id I get blank data, How can I recover my payment details and password without being locked out for SQLMAP injection??
3- when I visit the new ones written in the site I see the SQL attacks.
Any suggestion will be appreciated thanks

[DramaKing]

A bulletin board on a subdomain will be a separate platform and database.

[passerino]

A bulletin board on a subdomain will be a separate platform and database.

you're right bro. I noticed that 8 sites are connected. Why do you think the password is on the bulletin board?

[Nyx Shadowbyte]

Hi bro! Can you share target link here so that we can discuss in more detail?

[▄︻デ══━一一一一━]

hi everyone
a beginner question is it possible for a site to contain a DBS from another site? I'm scanning a site for the sale of clothes and shoes, and inside there is a DBS not only IT?!! I was able to find the administrator's name and password and was able to log in as Admin. in the site dashboard, there are these options dashBOARD-Warehouse-Site Management - shipping-mailing.
1- the problem that when I try to visit the BULLETIN BOARD you ask me for the password!? I tried with the passwordin here I logged in and at the dashwide it tells me wrong password!!
2- My problem is that when I download all the data like payments in PayPal and user id I get blank data, How can I recover my payment details and password without being locked out for SQLMAP injection??
3- when I visit the new ones written in the site I see the SQL attacks.
Any suggestion will be appreciated thanks

Bulletin Board Password: It likely uses separate credentials or session handling. Check for hidden forms, network requests, or submodules requiring direct auth.

Blank Data (e.g., PayPal): The admin role may be restricted, or the data may be filtered by server-side permissions. Use Burp to inspect API calls and replay them with sqlmap only if explicitly authorized.

Visible SQL Attacks: These may be from other testers or bots. Log and test inputs safely using parameterized tools.

[passerino]

Bulletin Board Password: It likely uses separate credentials or session handling. Check for hidden forms, network requests, or submodules requiring direct auth.

Blank Data (e.g., PayPal): The admin role may be restricted, or the data may be filtered by server-side permissions. Use Burp to inspect API calls and replay them with sqlmap only if explicitly authorized.

Visible SQL Attacks: These may be from other testers or bots. Log and test inputs safely using parameterized tools.

thanks bro I try to follow your advice. It is a dropshiping site where stores such as Amazon and eBay and other online stores are associated. in dashoard I see orders

---

Hi bro! Can you share target link here so that we can discuss in more detail?

you have telig?

[▄︻デ══━一一一一━]

thanks bro I try to follow your advice. It is a dropshiping site where stores such as Amazon and eBay and other online stores are associated. in dashoard I see orders

---

you have telig?

Good luck with it.

[wei88588]

很简单的兄弟 [warn]

[passerino]

很简单的兄弟 [warn]

by chance you are an administrator or staff of the site!?

[pwningtheunpwned]

How can you find bait? I can run sqlmap and can do all of these fancy tools (including nmap) yet the sites I find are either extremely shit or not vulnerable. I guess key is Google dorking the entire day of the day

[▄︻デ══━一一一一━]

很简单的兄弟 [warn]

English?

How can you find bait? I can run sqlmap and can do all of these fancy tools (including nmap) yet the sites I find are either extremely shit or not vulnerable. I guess key is Google dorking the entire day of the day

You are in wrong direction.

[pwningtheunpwned]

What is the direction then? I forgot to mention I also run Shodan and sometimes Censys scans. Cannot always rely on G00gl3.