how relevant is sqlmap

[Rendo]

hi

i have learned a lot about sql web pen (i think) i have got a few db but it is all trash.. how do i find good quality material.. is it my dorks.. do i need to change my approach.. what am i doing wrong to get better results. or is sql just not relevant anymore? thanks

 

[Seer]

It is, just you need to find a good target, it's not always just using dorks. With dorks you can't find POST or authenticated for example

 

[Rendo]

Could you suggest other ways to find targets? What is the most efficient way to exploit sql. I have been using sqlmap to dork the targets. Is this method outdated?

 

[Seer]

Yes, kinda, most probably all are already dumped.
Have you ever tried exploiting on POST parameter or user friendly URL?

 

[Alex_bog777]

Try this tool also

SqliSniper - Advanced Time-based Blind SQL Injection Fuzzer For HTTP Headers

www.kitploit.com

It works like sqlmap but for http headers
SQL is still relevant but you need to learn how to tamper and play with the threads and parameters it comes with. Many times it wont dump because you are not providing the correct parameters for your target.