• XSS.stack #1 – первый литературный журнал от юзеров форума

sqlmap small help.

Sec13B

(L3) cache
Пользователь
Регистрация
05.01.2023
Сообщения
257
Реакции
39
Код:
I have this example :

https://domain.com/api/admin/AddAccount?apimode=3&apikey=89ad69a6ca7&email=anyemail@testtest.com&password=abc1234&name=NameTest

when i click on link :
Status: Client exists!
StatusCode: 3
Sent: 0
Failed: 0
Total: 0
Duration: null
Exception: null

when i change anyemail@testtest.com with anyemail123@testtest.com
Status: Success
StatusCode: 1
Sent: 0
Failed: 0
Total: 0
Duration: null
Exception: null


How i see the users already are register.
any example is welcome
 
Пожалуйста, обратите внимание, что пользователь заблокирован
This is not an sqlmap issue. You are attempting to create a new user. In the first case you are getting message that the user exists. At the second you created a new user. What you can do is to get a list of emails and run them against the request and check the response code to see if they exists or you just added them in the database, something that the owner of the website will notice for sure. PM me if you want
 


Напишите ответ...
  • Вставить:
Прикрепить файлы
Верх
Переключение BB-кодов