looking for a good strategy for auto-mass exploiter sql injection for specific website

[jaroule]

hello xss team,

as the title describe i'm looking for a strategy/framework/tools to mass exploit sql injection for specific niches.

thanx guys

 

[jaroule]

i find some important articles but i'm looking for a more efficient way to do so:

Crash Course for Finding SQL Injection in Web Apps.
Part 1:

CRASH COURSE FOR FINDING SQL INJECTION IN WEBAPPS:PART 1

I agree manually finding sql injection in web applications are difficult stuff and not easy to find.It often considered a P1 bug in bug…

medium.com

Part 2:

CRASH COURSE FOR FINDING SQL INJECTION IN WEBAPPS:PART 2

When performing an SQL injection UNION attack, there are two effective methods to determine how many columns are being returned from the…

cyberdefecers.medium.com

Part 3:

CRASH COURSE FOR FINDING SQL INJECTION IN WEBAPPS:PART 3

BYPASSING THE FILTERS

cyberdefecers.medium.com

Part 4:

CRASH COURSE FOR FINDING SQL INJECTION IN WEBAPPS:PART 4

BLIND SQL INJECTION VULNERABILITIES

cyberdefecers.medium.com

]-> SQL Injection Cheat Sheet:

SQL Injection Cheat Sheet

The Invicti SQL Injection Cheat Sheet is the definitive resource for payloads and technical details about exploiting many different variants of SQLi vulnerabilities.

www.netsparker.com

 

[Panam 87]

You could use a mix of burp & sqlmap. Burp will scan/crawl & sqlmap will exploit. Here's a pdf that explains the technique : https://www.exploit-db.com/docs/english/45428-bulk-sql-injection-using-burp-to-sqlmap.pdf

 

[jaroule]

You could use a mix of burp & sqlmap. Burp will scan/crawl & sqlmap will exploit. Here's a pdf that explains the technique : https://www.exploit-db.com/docs/english/45428-bulk-sql-injection-using-burp-to-sqlmap.pdf

thanx man you rock! but what about searching for many websites (specific niches) at once do u think that specific google or shodan dorks can do the work?

 

[Panam 87]

thanx man you rock! but what about searching for many websites (specific niches) at once do u think that specific google or shodan dorks can do the work?

Yeah. Dorks would help you generate a list of targets. Without giving too much details, what niche are you targeting?