YS
Саппорт быстро всё решил и мне дали адекватного триажера
https://support.hackerone.com/hc/en-us/requests/new через эту форму ?
Size: a a a
2020 April 02
BF
Yauheni Savushkin
https://support.hackerone.com/hc/en-us/requests/new через эту форму ?
Вроде
YS
Вроде
Окей, попробую. Спасибо
d
Hi, I got an endpoint with sql query in a website. whenever I do "show+databases" it doesn't work. it only accepts select command. what to do any idea to retrieve database
BF
Hi, I got an endpoint with sql query in a website. whenever I do "show+databases" it doesn't work. it only accepts select command. what to do any idea to retrieve database
union select?
А
Hi, I got an endpoint with sql query in a website. whenever I do "show+databases" it doesn't work. it only accepts select command. what to do any idea to retrieve database
Blind sqli
d
union select?
Only like q=select+id+from+accounts
BF
Nothing else, only select?
O
Only like q=select+id+from+accounts
sqlmap
d
It's not detecting anything in sqlmap
А
Nothing else, only select?
Какой смысл отвечать человеку, который даже не знает что такое склмап и не смог нагуглить гайды?
Решить полностью все за него?
Решить полностью все за него?
d
I tried upto level=2
d
Nothing else, only select?
Yes
А
It's not detecting anything in sqlmap
-v 6 —technique=t —time-sec=10
IS
try in sqlmap —prefix select id from dual where 1=1
IS
when i need to work with parameter who accept full sql query i used —prefix or -r with *
O
-v 6 —technique=t —time-sec=10
+
d
Sqlmap -u "site.com/q=" -prefix select id from dual where 1=1 ?? Is this correct bro.
d
Also I will add this one