Skip to content

sqlmap can not inject \ character to injectable url #4582

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
programmerdr opened this issue Feb 18, 2021 · 4 comments
Closed

sqlmap can not inject \ character to injectable url #4582

programmerdr opened this issue Feb 18, 2021 · 4 comments

Comments

@programmerdr
Copy link

[22:42:57] [INFO] testing connection to the target URL
got a 301 redirect to 'https://target.com/mba/tag/\'. Do you want to follow? [Y/n]

got a refresh intent (redirect like response common to login pages) to 'https://target.com/tag/\'. Do you want to apply it from now on? [Y/n]

[22:43:05] [WARNING] there is a DBMS error found in the HTTP response body which could interfere with the results of the tests
[22:43:05] [INFO] checking if the target is protected by some kind of WAF/IPS
[22:43:07] [INFO] testing if the target URL content is stable
[22:43:10] [WARNING] URI parameter '#1*' does not appear to be dynamic
[22:43:31] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable
[22:43:41] [INFO] testing for SQL injection on URI parameter '#1*'
[22:43:41] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause'
[22:45:22] [WARNING] reflective value(s) found and filtering out
[23:09:11] [INFO] testing 'OR boolean-based blind - WHERE or HAVING clause'

dbms = mysql
error on ""
used all this items =
--random-agent --no-cast --risk=3 --level=5 --dbms=mysql --tamper=space2comment,between --time-sec=6 --dbs

please help me for inject

@stamparm
Copy link
Member

I would need more data here. It is really hard to comprehend why would your url reply with the backslash (\) inside the redirection link

@programmerdr
Copy link
Author

get data header with live http header when use \ on url get response sql syntax error and when forward url to redirect

some times use * or ' url redirect but and easily injected but my target when use \ get sql syntax error on page
sqlmap can not inject this i have many target with use this character on url get error syntax and no one can not help me for this

@programmerdr
Copy link
Author

Who can help me where is admin's or support's

@stamparm
Copy link
Member

Who can help me where is admin's or support's

sorry, but i am the only one here. you'll need to find another support for your case

@sqlmapproject sqlmapproject locked and limited conversation to collaborators Feb 25, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

2 participants