Skip to content

you have not declared cookie(s) #5836

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
FoxCats03 opened this issue Jan 2, 2025 · 2 comments
Closed

you have not declared cookie(s) #5836

FoxCats03 opened this issue Jan 2, 2025 · 2 comments

Comments

@FoxCats03
Copy link

[WARNING] potential permission problems detected ('Access denied')

you have not declared cookie(s)
[WARNING] URI parameter '#1*' does not seem to be injectable

[CRITICAL] all tested parameters do not appear to be injectable. Try to increase values for '--level'/'--risk' options if you wish to perform more tests. If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could try to use option '--tamper' (e.g. '--tamper=space2comment') and/or switch '--random-agent'

What should i do?

@stamparm
Copy link
Member

stamparm commented Jan 2, 2025

  1. for start, try to Google for sqlmap usage or tutorials
  2. then, you could take a look at https://github.com/sqlmapproject/sqlmap/wiki/Usage#target-url and https://github.com/sqlmapproject/sqlmap/wiki/Usage#http-cookie-header
  3. basically, as you have access denied and something cookie, you should declare the cookie with --cookie. also, you should provide something useful to the -u <- not just dummy URL of the site
  4. please Google for some sqlmap usage

@stamparm stamparm closed this as completed Jan 2, 2025
@FoxCats03
Copy link
Author

FoxCats03 commented Jan 3, 2025

How about to get id?

python sqlmap.py -u "http://www.target.com/vuln.php?id=1" -f --banner --dbs -
-users

In there "/vuln.php?id=1" how to get this?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants