sqlmap doesn’t work with either of these websites – Digitalmunition




Home Forums sqlmap doesn’t work with either of these websites

This topic contains 1 reply, has 2 voices, and was last updated by  killmore231 1 month, 2 weeks ago.

  • Author
    Posts
  • #292671

    anonymous
    Participant

    So these two pages can be sql injected, but no matter what kind of command I run on sqlmap, it gives no results, even though I can use the browser and the form to inject stuff.

    https://web.ctflearn.com/web4/

    https://web.ctflearn.com/web8/

    They come from two ctf challenges. As an example just by typing in ‘ ”=’ you can get the first link to reveal the table contents, but sqlmap doesn’t work.

  • #292672

    killmore231

    Could it be that these aren’t actually a SQL injection vulnerability, but a “simulated” one to learn about injection without the overhead of running a database for it?

You must be logged in to reply to this topic.