You'll run into this a lot because of search engine optimization (SEO). SEO is the strongest enemy and most web sites use it because it usually consists of using a simple plugin and filling out some keywords. This is when you know you've run into a site whose content is optimized SEO,
then you're most likely looking at a URL which is optimized.
In these situations we need to look at the source code to put the URL back together in the form we need it to be in to do a SQLi attack. In the source code, you need to determine:
- What component is currently active;
- What parameter it takes;
- What their current values are.
Bingo we got what we need! You'll see in the source code something like this:
<input type="hidden" name="option" value="com_blabla" />
<input type "hidden" name="ItemId" Value="5" />
<input type="hidden" name="Item" Value="2" />
<input type="hidden" Name="entry" Value="451" />
<input type="hidden" Name="view" Value="entries" />
Now compose your original URL by simply filling out the well-known URL pattern:
Note: This particular example is based on Joomla source code. So this will always be the exact information you're looking for.