I detect a
sqli vulnerability in a target url using
sqlmap. Now when I try this I always get "
connection timed out to the target URL":
./sqlmap.py -u targetURL --dbs
How can I solve it?
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community
If this is a server you own, look at the logs. If you do not, you may have fallen into a honeypot/honeyport/active countermeasures url or otherwise been detected by Intrusion Detection or a Web Application Firewall - something like Fail2Ban may have gotten you. If you're a pentester, talk to your client - if they want you to proceed, they may have to whitelist you.
You can always try going through a proxy, see if that connection succeeds.