Hello and good evening,
i've recently tried to improve my pentesting skills and learn more about it with metasploitable 2. I am trying some things on the DVWA. For the moment, i am learning the basics of Burp Suite (more precisely i am trying to learn more about the OWASP Top ten).
But i get stuck at SQL Injections in the DVWA SQLi section. Whenever i run a command like:
1' or '0'='0
I get redirected to a page saying:
Hacking attempt detected and logged.
I've tried some evasion techniques, but none of them are working. Am i doing something wrong? Someone has an advice? I also tried the steps from: https://computersecuritystudent.com/SECURITY_TOOLS/DVWA/DVWAv107/lesson6/index.html , but i get the same result running those commands...
(And please bear with me, i am into pentesting for 3-4 months now and first time using Burp/making SQLi attempts :) )
P.S. i found it is possible to make it work via disabling the PHPIDS, but i am interested on how to evade and bypass it too.