2

I am participating in a program that when I write in the url parameter ' or 1=1;-- it gives me Forbidden 403 and when I write in the parameter ' or 1=2;-- it shows me the page.

Is the website and parameter vulnerable?

If yes is it a blind SQL?

If it is a blind SQL how can I exploit it further?

4
  • 4
    You have probably hit a WAF which is refusing execution of the OR 1=1 payload. Jan 31, 2021 at 11:13
  • It's only blind sql if there is an error that is not being displayed. And it sounds like you don't have enough info to determine one way or another.
    – schroeder
    Jan 31, 2021 at 11:22
  • 1
    The 403 status indeed makes it look like a filter rejecting what looks like an attack attempt. But the specificity makes me wonder whether it will also stop ' or 69=69;--, ' or 218<>114;--, ' or 'a'='a';-- and other similar equivalent attempts not involving 1=1. You could also try some not involving or like ' is not null;--.
    – Jan Hudec
    Jul 2, 2021 at 7:57
  • The WAF probably has the string 1=1 blacklisted Apr 6, 2023 at 11:34

1 Answer 1

0

maybe there is a firewall blocked you, that is why you get 403 cuz ' or 1=1;-- is a dangerous traffic

try detect WAF using nmap script

nmap –script=http-waf-fingerprint testsite.com

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .