New answers tagged

0

Now I am thinking of hardening my code by adding some time sensitive (hindering) factor into the equation. The idea is to send them a redirect to somewhere else (fbi?) for a set time period, after an initial warning; provided they reach that emails code. Most attacks are automated, so it's likely that your warning will not be seen or taken into ...


1

Judging from the information that you have been provided with, the question relates to LFI (local file inclusion). Apparently the credentails are stored on the filesystem (/userdata/passwords/). The question seems to be unrelated to the topic that you have been researching, which is SQL injection. The latter would only be an option if the credentials were ...


1

I am not aware of any tools that can do post-authentication SQL injection discovery via sqlmap, but I can describe the manual process here. First, you login to a website, while capturing all the HTTP requests and response via setting up the browser using proxy, and Burpsuite as the proxy. Now we will focus only on the post-HTTP authenticated requests. ...


2

Parameterized queries solve this problem as it separates the parsing of the query from the handling of user supplied data.


0

If you got it manually, then look into doing it again with burp and copying the request. Then pass the request to sqlmap with -r.


0

You're confusing a PHP error with a database error, but not providing enough information to reliably assist you. The error message is unrelated to the PHP code snippet you posted. It appears that you have a function call to mysqli_error() without a parameter, it is supposed to be called with an argument: https://www.php.net/manual/en/mysqli.error.php. Based ...


0

I'm sorry to inform you that while you're using parameterized queries (which is great) your authentication checks are severely flawed. Sending the redirect header does not halt execution, so any code that occurs after he redirect will still execute. You can validate this yourself by using a web agent that cani gnore redirects such as curl.


-1

500 Internal Error means that the SQLmap's payload is being detected and cannot fully exploit the target. You can try with option --random-agent and/or --hex maybe this will successfully do it.


Top 50 recent answers are included