Показать сообщение отдельно

  #12  
Старый 31.07.2015, 08:52
maluw3250
Новичок
Регистрация: 12.09.2010
Сообщений: 16
С нами: 8245046

Репутация: 0
По умолчанию

Если я правильно понимаю то sqlmap делает инекцию только по параметру GET?

Код:
[07:48:14] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms'
[07:48:48] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns'
[07:49:21] [WARNING] GET parameter 'id' is not injectable
[07:49:21] [CRITICAL] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment')
[07:49:21] [WARNING] HTTP error codes detected during run:
403 (Forbidden) - 224 times
[*] shutting down at 07:49:21
 
Ответить с цитированием