search

KingOfBugbounty / KingOfBugBountyTips

Our main goal is to share tips from some well-known bughunters. Using recon methodology, we are able to find subdomains, apis, and tokens that are already exploitable, so we can report them. We wish to influence Onelinetips and explain the commands, for the better understanding of new hunters..
4.24k stars 812 forks source link

sql not wok #10

Closed Spy0x7 closed 4 years ago

Spy0x7 commented 4 years ago

grep "=" url.txt| qsreplace "' OR '1" | httpx -silent -store-response-dir output -threads 100 | grep -q -rn "syntax|mysql" output 2>/dev/null && \printf "TARGET \033[0;32mCould Be Exploitable\e[m\n" || printf "TARGET \033[0;31mNot Vulnerable\e[m\n" TARGET Not Vulnerable

KingOfBugbounty commented 4 years ago

you need to have a filtered list with gospider or wayback, gf, to be able to run this tip.