With the help of an ACUNETix scanner, I found a SQL injection vulnerability. I tried to dump the database with SQLmap, but I couldn't. It took me three days to figure out why it wasn't detecting SQLi. I tried all SQLmap tampers and made up tampers, but they also didn't work.
So I decided to try another tool to dump DB called Ghauri and succeeded. In dumping the whole database.
Eventually, I found out that the problem was in sqlmap itself
stamparm
commented
1 year ago
With the help of an ACUNETix scanner, I found a SQL injection vulnerability. I tried to dump the database with SQLmap, but I couldn't. It took me three days to figure out why it wasn't detecting SQLi. I tried all SQLmap tampers and made up tampers, but they also didn't work. So I decided to try another tool to dump DB called Ghauri and succeeded. In dumping the whole database. Eventually, I found out that the problem was in sqlmap itself