[Hack3rcon]

Hello,
How can I understand a website using which DB? MySQL, MS-SQL or...

Thank you.

[Darkbyte]

Usually just running commands to force a error then run functions like SLEEP() that only work on certain databases ect.

Also sql map can do this for you:


If you need to do it manual check out the sqlmap source code and see how they do it .
https://github.com/sqlmapproject/sqlmap

You can also check paths like /phpmyadmin/ , ports like 3306 ect.

[Hack3rcon]

sqlmap source code?
My problem is that all sqlmap examples need a URL like "URL\.php?id=51" , but the website that I want to test not show anything in the web browser address bar!

[Darkbyte]

Hmm do you have a entry point for injections?

Sounds like you are dealing with post data or a custom url rule , is it possible to pm me the site? No worries if not.

[Hack3rcon]

I send a PM to you.

Thank you.