[Hack3rcon]

Hello,
Is it possible to scan a website with Sqlmap without id parameter? My target doesn't have any "id" parameter in the URL!

Thank you.

[tschaikowsky]

Yes it is possible, i dont know why you specially talk about an "ID" Parameter, there are few more Parameters out there

[Hack3rcon]

Yes it is possible, i dont know why you specially talk about an "ID" Parameter, there are few more Parameters out there

Thank you.
I checked https://www.geeksforgeeks.org/use-sqlmap...erability/ and https://www.binarytides.com/sqlmap-hacking-tutorial/ and other tutorials, but they worked with the "id" parameter.
Can you show me how?

[tschaikowsky]

https://www.geeksforgeeks.org/use-sqlmap...erability/
http://testphp.vulnweb.com/listproducts.php?cat=1
sqlmap -u http://testphp.vulnweb.com/listproducts.php?cat=1 --dbs

and many more

[Hack3rcon]

https://www.geeksforgeeks.org/use-sqlmap...erability/
http://testphp.vulnweb.com/listproducts.php?cat=1
sqlmap -u http://testphp.vulnweb.com/listproducts.php?cat=1 --dbs

and many more

As I said, that examples have id parameter.

[Pr0blemZ]

So i have ran into the same wonder
my self in the last few days.Can one add an ID parameter to a specific site target url?Or can one create a custone dork for a specific site with an id parameter?Any further insight
appreiciated here.

[fritz]

I'm not sure I understand the questions here, but maybe you could start by learning more about post/get requests and html forms, and how they're connected to sql injections