SQL injection: EVERYTHING behind socks/vpn?

[Grinny]

hi there, i've just started exploring the sql injection world...what i usually use is SQLi Dumper (v. 8.0).
my question is: I really need to proceed to EVERY step of the DBs dumping behind proxies/socks/vpn/whatever?
i usually scrape some socks and mask my ip using proxyfier, but it's not that easy, because it takes YEARS to search the web for all the exploitable pages...
what do "experts" say? maybe i could use anonymity only in the "dumping step"?
thank you in advance!!!

 

[lin-os]

Hi,
1-google search (dorks)
2- Sqlmap to hack Users and Pass or any other tool
3- use Tor to add you index or your Message (Proxy browser)

*Sqlmap Video:


Some dorks :

inurl:news.php?ID=3 site:.

inurl:article.php?id=5

inurl:detail.php?ID=3 site:.

inurl:.co.in & inurl:.php?id=

intext:india & inurl:.php?id=

inurl:.co.in & inurl:article.php?ID=

inurl:.co.in & inurl:Pageid=

inurl:.co.in & inurl:staff_id=

inurl:.gov.in & inurl:.php?id=

inurl:.co.in & inurl:newsitem.php?num=

inurl:.nic.in & inurl:.php?id=

inurl:india & inurl:.php?id=

Regards

 

[Grinny]

Hi,
1-google search (dorks)
2- Sqlmap to hack Users and Pass or any other tool
3- use Tor to add you index or your Message (Proxy browser)

*Sqlmap Video:


Some dorks :

inurl:news.php?ID=3 site:.

inurl:article.php?id=5

inurl:detail.php?ID=3 site:.

inurl:.co.in & inurl:.php?id=

intext:india & inurl:.php?id=

inurl:.co.in & inurl:article.php?ID=

inurl:.co.in & inurl:Pageid=

inurl:.co.in & inurl:staff_id=

inurl:.gov.in & inurl:.php?id=

inurl:.co.in & inurl:newsitem.php?num=

inurl:.nic.in & inurl:.php?id=

inurl:india & inurl:.php?id=

Regards

Click to shrink...

thank you for your suggestions...i assume your advice is to use proxies, regardless of the dumping software i am going to use, right?

 

[lin-os]

after user and pass details hacked u can use a proxy to login the site
or u can run jsql tool (Java) with proxy (photo attached below)

You do not have permission to view the link please Log in or Register

Regards

 

[Grinny]

i see...i think SQLi got that setting, too
thanks!

 

[Grinny]

thx

Click to shrink...

you're welcome but...thanks for what?