Skip to content

Commit

Permalink
...
Browse files Browse the repository at this point in the history
  • Loading branch information
U53RW4R3 committed Aug 14, 2023
1 parent 48e2dd2 commit 13859d3
Show file tree
Hide file tree
Showing 2 changed files with 4 additions and 3 deletions.
4 changes: 1 addition & 3 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,8 +1,6 @@
# nuclei-fuzzer-templates

I was trying to make it possible just like how the GET request method (you can grab it from [here](https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/generic/error-based-sql-injection.yaml)) passing the SQL payloads to inject the parameters. It's a waste that nobody made a POST request template-based. Basically all this template does bruteforces the forums until it responds with the right set of parameters. Then passing the SQLi payloads is the final result.

`$ nuclei -u http://testphp.vulnweb.com/userinfo.php -t error-based-post-sql-injection.yaml -var username_forum=username_forums.txt -var password_forum=password_forums.txt -var path=sqli-payloads.txt`
My personal collection of nuclei templates.

## Credits

Expand Down
3 changes: 3 additions & 0 deletions http/vulnerabilities/generic/README.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,3 @@
I was trying to make it possible just like how the GET request method (you can grab it from [here](https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/generic/error-based-sql-injection.yaml)) passing the SQL payloads to inject the parameters. It's a waste that nobody made a POST request template-based. Basically all this template does bruteforces the forums until it responds with the right set of parameters. Then passing the SQLi payloads is the final result.

`$ nuclei -u http://testphp.vulnweb.com/userinfo.php -t error-based-post-sql-injection.yaml -var username_forum=username_forums.txt -var password_forum=password_forums.txt -var path=sqli-payloads.txt`

0 comments on commit 13859d3

Please sign in to comment.