The previous Bulk ParamSpider scanner script was incorrect. I have corrected it.

Home

Library

Stories

Stats

cat target.lst | xargs -n 1 -I {} python3 ~/ParamSpider/paramspider.py --domain {} --level high | urldedupe >> all_spiderparamters.txt

How I Gained Access to a Multi-Billion Dollar Retailer’s MySQL Databases Using Simple SQL Injection

626

nav1n

Mar 9, 2023

The previous Bulk ParamSpider scanner script was incorrect. I have corrected it.

Sign up to discover human stories that deepen your understanding of the world.

Free

Distraction-free reading. No ads.

Organize your knowledge with lists and highlights.

Tell your story. Find your audience.

Membership

Read member-only stories

Support writers you read most

Earn money for your writing

Listen to audio narrations

Read offline with the Medium app

Written by nav1n

1K Followers

24 Following

Responses (1)

Write a response

What are your thoughts?

Also publish to my profile

doSomething();

May 4, 2023

when i try that command i get this error
xargs: warning: options --max-args and --replace/-I/-i are mutually exclusive, ignoring previous --max-args value
how to solve it?

More from nav1n

How I Gained Access to a Multi-Billion Dollar Retailer’s MySQL Databases Using Simple SQL Injection

InfoSec Write-ups

nav1n

How I Gained Access to a Multi-Billion Dollar Retailer’s MySQL Databases Using Simple SQL Injection

Hello, thank you for stopping by.

Mar 8, 2023

626

I Earned $3500 and 40 Points for A GraphQL Blind SQL Injection Vulnerability.

InfoSec Write-ups

nav1n

I Earned $3500 and 40 Points for A GraphQL Blind SQL Injection Vulnerability.

Thank you for your love and appreciation for my recent blog post on MySQL SQL Injection that I found in a major international retail…

Mar 10, 2023

665

Exploiting SQL Error SQLSTATE[42000] To Own MariaDB of A Large EU based Online Media and…

InfoSec Write-ups

nav1n

Exploiting SQL Error SQLSTATE[42000] To Own MariaDB of A Large EU based Online Media and…

I recently got a private invitation to hack on a EU based Online Media and Entertainment org. The target’s scope wasn't large, but had a…

May 20, 2023

355

Advanced SQL Injection Techniques to Data Exfiltration, OoB, Leveraging JSON etc.

InfoSec Write-ups

nav1n

Advanced SQL Injection Techniques to Data Exfiltration, OoB, Leveraging JSON etc.

Here are some advanced SQL injection techniques that go beyond basic attacks. Learn how to execute data exfiltration, leverage Out-of-Band…

Jul 27, 2024

See all from nav1n

Recommended from Medium

Authentication Bypass leads to PII = ($$$)

ABDELKARIM MOUCHQUELITA

Authentication Bypass leads to PII = ($$$)

Hello folks, Ramadan Kareem !

5d ago

Part-2 | Mastering 403 Forbidden Bypass Techniques✨

Abhijeet Kumawat

Part-2 | Mastering 403 Forbidden Bypass Techniques✨

🚀Free Article Link

3d ago

How i Find IDOR lead to account takeover

black_virus

How i Find IDOR lead to account takeover

Hello Hunters , Hello Cyber-Sec Community

Mar 9

210

Critical SQL Injection Exploit in URL Paths: Bounty Report

OSINT Team

Karthikeyan Nagaraj

Critical SQL Injection Exploit in URL Paths: Bounty Report

Exposing Critical Vulnerabilities: How a Simple SQL Injection Can Compromise Entire Databases

6d ago

Andrey Pautov

SQLMap: A Deep Dive into Automated SQL Injection Testing. Part 2. (Advanced, custom setup)

Learn how SQLMap transforms the landscape of database security by automating the detection and exploitation of SQL injection…

Nov 5, 2024

How I uncover an IDOR led to access Private CV

InfoSec Write-ups

JEETPAL

How I uncover an IDOR led to access Private CV

Free Read

6d ago

117

See more recommendations

Help
Status
About
Careers
Press
Blog
Privacy
Terms
Text to speech
Teams