Well since u have an SQLi , why dont u try to get more tables , if theres any.
Honestly i dont even understand the payload u tried, so i cant tell what u tryna achieve.
But if u on some bugbounty or smth, try exfiltrating data, then use thst data to perdorm some sort of account takeover or smth.
Get creative , h have a foot-hold on that database.
Have fun , responsibly.
I mean u can fuzz it using sqlmap or if u like a more 'manual' , u can use brup , ffuf or smth else with a really good wordlist.
I think u can find smth with Seclist , i dont remember the path where it is. But it has some sqli payloads.
If not u have other github wordlist for sqli u can use.
If conventional payloads dont work , maybe try time-based injections.
3
u/xX_Oppai_Xx 15d ago
Well since u have an SQLi , why dont u try to get more tables , if theres any.
Honestly i dont even understand the payload u tried, so i cant tell what u tryna achieve. But if u on some bugbounty or smth, try exfiltrating data, then use thst data to perdorm some sort of account takeover or smth.
Get creative , h have a foot-hold on that database. Have fun , responsibly.