Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Burp scanner missed to exploit a blind SQL injection

Alexios | Last updated: Mar 06, 2024 08:53PM UTC

Greetings. I was recently working on a blind SQL vulnerability (oracle database). There was 3 vulnerable parameters on the same request. However burp scanner could not always identify the vulnerability and when that happens it doesn't exploit them, leaving the vulnerability as tentative. Each of those parameters, when provided with some valid payloads like '||(select null from dual)||' and '||(select null from v$version)||' returns a 200 ok response, while with a payload like '||(select null from a-non-real-table)||' returns a 500 error response.

Ben, PortSwigger Agent | Last updated: Mar 07, 2024 10:00AM UTC