Burp Suite User Forum

Login to post

SQL Injection Detection Problem

Enes | Last updated: Dec 24, 2019 08:07AM UTC

Hello, I comminicated with you before about this problem (15 - 20 November, email: enessanal@hotmail.com.tr or this email address). But I couldn't submit a sample case. But I've found an example. Web for Pentester I is a machine that have vulnerable application on it. Also have sql injection vulnerabilty. On this machine, In Sql Injection Examples Section, 7th example; Burp's Scanner doesn't detect related vulnerability. You can try easily with download this machine (https://pentesterlab.com/exercises/web_for_pentester/course) and related app. But if you want to see evidence, I can send one via mail. Thank you so much.

Michelle, PortSwigger Agent | Last updated: Dec 24, 2019 03:22PM UTC

To help us confirm the details of this could you send us an email with screenshots/the evidence you found to support@portswigger.net, please? This will be useful to make sure we are looking at the same steps as you. Also, what version of Burp you are using?

You need to Log in to post a reply. Or register here, for free.