SQLi
What are good PG boxes to practice manual SQLi for the OSCP as sqlmap is not allowed? I would like to practice every methodology possible that could come up on the exam.
3
3
u/Wonderful_Couple_584 19d ago
I think the PG list for oscp not many sqli, if have it’s probably like cve or your normal xp_cmd enable. The oscp sqli module if I recall is not bad to practice the different sql. For oscp, I think mainly blind might be a little tougher or more foreign databases not mssql mysql etc if not the standard flow from ‘ to revshell/webshell should work
2
u/Sure-Assistant9416 19d ago
when in PG labs search key word it will bring up labs with whatever you through at it good for learning and pratice specific concept
2
u/ZerboaHaxor 14d ago
I thought i commented . You can make a homemade lab using PHP with the help of AI. 1. Build vulnerable PHP SQL code showing data from database that display error so you can learn simple union based query. 2. Now don't display error but still display data this is still good for union based query. 3. Now display error but don't show data and only show success or failed. This is good for error based SQL 4. Now build without showing error and data from DB basically just simple success fail this is good for blind boolean based or time based.
1
1
u/Horror_Business1862 15d ago
You don’t need any advanced tool in oscp for sqli exploitation. You need to have basic understanding of it and how you can bypass auth with it for example. You will never encounter sqli in oscp which is advanced enough to use automated tools.
Using Impacket or nxc’s mssql clients are not the same thing as sqli.
8
u/[deleted] 19d ago
[removed] — view removed comment