HQLmap

HQLmap copied to clipboard

dtrizna

``` def table_exists(message): if ('is not mapped' in message): return False else: return True ``` The method of checking table exists is check if 'is not mapped' string in response....

nibiwodong

Hello, Is it possible to test for HQL injection vulnerabilities with using HQLmap with a url that is using mod rewrite (or something like it) to make the urls clean?...

Comancheroo

Hello @PaulSec , I tried running this one on my very own Apache Server which doesn't have a db on but just a static page and here is the output:...

shipcod3

### Description There is some Logical problems with parameter '--tables'. The problem just as the issues' title. ### Detail ``` x:\hqlmap>HQLmap.py -v -u "http://hql-injection-site/doSysLogin.action" --data "hdu.hdUsersNmae=admin&hdu.hdPassWord=password&verifyCode=jgnb" -p hdu.hdPassWord --T com_recruit.entity.sysuser.hdzuser...

L34Rn