Report (Base64 param)

[jsql-robot]

I try test injection for Post Method base login form of project demo at link
http://sechow.com/bricks/docs/installation.html

But this tool cannot work?

[ron190]

Usually login pages are not meant to extract data by injection but only to be forced by always true SQL conditions like 'or 1=1'.

Instead you should use jSQL on 'Content pages', those pages are made for data extraction using injection.

[ron190]

I guess jsql lacks boolean OR injection for login pages, I'll implement it for the next release.

[ron190]

Injection using OR now works with all five 'Content pages' forms.
The last one uses Base64, it still needs tests from my side.