HTB Academy - SQLMAP ESSENTIALS - Case6

1

I’ve been stuck for 5 days now on Case6. The hint mentions to “Use the prefix ‘`)’.”

With that mention, i’ve issued the following commands:
sqlmap -u “Target URL” --prefix= ‘`)’ --suffix=“-- -”

sqlmap -u “Target URL” --prefix= “‘`)’” --suffix=“-- -”

sqlmap -u “http://178.128.163.230:31021/case6.php?col=id?q=test” --prefix=‘%20%27%60%29%27’ --suffix=“-- -”

sqlmap -u “http://178.128.163.230:31021/case6.php?col=id?q=test” --prefix=‘%20%27%60%29%27’ --suffix=“-- -” -dump -T flag5 --level=5 --risk=3

None are working. Can you help me properly construct this command or let me know what I need to use?

2

You have the answer in your post. Don’t over think it, I have been struggling the same way.
I was able to get the answer by copying the curl command and putting the prefix only. Don’t forget --batch and --dump as well.

Best of luck!