Using recursive grep for harvesting data
portswigger.net | blog | #burp-suite | #automation | #sql-injection | #portswigger | #intruder | #burp-intruder | #pen-testing | #data-exfiltration | #recursive-grep | #data-extraction
Summary
Burp Intruder's 'recursive grep' builds each payload from the previous response, ideal for error-based SQL injection that returns one value at a time — harvesting a whole table without a script.
- Published
- Collected
--- id: 2327 title: "Using recursive grep for harvesting data" source_domain: portswigger.net source_url: "https://portswigger.net/blog/using-recursive-grep-for-harvesting-data" published_at: "2007-04-05T09:02:00Z" tags: ["burp-suite", "automation", "sql-injection", "portswigger", "intruder", "burp-intruder", "pen-testing", "data-exfiltration", "recursive-grep", "data-extraction"] phying_url: "https://phying.com/item/2327" lang: en --- # Using recursive grep for harvesting data ## Summary Burp Intruder's 'recursive grep' builds each payload from the previous response, ideal for error-based SQL injection that returns one value at a time — harvesting a whole table without a script. ## Intelligence Metadata - **Sources:** portswigger.net - **Published:** 2007-04-05T09:02:00Z - **Original:** https://portswigger.net/blog/using-recursive-grep-for-harvesting-data - **Phying News:** https://phying.com/item/2327