I added this line of code,

/~$%20getent%20passwd%20root%20kkeller

to test its capabilities on a website that uses the "worldsingles.com" platform to see security vulnerabilites in the site and I was returned with the following.



dotDefender Blocked Your Request


dotDefender™ Web Application Firewall
dotDefender is a software-based web application firewall installed on Apache, IIS, or Microsoft ISA Server.

Any ideas? My goal is not to obtain login information, but in essence to see if their are any vulnerabilities. What is more interesting to me is if you can use and SQL attack to obtain personal information, without actually obtaining or logging into an account from the database.