Re: [sqlmap-users] -l switch misses GET params?
Brought to you by:
inquisb
From: Miroslav S. <mir...@gm...> - 2010-04-29 21:17:47
|
Hi. Could you please send a part of the webscarab log you've used (URL obfuscated of course :)? That would be most helpful. Kind regards. On Thu, Apr 29, 2010 at 7:07 PM, m4l1c3 <mal...@gm...> wrote: > I've having difficulty getting sqlmap to pick up GET parameters from > Webscarab logs. > > Version 8 rc7 everything works as expected with the -l switch. > > With 8 final. I get the following: > > ./sqlmap.py -l <webscarab logs> -v 5 -p "did,dc,gid" > > sqlmap/0.8 - automatic SQL injection and database takeover tool > http://sqlmap.sourceforge.net > > [*] starting at: 10:35:53 > > [10:35:53] [DEBUG] initializing the configuration > [10:35:53] [DEBUG] initializing the knowledge base > [10:35:53] [DEBUG] cleaning up configuration parameters > [10:35:53] [DEBUG] setting the HTTP timeout > [10:35:53] [DEBUG] setting the HTTP method to GET > [10:35:53] [DEBUG] parsing targets list from '<webscarab logs>' > [10:35:53] [INFO] sqlmap parsed 3 testable requests from the targets list > [10:35:53] [DEBUG] creating HTTP requests opener object > [10:35:53] [DEBUG] parsing XML queries file > [10:35:53] [INFO] sqlmap got a total of 3 targets > url 1: > GET http://DOMAIN/PATH/?did=14&dc=1&gid=28 > do you want to test this url? [Y/n/q] >> y > [10:35:54] [INFO] testing url http://DOMAIN:80/PATH/?did=14&dc=1&gid=28 > [10:35:54] [ERROR] all testable parameters you provided are not present > within the GET, POST and Cookie parameters > > [*] shutting down at: 10:35:54 > > > But if I invoke -u with the url, it picks the GET parameters up ok, even if > I specify them. > > > > > ------------------------------------------------------------------------------ > > _______________________________________________ > sqlmap-users mailing list > sql...@li... > https://lists.sourceforge.net/lists/listinfo/sqlmap-users > > -- Miroslav Stampar E-mail / Jabber: miroslav.stampar (at) gmail.com Mobile: +385921010204 (HR 0921010204) PGP Key ID: 0xB5397B1B |