Re: [sqlmap-users] Sqlmap missing a get param?
Brought to you by:
inquisb
From: Pieter de B. <pi...@th...> - 2011-02-04 19:52:16
|
On 02/04/11 19:06, Miroslav Stampar wrote: > > From now (r3225) we are storing dictionary keys in the order of > appearance (OrderedDict principle). > > That means that if you have URL like ?rss=1&back=2&out=3&index=0 their > testing order will be the same as their order of appearance (rss, > back, out and index at the end). Hm, how does it handle URLs with the same parameter more than once? While perhaps a bit odd, I have seen such URLs in practice. -- Pieter |