Re: [sqlmap-users] Parameter with a colon

[Miroslav S. <mir...@gm...>]

hi mitchell

have you tried putting a * into the URL where you want sqlmap to
inject payloads?

e.g.:

./sqlmap.py -u "http://target.com/news/press/p:1*"

kind regards

On Thu, Sep 8, 2011 at 10:11 AM, mitchell <mit...@tu...> wrote:
> Hello guys,
> Recently, during a blackbox test, my team had to test a URL that looks like:
> http://target.com/news/press/p:1
> where 'p' is a dynamic parameter, and it stands for the page.
> Do you know if there is a way to have sqlmap test this parameter?
> Kind Regards,
> --
> #!/mitchell
> ------------------------------------------------------------------------------
> Doing More with Less: The Next Generation Virtual Desktop
> What are the key obstacles that have prevented many mid-market businesses
> from deploying virtual desktops?   How do next-generation virtual desktops
> provide companies an easier-to-deploy, easier-to-manage and more affordable
> virtual desktop model.http://www.accelacomm.com/jaw/sfnl/114/51426474/
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>



-- 
Miroslav Stampar
http://about.me/stamparm