Re: [sqlmap-users] sqlmap parsing XML parameters in web services

[Miroslav S. <mir...@gm...>]

Hi.

For such cases where sqlmap doesn't recognize parameters inside (we have a
SOAP parameter parsing but we could probably review it) POST request you
can freely use custom injection mark *.

Also, please update to the latest commit as there was a related "patch" for
your case (https://github.com/sqlmapproject/sqlmap/issues/108).

Kind regards,
Miroslav Stampar

On Thu, Jul 19, 2012 at 6:46 PM, * * <pip...@gm...> wrote:

> Is there a way to get sqlmap to recognize xml parameters inside an
> intercepted SOAP request?  I have a POST request with parameters in xml
> format inside a SOAP envelope I want to test.  Thanks!
>
> ------------------------------------------------------------------------------
> Live Security Virtual Conference
> Exclusive live event will cover all the ways today's security and
> threat landscape has changed and how IT managers can respond. Discussions
> will include endpoint security, mobile security and the latest in malware
> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>


-- 
Miroslav Stampar
http://about.me/stamparm