[sqlmap-users] testing SQLi in cookies

[Mr X. <mr....@gm...>]

Hi,

I am trying to test SQLi in one of the cookie.  I know it is in there.

I have tried to run it like  -u "https://url.com/?p1"&p2&p3
--cookie="c1;=v2 c2=v2" -p c2

but it is giving me error something like no parameter in get string.

I also tried to pass on whole get request loaded from file like

-r file -p=c2  but still same kind of error.

I dont want to waste time will sqlmap is testing against 8-10 GET
parameters, required by application to avoid error or redirection while
SQLi is in the cookie


Any advise will be appreciated.

Thanks