Re: [sqlmap-users] testing SQLi in cookies

[Bernardo D. A. G. <ber...@gm...>]

Add to your command line --level 3. Refer to user's manual for further
details on --level and --risk.

Bernardo


On 10 January 2013 00:27, Mr X0rcist <mr....@gm...> wrote:
> Hi,
>
> I am trying to test SQLi in one of the cookie.  I know it is in there.
>
> I have tried to run it like  -u "https://url.com/?p1"&p2&p3 --cookie="c1;=v2
> c2=v2" -p c2
>
> but it is giving me error something like no parameter in get string.
>
> I also tried to pass on whole get request loaded from file like
>
> -r file -p=c2  but still same kind of error.
>
> I dont want to waste time will sqlmap is testing against 8-10 GET
> parameters, required by application to avoid error or redirection while SQLi
> is in the cookie
>
>
> Any advise will be appreciated.
>
> Thanks
>
> ------------------------------------------------------------------------------
> Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
> MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
> with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
> MVPs and experts. ON SALE this month only -- learn more at:
> http://p.sf.net/sfu/learnmore_122712
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>



-- 
Bernardo Damele A. G.

E-mail / Jabber: bernardo.damele (at) gmail.com
Mobile: +447788962949 (UK 07788962949)