[sqlmap-users] GET Parameter Splitting
Brought to you by:
inquisb
From: Thunder C. <hac...@gm...> - 2013-01-22 21:08:52
|
Hi Guys, The current URL that I am testing has several parameters the issue is that for the request to succeed all parameters need to be sent. URL = http://site.com/script?ex1=true&ex2=test&ex3=blah Unfortunately it appears that sqlmap splits the parameters and tests for the injection on each one individually i.e. Test 1 = http://site.com/script?ex1=true ' UNION Test 2 = http://site.com/script?ex2=test ' UNION Is there any way to make sqlmap perform the injection inline with the URL, thus sending all parameters to avoid the 404? |