[sqlmap-users] SQLi in parameter's name

[a a <rez...@se...>]

Hello,

During one assessment I have found the web application that is vulnerable to 
the SQL injection not in parameter values but in parameter names itself.

This is something sqlmap is unable to find. Is it possible to add such 
functionality (e.g. by optional parameter) to sqlmap?

Regards

Karel Marhoul