Re: [sqlmap-users] testing admin area after authorization
Brought to you by:
inquisb
From: Sebastian N. <seb...@sy...> - 2013-08-13 13:39:58
|
Hi, Am 13.08.2013 15:15, schrieb Den: > Thank you! > > I setted up "--cookie" parameter and got a acces. If you are running a webproxy (e.g. webscarab or Burp Suite) between your browser and the server or if you have some development add-ons installed, you could also make a copy of a complete HTTP-REQUEST send to the server and load it using "-l file-containing-the-request". It helps when doing complex queries (e.g. with referer- and agent-checks, multiple cookies, long POST-bodies or file-attachements). It can also help with avoiding encoding-problems and/or quoting-issues (e.g. $ or ! in an url with a linux shell) All the best, Sebastian |