Re: [sqlmap-users] testing json requests

[Miroslav S. <mir...@gm...>]

Yes, sqlmap should support it out of the box with option -r.

Most probably your formatting went bad while copy pasting but be sure that
there are not extra new lines between headers.

Bye


On Tue, Dec 3, 2013 at 3:29 PM, Travis Altman <tra...@gm...>wrote:

> Does sqlmap support this?  I get errors when making the request.  Below is
> my sample request.
>
> ===================================================
>
> PUT /someFile HTTP/1.1
>
> Host: 1.2.3.4:9000
>
> User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101
> Firefox/24.0
>
> Accept: */*
>
> Accept-Language: en-US,en;q=0.5
>
> Accept-Encoding: gzip, deflate
>
> Content-Type: application/json; charset=UTF-8
>
> X-Requested-With: XMLHttpRequest
>
> Referer: something
>
> Content-Length: 397
>
> Cookie: blah
>
> Connection: keep-alive
>
>
>
>
> {"blah":{"name":"somevar","solutionId":1000,"BindingField":[{"id":"90","name":"fleet","tag":"Mas","tagVal":"Mas"},{"id":"100","name":"manufacturer","tag":"monkey","tagVal":"monkey"},{"id":"110","name":"model","tag":"Cam","tagVal":"Cam"},{"id":"120","name":"style","tag":"LE","tagVal":"LE"},{"id":"50","name":"vin","tag":"1","tagVal":"1"}],"id":"1000"}}
>
>
> ------------------------------------------------------------------------------
> Rapidly troubleshoot problems before they affect your business. Most IT
> organizations don't have a clear picture of how application performance
> affects their revenue. With AppDynamics, you get 100% visibility into your
> Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics
> Pro!
> http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>


-- 
Miroslav Stampar
http://about.me/stamparm