Re: [sqlmap-users] querystring?

[l.g. <lg...@gm...>]

Chris Oakley <christopher.oakley@...> writes:

> 
> 
> No, it can handle arbitrary injection points - if you're looking to test 
e.g. RESTful style parameters then just place a * where you want to inject - 
this is the custom injection point marker. - Chris
> 
> 
> On 13 January 2014 17:42, l.g. <lg1981-
Re5...@pu...> wrote:
> Hi!
> I got the error
> [CRITICAL] no parameter(s) found for testing in the provided data (e.
> g. GET parameter 'id' in 'www.site.com/index.php?id=1')
> is it possible that SQLMAP is intended for webapps which interact with the
> server thru queystrings only?
> Thank you!
> --------------------------------------------------------------------------
----
> CenturyLink Cloud: The Leader in Enterprise Cloud Services.
> Learn Why More Businesses Are Choosing CenturyLink Cloud For
> Critical Workloads, Development Environments & Everything In Between.
> Get a Quote or Start a Free Trial 
Today.http://pubads.g.doubleclick.net/gampad/clk?
id=119420431&iu=/4140/ostg.clktrk
> _______________________________________________
> sqlmap-users mailing listsqlmap-users-
5NW...@pu...https://lists.sourceforge.net/lists
/listinfo/sqlmap-users
> 
> 
> 
> 
> 
> 
> --------------------------------------------------------------------------
----
> CenturyLink Cloud: The Leader in Enterprise Cloud Services.
> Learn Why More Businesses Are Choosing CenturyLink Cloud For
> Critical Workloads, Development Environments & Everything In Between.
> Get a Quote or Start a Free Trial Today. 
> http://pubads.g.doubleclick.net/gampad/clk?
id=119420431&iu=/4140/ostg.clktrk
> 
> _______________________________________________
> sqlmap-users mailing list
> sqlmap-users@...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
> 
ok, but the params must be passed in the url, right? Or is there a way to 
inject, e.g., thru viewstate?
Thank you again