[sqlmap-users] querystrings with *'s and no spaces
Brought to you by:
inquisb
From: Robin W. <ro...@di...> - 2014-10-01 09:25:18
|
I've got the following vulnerable querystring value: string=the%%22/**/and/**/1=1/**/and/**/%22%%22=%22 Where with 1=1 I get data back, 1=0 is false so no data. I can't use spaces which is why I've have to go for /**/. How do I tell sqlmap where the injection point is and to use /**/ instead of spaces? Robin |