Re: [sqlmap-users] (no subject)
Brought to you by:
inquisb
From: Miroslav S. <mir...@gm...> - 2014-10-23 07:30:44
|
Hi. You need to put a custom injection mark * at the place where you want sqlmap to inject. For example: ...name[1*] Bye p.s. your example with SELECT is not a proper one as queries are usually not supported in stacking On Thu, Oct 23, 2014 at 7:43 AM, a dehqan <deh...@gm...> wrote: > Hi Guys , > > Is Sqlmap able to send an array instead of string while injecting? > > Like situation we have html form and we want manually send post variable > 'name' this way (value is obtained from array) : > > name="name[1 ;select * from users -- ] > > I want do it with Sqlmap , but how ? > > > Regards dehqan > -- Miroslav Stampar http://about.me/stamparm |