Re: [sqlmap-users] I want to use custom payload, but I don't know DIY

[is2reg<is...@16...>]

thank you, I will try again.

2014-12-30



is2reg



发件人：Brandon Perry <bpe...@gm...>
发送时间：2014-12-29 06:39
主题：Re: [sqlmap-users] I want to use custom payload, but I don't know DIY
收件人："is2reg"<is...@16...>
抄送："SqlMap List"<sql...@li...>

Could try —prefix=“where “ although %23 is a hex encoded #.




On Dec 28, 2014, at 12:07 PM, is2reg <is...@16...> wrote:


Hi,
    the payload is :
    %20where%201=2%20UNION%20SELECT%201,2,3,4,5,database(),7,8,9,10,11,12,13,14,15,16,17,18,19,20,21%23

    Can't replace "where" with "and", and can't replace "%23" with "#", otherwise the result is incorrect, how can I use this payload with sqlmap ?
    Thanks !

2014-12-29



is2reg
------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net_______________________________________________
sqlmap-users mailing list
sql...@li...
https://lists.sourceforge.net/lists/listinfo/sqlmap-users