Re: [sqlmap-users] REST API File Write Feature?
Brought to you by:
inquisb
From: Brandon P. <bpe...@gm...> - 2015-03-03 00:25:07
|
Can you set the proxy argument to go through burp suite to see exactly what sqlmap is sending when those options are set? Sent from a phone > On Mar 2, 2015, at 6:21 PM, Johnathon Doe <hoo...@gm...> wrote: > > I am working on PHP front-end to leverage the REST API to drive functionality, having some issues working in a few of the advanced features - mostly file write. I was wondering if anyone could verify the wFile & dFile config options when set will trigger a file write action. > > I have managed to get the osCmd option to successfully write a file to the target, but I can't seem to get the normal --file-write --file-dest options to work. The osCmd option generally takes me passing in the prompt answers via the answer configuration option. > > I assumed if i set the values for the wFile & dFile options it would trigger the file write, but nothing seems to be happening. I dump the list of options currently configured and shows both options set with proper paths (same ones that work when provided to osCmd via answers to prompt). The logs don't show any errors and it just seems to end right where I would expect it to try the file writing. Is there a third option that needs to be set that I am perhaps missing? Any help you guys can provide is greatly appreciated! > > Also note: when i put in a bad path (just to test), it does seem to trigger the error for finding local file (wFile) so its doing something with these variables, but still seems like I'm missing something.... > > Thanks, > HR > ------------------------------------------------------------------------------ > Dive into the World of Parallel Programming The Go Parallel Website, sponsored > by Intel and developed in partnership with Slashdot Media, is your hub for all > things parallel software development, from weekly thought leadership blogs to > news, videos, case studies, tutorials and more. Take a look and join the > conversation now. http://goparallel.sourceforge.net/ > _______________________________________________ > sqlmap-users mailing list > sql...@li... > https://lists.sourceforge.net/lists/listinfo/sqlmap-users |