[sqlmap-users] AMF sqli injection

[Christopher D. <chr...@ch...>]

Good afternoon gents,
I am a profession penetration tester and have a rather difficult injection
point for one of my customers.

I can trigger the exception by pausing traffic with burp and inserting
NULL's into the user | pass via a back end flex call. Is there a way to
take advantage of sqlmap to inject via flex remoting objects ?

If not I will have to write this myself but I thought I may ask the list
first.

Thanks.
Sincerely,
Christopher M Downs

-- 
[image: Description: Chrome]

Chris Downs | System Administrator

main

888.781.0088

email

*chr...@ch... <chr...@ch...>*

web

www.chromeriver.com