Re: [sqlmap-users] Using cURL to test a MultiPart site

[Rodrigo Z. S. <rod...@gm...>]

Now I solve the problem!!!!

This was MY MISTAKE!!! All I need to do was send the --user-agent exactly
curl was doing. I configure it by --header option, but the correct was use
--user-agent (because it send as sqlmap user agent and faill with the
actual session)

sqlmap is really a great program!!!

2015-10-25 13:09 GMT-02:00 Rodrigo Zanatta Silva <
rod...@gm...>:

> ok, I did it now. Check your e-mail. Sorry for the delay. Check your
> e-mail.
>
>   I send this mail about 4AM and I need to sleep :) now is 1PM but today
> is sunday
>
> 2015-10-25 8:26 GMT-02:00 Miroslav Stampar <mir...@gm...>:
>
>> Can you please send me privately the URL?
>>
>> Bye
>>
>> On Sun, Oct 25, 2015 at 7:51 AM, Rodrigo Zanatta Silva <
>> rod...@gm...> wrote:
>>
>>> I am having bad times with sqlmap.
>>>
>>> I can create a command with curl and I can see that the website is
>>> vulnerable. But if I try to mimic the same command with sqlmap, something
>>> goes wrong and I can't have sucess wit any request in the site. Maybe it is
>>> because sqlmap use another codding.
>>>
>>> Can I use something similar to it:
>>>
>>>
>>>    - I write the cURL command and set the place I want sqlmap inject
>>>    the payload
>>>    - The cURL do the request and write a file
>>>    - The sqlmap process the file and continue as normal
>>>
>>> The unique difference is: sqlmap WILL NOT do the internet request. Only
>>> cURL will do it.
>>>
>>> If I can't do it, where can I change it in source code to try to do this?
>>>
>>>
>>>
>>> ------------------------------------------------------------------------------
>>>
>>> _______________________________________________
>>> sqlmap-users mailing list
>>> sql...@li...
>>> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>>>
>>>
>>
>>
>> --
>> Miroslav Stampar
>> http://about.me/stamparm
>>
>
>