Re: [sqlmap-users] Using cURL to test a MultiPart site

[Miroslav S. <mir...@gm...>]

Great that you've managed to solve it by yourself :)

Bye

p.s. thx for donation

On Sun, Oct 25, 2015 at 4:49 PM, Rodrigo Zanatta Silva <
rod...@gm...> wrote:

> Now I solve the problem!!!!
>
> This was MY MISTAKE!!! All I need to do was send the --user-agent exactly
> curl was doing. I configure it by --header option, but the correct was use
> --user-agent (because it send as sqlmap user agent and faill with the
> actual session)
>
> sqlmap is really a great program!!!
>
> 2015-10-25 13:09 GMT-02:00 Rodrigo Zanatta Silva <
> rod...@gm...>:
>
>> ok, I did it now. Check your e-mail. Sorry for the delay. Check your
>> e-mail.
>>
>>   I send this mail about 4AM and I need to sleep :) now is 1PM but today
>> is sunday
>>
>> 2015-10-25 8:26 GMT-02:00 Miroslav Stampar <mir...@gm...>:
>>
>>> Can you please send me privately the URL?
>>>
>>> Bye
>>>
>>> On Sun, Oct 25, 2015 at 7:51 AM, Rodrigo Zanatta Silva <
>>> rod...@gm...> wrote:
>>>
>>>> I am having bad times with sqlmap.
>>>>
>>>> I can create a command with curl and I can see that the website is
>>>> vulnerable. But if I try to mimic the same command with sqlmap, something
>>>> goes wrong and I can't have sucess wit any request in the site. Maybe it is
>>>> because sqlmap use another codding.
>>>>
>>>> Can I use something similar to it:
>>>>
>>>>
>>>>    - I write the cURL command and set the place I want sqlmap inject
>>>>    the payload
>>>>    - The cURL do the request and write a file
>>>>    - The sqlmap process the file and continue as normal
>>>>
>>>> The unique difference is: sqlmap WILL NOT do the internet request. Only
>>>> cURL will do it.
>>>>
>>>> If I can't do it, where can I change it in source code to try to do
>>>> this?
>>>>
>>>>
>>>>
>>>> ------------------------------------------------------------------------------
>>>>
>>>> _______________________________________________
>>>> sqlmap-users mailing list
>>>> sql...@li...
>>>> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>>>>
>>>>
>>>
>>>
>>> --
>>> Miroslav Stampar
>>> http://about.me/stamparm
>>>
>>
>>
>


-- 
Miroslav Stampar
http://about.me/stamparm