Re: [sqlmap-users] Change cookies on each sqlmap request

[Miroslav S. <mir...@gm...>]

Hi.

One way is a direct approach:

python sqlmap.py -u "http://testphp.vulnweb.com/artists.php?artist=1"
--cookie="cid=1" --eval='cid=2' -v 5
...
GET /artists.php?artist=1 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: sqlmap/1.0.8.20#dev (http://sqlmap.org)
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: testphp.vulnweb.com
Cookie: cid=2
Pragma: no-cache
Cache-control: no-cache,no-store
Connection: close

Bye

On Fri, Aug 19, 2016 at 5:10 PM, Benjamin Vassmer <bva...@gm...>
wrote:

> I am trying to run sqlmap against a site that uses single-use URLs. I am
> able using the --eval parameter to run a bash script that creates a fresh
> cookie for each request, but I cannot seem to find a way to load that
> cookie with every request.
>
> I have tried the --load-cookies parameter, but it only loads at sqlmap
> start. Is there a way to direct --load-cookies to a script? Or an alternate
> way to change the cookie with each request?
>
> Thanks for your (cumulative) knowledge.
>
> Benjamin
>
> ------------------------------------------------------------
> ------------------
>
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>


-- 
Miroslav Stampar
http://about.me/stamparm