Return to Question

I'm pentesting a client's website but could not find a syntax to tell SQLMap that the variable it should test doesn't have an explicit name in the URL.

I've already tried the MVC method that says to use * (asterisk - did not work), but this is a little different. Instead of:

http://web.site/index/aksjdnas

it is in the form:

http://web.site/index.aspx?aksjdnas

with aksjdnas the value of the parameter, not the name of it. SQLMap keeps using it as the parameter name. Has anyone seen a solution to this problem?

Edit:

I really cannot understand why this question was put as off-topic as this is an "on-topic" question as stated in the help center - security tool and i'm not asking anyone to break anything for me.

I'm merely asking for help with syntax in a security tool. There are various other questions about this problem here on SE IS, and none of them has been closed. I've started a new question because the solution proposed there hasn't worked for me, as there are some differences in the url format.

I'm pentesting a client's website but could not find a syntax to tell SQLMap that the variable it should test doesn't have an explicit name in the URL.

I've already tried the MVC method that says to use * (asterisk - did not work), but this is a little different. Instead of:

http://web.site/index/aksjdnas

it is in the form:

http://web.site/index.aspx?aksjdnas

with aksjdnas the value of the parameter, not the name of it. SQLMap keeps using it as the parameter name. Has anyone seen a solution to this problem?

Edit:

I really cannot understand why this question was put as off-topic as this is an "on-topic" question as stated in the help center - security tool and i'm not asking anyone to break anything for me.

I'm merely asking for help with syntax in a security tool. There are various other questions about this problem here on SE IS, and none of them has been closed. I've started a new question because the solution proposed there hasn't worked for me, as there are some differences in the url format.

I'm testing a website but could not find a syntax to tell SQLMap that the variable it should test doesn't have an explicit name in the URL.

I've already tried the MVC method that says to use * (asterisk - did not work), but this is a little different. Instead of:

http://web.site/index/aksjdnas

it is in the form:

http://web.site/index.aspx?aksjdnas

with aksjdnas the value of the parameter, not the name of it. Has anyone seen a solution to this problem?

I'm pentesting a client's website but could not find a syntax to tell SQLMap that the variable it should test doesn't have an explicit name in the URL.

I've already tried the MVC method that says to use * (asterisk - did not work), but this is a little different. Instead of:

http://web.site/index/aksjdnas

it is in the form:

http://web.site/index.aspx?aksjdnas

with aksjdnas the value of the parameter, not the name of it. SQLMap keeps using it as the parameter name. Has anyone seen a solution to this problem?

Edit:

I really cannot understand why this question was put as off-topic as this is an "on-topic" question as stated in the help center - security tool and i'm not asking anyone to break anything for me.

I'm merely asking for help with syntax in a security tool. There are various other questions about this problem here on SE IS, and none of them has been closed. I've started a new question because the solution proposed there hasn't worked for me, as there are some differences in the url format.

I'm testing a website but could not find a syntax to tell SQLMap that the variable it should test doesn't have an explicit name in the url.

I've already tried the MVC method that says to use " * " (asterisk - did not work), but this is a little different: instead of

http://web.site/index/**aksjdnas**

it is in the form

http://web.site/index.aspx?**aksjdnas**

being "aksjdnas" the value of the parameter, not the name of it. Has anyone seen a solution to this problem?

I'm testing a website but could not find a syntax to tell SQLMap that the variable it should test doesn't have an explicit name in the URL.

I've already tried the MVC method that says to use * (asterisk - did not work), but this is a little different. Instead of:

http://web.site/index/aksjdnas

it is in the form:

http://web.site/index.aspx?aksjdnas

with aksjdnas the value of the parameter, not the name of it. Has anyone seen a solution to this problem?