I have a scenario where I'm testing for injection points but the authentication form has a challenge token that refreshes with each GET. The credentials are sent in a POST accompanied by that challenge token received in the previous GET to a different URL. Then if the authentication fails in the POST that challenge used in the POST expires.

  1. GET /login provides a challenge token
  2. POST username + password fields + challenge token sent to /login.do

How can I do this type of test with SQLmap?

  • SQLmap has many options, among which --csrf-token. Isn't what you need ? Check out the docs. – Anonymous May 13 at 21:29

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.