0

I have a target website, which parameter is not a regular parameter, which looks like:

POST /some_url

'info={"actual_parameter1": "abc", "actual_parameter2": "def"}'

info is not the actual_parameter, but the actual_parameter1 and actual_parameter2 are.

How can I use sqlmap in this case?

2

1 Answer 1

0

thanks to the comments of this question, there are 2 ways to do it:

  1. use -p parameter, e.g. sqlmap -u test.com -p "a;b" --param-del=';'
  2. use * symbol, in any where, e.g. in cookie, in header, in url, ... sqlmap is clever enough to know this special symbol.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .