Re: [sqlmap-users] --load-cookies

2013-04-15 Thread Dirk Wetter
Hi Miroslav, On 04/15/2013 11:45 AM, Miroslav Stampar wrote: > Hi Dirk. > > Now that crash should be "patched". > > Could you please retry it now and say if the latest revision suits your needs? cool, thx. Works! However (sorry): One needs to omit the cookie in the request header, otherwise it

Re: [sqlmap-users] --load-cookies

2013-04-15 Thread Miroslav Stampar
Hi Dirk. Now that crash should be "patched". Could you please retry it now and say if the latest revision suits your needs? Kind regards, Miroslav Stampar On Mon, Apr 15, 2013 at 11:36 AM, Dirk Wetter wrote: > > > On 04/14/2013 01:14 AM, Miroslav Stampar wrote: > > Nevertheless, with the lat

Re: [sqlmap-users] --load-cookies

2013-04-15 Thread Dirk Wetter
On 04/14/2013 01:14 AM, Miroslav Stampar wrote: > Nevertheless, with the latest commit that check should be "neutralized" now. > Could you please retry it now? thx, Miroslav. I tried (b6fee63) but this time the cookie parser lib hiccups, using the same file: /usr/lib64/python2.7/_MozillaCook

Re: [sqlmap-users] --load-cookies

2013-04-13 Thread Miroslav Stampar
Nevertheless, with the latest commit that check should be "neutralized" now. Could you please retry it now? Kind regards, Miroslav Stampar On Sun, Apr 14, 2013 at 12:59 AM, Miroslav Stampar < miroslav.stam...@gmail.com> wrote: > Hi Dirk. > > Well, I would say that you have an expired cookie. Do

Re: [sqlmap-users] --load-cookies

2013-04-13 Thread Miroslav Stampar
Hi Dirk. Well, I would say that you have an expired cookie. Do you see that value 0? That value should be a valid UNIX time representing time of cookie expiration. Also, I've just tested that cookie of yours and sqlmap says: "[WARNING] cookie '' has expired" Kind regards, Miroslav Stampar O

Re: [sqlmap-users] --load-cookies

2013-04-13 Thread Dirk Wetter
Hi Miroslav, thx for your prompt answer. On 04/12/2013 07:45 PM, Miroslav Stampar wrote: > Hi Dirk. > > Could you please get the latest revision and retry it again? ed5599f: almost the same: with cookie in the header sqlmap takes only this one. The slight difference seems to be that in the cas

Re: [sqlmap-users] --load-cookies

2013-04-12 Thread Miroslav Stampar
Hi Dirk. Could you please get the latest revision and retry it again? There was a situation where info messages have been wrongly written that original response contained Set-Cookie in situations like yours. In case that everything stays as it is, I'll need to ask you to provide more details. Fo

Re: [sqlmap-users] --load-cookies

2013-04-12 Thread Dirk Wetter
Hi Miroslav, yes unfortunately. If I omit the cookie line in the request header completely, sqlmap seems to take the first cookie issued by the server with set-cookie (and put's it silently in). Cheers, Dirk On 04/12/2013 03:24 PM, Miroslav Stampar wrote: > Hi. > > And this is also happenin

Re: [sqlmap-users] --load-cookies

2013-04-12 Thread Miroslav Stampar
Hi. And this is also happening if you are skipping "Cookie: JSESSIONID=C2E79FD79E967D3E3BA52EE67F8824D7" from the original request? Kind regards, Miroslav Stampar On Fri, Apr 12, 2013 at 3:10 PM, Dirk Wetter wrote: > > Hi folks, > > that doesn't work for me. It always uses the cookie sup

[sqlmap-users] --load-cookies

2013-04-12 Thread Dirk Wetter
Hi folks, that doesn't work for me. It always uses the cookie supplied (below in $REQUEST, or if I omit the line in $REQUEST the one from the 1st server reply is being used) So what is wrong in here: cd ~/networking/tools/sqlmap/sqlmap-dev1.0-dev-ea12cce ./sqlmap.py --ignore-proxy --force-

Re: [sqlmap-users] --load-cookies format

2013-02-12 Thread Boris Chazalet
Thanks, I have tested and everything (load-cookies, expired warning and symbolik link) works fine for me now. Boris On 12/02/13 14:49, Miroslav Stampar wrote: Fixed with last commit [1]. Bye [1] https://github.com/sqlmapproject/sqlmap/commit/cf6c3a84b52f73de44109af575bc34d3c4004845 On Tue

Re: [sqlmap-users] --load-cookies format

2013-02-12 Thread Miroslav Stampar
Fixed with last commit [1]. Bye [1] https://github.com/sqlmapproject/sqlmap/commit/cf6c3a84b52f73de44109af575bc34d3c4004845 On Tue, Feb 12, 2013 at 3:36 PM, Boris Chazalet wrote: > Not a big deal, but I used to a symbolic link pointing to sqlmap.py, but > that does not work anymore. I get this

Re: [sqlmap-users] --load-cookies format

2013-02-12 Thread Boris Chazalet
Not a big deal, but I used to a symbolic link pointing to sqlmap.py, but that does not work anymore. I get this: [14:34:21] [CRITICAL] unable to read file 'txt/keywords.txt' I can still run it from the sqlmap directory though. Boris On 12/02/13 14:20, Boris Chazalet wrote: Thanks a lot Mirosl

Re: [sqlmap-users] --load-cookies format

2013-02-12 Thread Boris Chazalet
Thanks a lot Miroslav, I am always impressed with your reactivity. I am going to pull and test again. Boris On 12/02/13 13:31, Miroslav Stampar wrote: Update: With the latest commit [1] you should be warned about the expired cookies. Kind regards, Miroslav Stampar [1] https://github.com/sql

Re: [sqlmap-users] --load-cookies format

2013-02-12 Thread Miroslav Stampar
Update: With the latest commit [1] you should be warned about the expired cookies. Kind regards, Miroslav Stampar [1] https://github.com/sqlmapproject/sqlmap/commit/212e92ea0187f9b990c4cc0d4cbb9ac7b5b1739c On Tue, Feb 12, 2013 at 12:59 PM, Miroslav Stampar < miroslav.stam...@gmail.com> wrote:

Re: [sqlmap-users] --load-cookies format

2013-02-12 Thread Miroslav Stampar
p.s. you can use for example: mytestserver.comFALSE/testFALSE*100* JSESSIONID1064CC1958261C9D61D102C4C995611P.tcatmytestsrv On Tue, Feb 12, 2013 at 12:45 PM, Miroslav Stampar < miroslav.stam...@gmail.com> wrote: > Hi. > > With the last commit [1] "format" shou

Re: [sqlmap-users] --load-cookies format

2013-02-12 Thread Miroslav Stampar
Hi. With the last commit [1] "format" should be less strict (your original content should be valid). Also, please read through [2] to see the content of those fields inside. I would say that in your case cookies "expired". Kind regards, Miroslav Stampar [1] https://github.com/sqlmapproject/sqlm

Re: [sqlmap-users] --load-cookies format

2013-02-12 Thread Boris Chazalet
Hi Miroslav, I have edited the file manually and sqlmap does not complain anymore. However it does *not* seem to use the cookie present in the file. Is there another option I should use to actually use the cookies once loaded? Alternatively, it does work if I don't use --load-cookies but only

Re: [sqlmap-users] --load-cookies format

2013-02-12 Thread Miroslav Stampar
Hi. First line needs to start with "# Netscape HTTP Cookie File.". Also, each value inside entries need to be splitted with \t (TAB) <- not spaces. Find attached a valid example. We are here depending on low-level python module (cookielib) parsing it automatically. Nevertheless, I can see now tha

Re: [sqlmap-users] --load-cookies format

2013-02-12 Thread Boris Chazalet
Ok, it seems that although wget writes # HTTP cookie file it should be # HTTP Cookie File with capital letters at the beginning of each word. Boris On 12/02/13 11:04, Boris Chazalet wrote: Hi everyone, I am trying to use the --load-cookies option on sqlmap. I have saved session cookies using

[sqlmap-users] --load-cookies format

2013-02-12 Thread Boris Chazalet
Hi everyone, I am trying to use the --load-cookies option on sqlmap. I have saved session cookies using wget and I am trying to load them in sqlmap with the following command: /python sqlmap.py -u "http://mytestserver.com"; --load-cookies=cookies.txt/ but I get an error message: /[11:00:32]