Re: [sqlmap-users] Injection in Host: header

2011-12-20 Thread Miroslav Stampar
> -- >> *From:* Miroslav Stampar >> *To:* A C >> *Cc:* "sqlmap-users@lists.sourceforge.net" < >> sqlmap-users@lists.sourceforge.net> >> *Sent:* Wednesday, December 14, 2011 11:03 AM >> *Subject:* Re: [sqlmap-user

Re: [sqlmap-users] Injection in Host: header

2011-12-19 Thread Miroslav Stampar
nality? > > --Anindya > > -- > *From:* Miroslav Stampar > *To:* A C > *Cc:* "sqlmap-users@lists.sourceforge.net" < > sqlmap-users@lists.sourceforge.net> > *Sent:* Wednesday, December 14, 2011 11:03 AM > *Subject:* Re: [sqlmap-users] In

Re: [sqlmap-users] Injection in Host: header

2011-12-18 Thread A C
e: [sqlmap-users] Injection in Host: header Hi. This moment there isn't support for Host header. I won't promise anything but maybe it will be implemented these days. Kind regards On Mon, Dec 12, 2011 at 11:26 PM, A C wrote: Hi sqlmap users, > > >I've successfully

Re: [sqlmap-users] Injection in Host: header

2011-12-14 Thread Miroslav Stampar
Hi. This moment there isn't support for Host header. I won't promise anything but maybe it will be implemented these days. Kind regards On Mon, Dec 12, 2011 at 11:26 PM, A C wrote: > Hi sqlmap users, > > I've successfully used sqlmap to do wonderful things though parameters of > web applicatio

[sqlmap-users] Injection in Host: header

2011-12-12 Thread A C
Hi sqlmap users, I've successfully used sqlmap to do wonderful things though parameters of web applications but I've recently come across an app which seems to have a possible injection flaw in the Host: header field. in other words, if I put a single quote (or other SQL) in the Host: header wi