Re: [sqlmap-users] boolean based sqli

2016-03-14 Thread Miroslav Stampar
Hardly will sqlmap give all the correct payloads right away. Though, to recreate sessions you could take a look into the: --safe-url=SAFEURL URL address to visit frequently during testing --safe-post=SAFE.. POST data to send to a safe URL --safe-req=SAFER.. Load safe HTTP request f

[sqlmap-users] boolean based sqli

2016-03-14 Thread Marcell Fodor
Hi, I have an application where the injection is pretty straightforward: ?asd= (case when(123=123 *) then 1 else 2 end) Problem is, when Sqlmap tries the injection point, it sends query which results in incorrect syntax on the server side and crashes the session. I can make the it working by Bur