hello all,
im getting this error while running the sqlmap with following request file.
the error displays "parsing HTTP request from 'payment_form_submit.txt'
[04:22:54] [CRITICAL] the specified HTTP request file does not exist. "

I have used following syntax to run it
#sqlmap -r 'payment_form_submit.txt' --dbms="MySQL" --level=3 --risk=4 -p
cardNumber

i have attached the request file here with changed hostname. Thank you.

regards,
sabin
POST /adyen/payment HTTP/1.1
Host: qa.xx.xxx.com
User-Agent: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:28.0) Gecko/20100101 
Firefox/28.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Referer: https://qa.xx.xxx.com/site
Content-Length: 287
Cookie: YII_CSRF_TOKEN=40f85a2013fae241b220b696edaaadc1955bb519; 
PHPSESSID=36m2jph1mdnd49rg7btp7q7uc4; buyer_info=2006
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

YII_CSRF_TOKEN=§40f85a2013fae241b220b696edaaadc1955bb519§&cardNumber=§%22%3E%3Cscript%3Ealert(%22street+number%22)%3B%3C%2Fsctript%3E%3C%22§&exp_year=§2016§&exp_month=§06§&cvc=§737§&cardHolder=§%22%3E%3Cscript%3Ealert(%22name%22)%3B%3C%2Fsctript%3E%3C%22§&email=§dhan%40ogy.com§&amount=§80§
------------------------------------------------------------------------------
Put Bad Developers to Shame
Dominate Development with Jenkins Continuous Integration
Continuously Automate Build, Test & Deployment 
Start a new project now. Try Jenkins in the cloud.
http://p.sf.net/sfu/13600_Cloudbees_APR
_______________________________________________
sqlmap-users mailing list
sqlmap-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sqlmap-users

Reply via email to