is it possible in sqlmap that multiple value for parameter in --data (post)

Asked Jul 19 '17 at 08:50

Active Jul 19 '17 at 08:54

Viewed 517 times

I have to check multiple value for same post parameter.

Example : matrix_id is my parameter in --data.

I have the value matrix_id=5896,

I need to check like matrix_id=5896,5893,5847,5893. need to check all these specified values.

code will be sqlmap.py -u"myurl" --data"matrix_id=5896,5893,5847,5893" --dbs

edited Jul 19 '17 at 08:54

asked Jul 19 '17 at 08:50

Parthan P Vasu

The data in `--data` follow the `POST` request rules, so I don't think you can add a list of parameters in the way you wrote. But you could use bash with something like `sqlmap.py -u"myurl" --data"matrix_id={5896,5893,5847,5893}" --dbs` to sequentially test your app with all the different values. – mrnfrancesco Jul 25 '17 at 15:27
@mrnfrancesco thanks... – Parthan P Vasu Nov 09 '17 at 05:21

0 Answers0