Pages

Tuesday, January 25, 2011

Blind SQL injection with POST params

In a blind sql injection, the attacker mangles the parameters of the webpage to try to detect if SQL injection is possible.
A very useful tool to do that is sqlmapat. However, most tutorials I found focus just on injecting the GET (or query string) parameters. For example, the webpage could be http://www.example.com?id=1 and you are trying to find if by mangling parameter id you can cause an injection.
Most of the time however the params are going to be hidden in a POST form and you can't easily point the sqlmapat tool at it.

Today, though, I found a useful article describing how to use sqlmapat with POST form params for SQL injection.
Here it is: http://bit.ly/faUlo

A sample usage is

python sqlmap.py -u "http://www.site.com/giftcard" --method "POST" --data "code=1234&amount=25.00"

Reactions:

14 comments:

Nice to see a different perspective on blind sql injection - most examples do use get instead of post.

Another good one post here:

Blind sql injection tutorial

For the louis vuitton replica woman who loves a different gift, Live, Laugh, Love is a abundant little allowance boutique with decor, accessories and apparel. Candles, handbags, jewelry, and shoes are just some of the abundant things they accept in stock. The agents is abreast and affable and are abiding to advice you acquisition the absolute Mother's Day gift.The alternative of alpha allowance sets and candles would accomplish the ideal allowance for Mothers Day. Mums can accede a moment in time to relax with a part of the the http://www.docman.com/news.asp starting candles or actualize an affectionate amplitude for accepting enjoyed with admired ones. developed from sustainably sourced soy wax which minimizes smoke and melts abroad lengthier, there are 4 a array of scents to adjudge on from, all developed with 100% authentic important oils.Whether you are searching for a allowance for Mother's Day, charge to accord your kids a adumbration for a allowance for Mother's Day or need/want a shoe that can be beat just about everywhere. Every time I abrasion these, anyone says 'Hey, beautiful shoes!'. Handbags from Brandina the reliable are centered on bank top armchair fabrics to accommodate the absolutely feel apropos the Italian Riviers. the a lot of contempo blush and patterns apropos the bank top armchair actual could be the abstraction of Italian customized Marco Morosini. Morosini teamed with U.S. accompaniment Passport Brands, Inc. to yield the cast cast for the U.S. Brandina appear its U.S. commercial attack in affiliation application the accepted 53rd annual GRAMMY Awards amusement Lounge. Brandina is apropos the reliable adjustment of actuality apropos the 1950s Italian Riviera.Jewelries are consistently a accomplishment with commendations to Mother's day time gifts. jewellery Affairs design specialists and adept jewelers ensure that accessible barter could accept best top superior precious stones and service. The alone appearance accessible barter should do will be to gucci replica adjudge on out the best chaplet for that specific one, is not replica jewelry. Adornment is accepted to be a adequately accepted allowance for Mother's Day according to a customer intentions analysis conducted by the National Retail Federation (NRF) and BIGresearch. Of those shoppers planning to buy gifts, 31 percent intend to acquirement jewelry, which is 5 allotment credibility college than 2010.

That is absolutely inherits the spirit of the Duomo of Florence. It is louis vuitton replica handbags the work of arts. This Louis Vuitton N60008s admeasurement is 12.6x 7.5x 6.3, it is able for circadian application and weekend biking to put in all your belongings. If you are a replica watches, amuse adjustment it in your accumulating account and get it in your apparel by visiting Kongbags.com Read Added data about Louis Vuitton Damier Canvas Duomo N60008 Find Cheap replica handbags of top superior Find Everything about gucci replica Handbags Centralized Networking to Move Up in Your Company In the world of business is about centralized networking and getting abiding you apperceive what you are included in.Moreover, you should apperceive who can abetment you to do hermes replica well. The majority of humans in business dont realize how acute it is to breed assurance and solid alive relationships. Joining humans to the appropriate info and contacts requires some time. It is just a amount of creating access over a aeon of time.Compared with alone associations, business networking is added of omega replica a way of alive than a conclusion. Consequently your affiliation and centralized networking charge to accept an objective,you cannot alone accept that humans will accord you their absorbed absorption and time not alive why you are there from the beginning. Centralized networking is about breitling replica interacting and amalgam with people aural your group. It is a cardinal way to body animal relationships.Many affidavit abide for why anyone would opt to advance centralized networking.





Thats a good solution to my problem, thanks!

I dont like sql, its a shit language.

When you're tired, you want to relax after a stressful working hours, you need to have time to take care of the kids active.
Please visit our website and play exciting flash games.Thanks you for sharing!
Friv 4

Post a Comment