--eval doesn't work for XML parameters. #1679

Open
awhitehatter opened this Issue Jan 22, 2016 · 2 comments

Projects

None yet

2 participants

@awhitehatter

The eval flag will not work with XML parameters (unless I'm mistaken).

My request looks like:

POST /server HTTP/1.1
[general headers]

<?xml version="1.0" encoding="UTF-8"?>
<note>
  <to>Tove</to>
  <from>Jani</from>
  <heading>Reminder</heading>
  <body>Don't forget me this weekend!</body>
</note>

and if I run something like sqlmap.py -r request --eval="body=1", SQLmap just appends &body=1 to the end of the request.

Like so:

POST /server HTTP/1.1
[general headers]

<?xml version="1.0" encoding="UTF-8"?>
<note>
  <to>Tove</to>
  <from>Jani</from>
  <heading>Reminder</heading>
  <body>Don't forget me this weekend!</body>
</note>&body=1
@stamparm
Member

You are right. Haven't implemented it (nobody asked until now :)

I'll implement when I catch time

@stamparm stamparm self-assigned this Jan 23, 2016
@stamparm stamparm added this to the 1.0 milestone Jan 23, 2016
@awhitehatter

@stamparm Awesome, thank you very much!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment