symbol characters in url invalidate scan

The following URL for example hosted on aws cloudfront causes problems because of the "#!"

sqlmap -u 'https://app.domain.com/#!/deal/introduction?projectId=9989 -p projectId

It gives the error "all testable parameters you provided are not present within the request data.

If the #! is removed or if I attempt to change it to URL encoding it fails, (It fails in a browser as well), aws cloudfront drops a 404 error about an invalid key.

[stamparm]

Everything behind a hash sign is not being transmitted to the target. It is supposed to be handled by browser which can subsequently do further requests (e.g. ajax). All in all you are doing it wrong

So what is the recommended right way? seems sqlmap doesn't support any url
with a hash in it then? you don't consider this a feature to be fixed?

On Fri, Jun 24, 2016 at 9:56 AM, Miroslav Stampar notifications@github.com
wrote:

Closed #1981 #1981.

—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
#1981 (comment), or mute
the thread
https://github.com/notifications/unsubscribe/AMbMwB3mYMwsLlAViurp56I4p79_eZ3oks5qPAw6gaJpZM4I98Bd
.

[stamparm]

There is nothing to be fixed. You are supposed to find a valid HTTP request that sqlmap should scan with (e.g.) Burp.

[stamparm]

In plainspeak. Turn on browser, turn on Burp, visit that link and see what is going on inside the Burp (there should be some Ajax-like call). Save that request into the request file and provide it to sqlmap with option -r