sql - Sqlmap inline parameters -


hi ive hear error in cakephp allows sql inyection; https://twitter.com/cakephp/status/328610604778651649

i trying test site using sqlmap, cant find how specify params.

the url testing is;

http://127.0.0.1/categories/index/page:1/sort:id/direction:asc

and parameters want sqlmap inyect in url (page:,sort:,direction:)

i have try run;

python sqlmap.py -u "http://127.0.0.1/categories/index/page:1/sort:id/direction:asc"

but nothing... clue? thanks!

in cakephp there passed arguments, named parameters, , querystring parameters.

passed arguments .../index/arg accessed $this->request->pass[0], '0' array index. named parameters .../index/key:value , accessed $this->request->named['key']. querystring parameters ̀.../index?key=valueand accessed with$this->request->query['key']`.

your url uses named parameters should (without question mark):

http://127.0.0.1/categories/index/page:1/sort:id/direction:asc

edit:

since cakephp uses mod_rewrite, have specify parameters explained in sqlmap wiki.


Comments

Post a Comment

Popular posts from this blog

linux - Does gcc have any options to add version info in ELF binary file? -

i mean whether gcc can insert source code version infor elf binary section or similar. not want change source file, add info gcc option in makefile. you can emit version info text file, turn text file object file statically link executable. the first step simple have write code: script or write version info in format plain text file. write makefile rule produce version.o version.txt, using objcopy . you'll have object file 2 useful symbols defined in it: beginning , end of textual version info. add generated object executable, , you'll able access version 2 ways: running strings on binary, or writing code in application print version string (you'll need declare start , end symbols variables in header file).
Read more

java - Are there any classes that implement javax.persistence.Parameter<T>? -

i'm using named queries fetch entities database using jpa , hibernate , came across puzzling me: how come there no default implementations of javax.persistence.parameter interface? i rather impressed how @staticmetamodel used criteriabuilder in jpa2 meaning type safety , don't have mess around setting string names. wanted apply similar of jpa1 ejb's i'm working on: dealergroup_.class: public dealergroup_ { public parameter<integer> id = new parameterimpl<integer>("id"); /// etc... } dealergroupfacade.class: // ... public dealergroup fetch(integer id) { typedquery<dealergroup> query = em.createnamedquery("dealergroup.fetchbyid", dealergroup.class); query.setparameter(dealergroup_.id, query); return query.getsingleresult(); } // ... i surprised find there no implementations of parameter interface - of course, implement myself absence makes me suspicious may mistake using in way? should implementing parameter...
Read more

android - send complex objects as post php java -

is possible send contact numbers via post php class inside eclipse ? or post limited primitive types , have find work arounds send them string ? i propose: send them json in post request, befor start, have @ gson project , keep in mind set content application -> json. luck
Read more