sqlmap注入json格式数据

sqlmap注入json格式数据

遇到json格式数据存在注入时,sqlmap会无法判断;
可人工修改下注入的json数据,使sqlmap能够识别注入参数;

无法识别的json数据如:

1
{"name":["string"]}

将其修改为

1
{"name":["string*"]}

或者

1
{"name":"string"}

Author: 1314mylove
Link: https://blog.1314mylove.com/2017/12/sqlmap注入json格式数据/
Copyright Notice: All articles in this blog are licensed under CC BY-NC-SA 4.0 unless stating additionally.