Shulou(Shulou.com)06/01 Report--

When the injection point is in the json format data, the SQLMAP may be stupid and can't find the injection point.

Using-p to specify parameters is not good for specifying fields in json format.

At this point, you need to manually modify the injected json data so that SQLMAP can find the injection parameters:

The json input that causes SQLMAP to be stupid looks like this:

{"name": ["string"]}

Changing it to either of the following forms allows SQLMAP to find the injection point (rather than skip it directly):

/ / method 1, add * {"name": ["string*"]} / / this is seen from foreign forums / / method 2, delete the brackets {"name": "string"}

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.