I'm trying to capture sqlmap traffic but I only see a single HTTP GET in wireshark without sql injection (its just the url I provide).
I would expect 1 HTTP GET request per try (per sql injection then).
How is sqlmap working to make its attemps ? How to see these attempts ?
Increase verbosity hasn't help me.
Finally found the answer after hours !
Sqlmap is storing a cache I found in (windows)
C:\Users\[User]\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.8_qbz5n2kfra8p0\LocalCache\Local
After removing it, I was able to see the http queries. Ouf !
(--refresh-queries has no effect)
The technical post webpages of this site follow the CC BY-SA 4.0 protocol. If you need to reprint, please indicate the site URL or the original address.Any question please contact:yoyou2525@163.com.