not replacing placeholders about bbqsql HOT 2 CLOSED

Syntax looks wrong for the url.

should be

url = http://localhost/cgi-bin/x.cgi?id=${injection}

instead of

url = http://localhost/cgi-bin/x.cgi?id={injection}

let me know if that doesn't fix it.

On Tue, Sep 25, 2012 at 4:12 PM, abuntu [email protected] wrote:

I installed BBQSQL-1.1.tar.gz via pip with gevent-0.13.8.tar.gz,
requests-0.14.0.tar.gz and greenlet-0.4.0.zip. I configure bbqsql to target
a local web script which just logs the query string. Strangely the log-file
just shows these query strings:

id=%7Binjection%7D

In short, the placeholder is not used. I'm sorry if the configuration is
faulty or I overlooked something obvious, but I tested it on two machines
and I can't see the problem.

Regards
Andreas

The exported config:

[Request Config]
url = http://localhost/cgi-bin/x.cgi?id={injection}
method = GET

[HTTP Config]
query = ' and ASCII(SUBSTR((SELECT data FROM data ORDER BY id LIMIT 1
OFFSET ${row_index:1}),${char_index:1},1))${comparator:>}${char_val:0} #
technique = binary_search
comparison_attr = size
concurrency = 30

The script:

#!/bin/bash
echo "Content-type: text/plain"
echo ""
echo "$QUERY_STRING" >> /tmp/sql.log

—
Reply to this email directly or view it on GitHubhttps://github.com//issues/37.

-Ben Toews

from bbqsql.

Damn. You are right of course. Thanks!

from bbqsql.