sqlmapproject / sqlmap

Automatic SQL injection and database takeover tool
http://sqlmap.org
Other
32.65k stars 5.73k forks source link

Form not recognized by sqlmap #444

Closed firefart closed 11 years ago

firefart commented 11 years ago

I have a page that looks exactly like this (no html tag):

<form action="" method="get">
  Username:<input name="user" type="text" />
  <br />
  Password:<input name="pass" type="password" />
  <br />
  <input type="submit" value="login" />
</form>

When executing SQLMap with python sqlmap.py -u "http://www.XXX.com/login.php" --forms

I get the following error message [CRITICAL] there were no forms found at the given target URL

Im on the current master branch, last commit was 2bfdac5ebcdd515859888aadad628c4505df3bc6

python --version
Python 2.7.2

uname -a
Darwin Christians-MacBook-Pro.local 12.3.0 Darwin Kernel Version 12.3.0: Sun Jan  6 22:37:10 PST 2013; root:xnu-2050.22.13~1/RELEASE_X86_64 x86_64
stamparm commented 11 years ago

Something other than form recognition is going on here.

I am getting:

[#1] form:
GET http://www.target.com:80?user=&pass=
do you want to test this form? [Y/n/q]
>

with exactly that content.

Please send a content of a traffic file for such run (please use -t traffic.txt to get it) to miroslav@sqlmap.org

firefart commented 11 years ago

Jeah works for me too on my testserver. The content was from bitcoinctf level1 but the site is offline at the moment :( I think this must be a specific header or encoding problem. According to reddit there will be an iso/source of the challenges: http://www.reddit.com/r/netsec/comments/1dog5r/bitcoinctf_writeup_of_levels_13/c9srvgp But i think in the meantime this issue can be closed.