How to use SQLMAP when payloads are inserted in POST request and some (syntax) error will appear after a redirect in a GET request?

Is there a way to let SQLMAP handle some general error info, like ‘Syntax error’ in a subsequent GET request that is requested after a redirect 301?
So the (general) result/error is not directly in the response.

Continue reading How to use SQLMAP when payloads are inserted in POST request and some (syntax) error will appear after a redirect in a GET request?

How to use SQLMAP when payloads are inserted in POST request and some (syntax) error will appear after a redirect in a GET request?

Is there a way to let SQLMAP handle some general error info, like ‘Syntax error’ in a subsequent GET request that is requested after a redirect 301?
So the (general) result/error is not directly in the response.

Continue reading How to use SQLMAP when payloads are inserted in POST request and some (syntax) error will appear after a redirect in a GET request?

Possibility of eavesdropping on app-server comms after redirect to deep link

I’m being asked to investigate a possible attack vector that I don’t understand and I don’t want to take action that is useless or even negatively affects users if it isn’t going to address something real.
The current interaction is:

Atta… Continue reading Possibility of eavesdropping on app-server comms after redirect to deep link