6

I'm testing a site that automatically redirects http request to https. When I'm using Burp I set the target to use https and the request goes through without a problem. However when I use the same request in sqlmap I get a follow redirect. How can I set the requestfile to use https?

Command:

C:\Users\Oscar\Desktop\sqlmap-master>python sqlmap.py -r testsite.txt --level=5 risk=3 -p id

Host:

GET /user?id=1 HTTP/1.1
Host: www.testsite.com
Ogglas
  • 677
  • 4
  • 12
  • 26

1 Answers1

8

Found two possible solutions from https://github.com/sqlmapproject/sqlmap/wiki/Usage.

--force-ssl:

C:\Users\Oscar\Desktop\sqlmap-master>python sqlmap.py -r testsite.txt --level=5 risk=3 --force-ssl -p id

Host:

GET /user?id=1 HTTP/1.1
Host: www.testsite.com:443
schroeder
  • 123,438
  • 55
  • 284
  • 319
Ogglas
  • 677
  • 4
  • 12
  • 26