How can i configure sql-map to try payloads at random time delay? as an example time between first and second request can be 0.10s and second and third might 0.25 and so on.
i know there is --delay option but it takes static value.
Asked
Active
Viewed 2,028 times
2
-
What's your goal in doing this? And how many of those tags are actually relevant to your question? – Nic Jul 06 '19 at 04:28
-
well i am learning penetration testing and for that purpose i am using raven2 ctf from vulnhub website. one potential parameter is showing request conflict due to large number of request sqlmap is sending nearly same time. thats why. – thunder Jul 06 '19 at 04:59
-
@thunder a simple static delay should solve that.Random delay wont have effect. – yeah_well Jul 06 '19 at 06:26
-
@thunder maybe its supposed to solved manually. – yeah_well Jul 06 '19 at 06:27
-
yeah but problem is if i create less delay than it will conflict and if more delay than request time out, thats why i want to try random time delay. – thunder Jul 06 '19 at 13:38
-
@VipulNair yeah you are right. to root raven2 i had to exploit another vulneribility which doesnt require sql injection . – thunder Sep 29 '19 at 20:51
-
2this should solve it https://github.com/sqlmapproject/sqlmap/issues/2256 – Thiago Dias Dec 02 '20 at 20:29