From 465c7ffe9c2060bd8c6dd5aa68da99eb85f3161f Mon Sep 17 00:00:00 2001
From: stamparm <miroslav.stampar@gmail.com>
Date: Tue, 30 Apr 2013 13:58:37 +0200
Subject: [PATCH] Minor update
---
Usage.md | 14 +++++++-------
1 file changed, 7 insertions(+), 7 deletions(-)
diff --git a/Usage.md b/Usage.md
index 52c1053..d95d6fe 100644
--- a/Usage.md
+++ b/Usage.md
@@ -47,6 +47,7 @@
--safe-url=SAFURL URL address to visit frequently during testing
--safe-freq=SAFREQ Test requests between two visits to a given safe URL
--skip-urlencode Skip URL encoding of payload data
+ --force-ssl Force usage of SSL/HTTPS
--eval=EVALCODE Evaluate provided Python code before the request (e.g.
"import hashlib;id2=hashlib.md5(id).hexdigest()")
@@ -198,7 +199,6 @@
--dump-format=DU.. Format of dumped data (CSV (default), HTML or SQLITE)
--eta Display for each output the estimated time of arrival
--flush-session Flush session files for current target
- --force-ssl Force usage of SSL/HTTPS requests
--forms Parse and test forms on target URL
--fresh-queries Ignore query results stored in session file
--hex Use DBMS hex function(s) for data retrieval
@@ -526,6 +526,12 @@ Switch: `--skip-urlencode`
Depending on parameter placement (e.g. GET) its value could be URL encoded by default. In some cases, back-end web servers do not follow RFC standards and require values to be send in their raw non-encoded form. Use `--skip-urlencode` in those kind of cases.
+### Force usage of SSL/HTTPS
+
+Switch: `--force-ssl`
+
+In case that user wants to force usage of SSL/HTTPS requests toward the target, he can use this switch. This can be useful in cases when urls are being collected by using option `--crawl` or when Burp log is being provided with option `-l`.
+
### Evaluate custom python code during each request
Option: `--eval`
@@ -1687,12 +1693,6 @@ Option: `--flush-session`
As you are already familiar with the concept of a session file from the description above, it is good to know that you can flush the content of that file using option `--flush-session`. This way you can avoid the caching mechanisms implemented by default in sqlmap. Other possible way is to manually remove the session file(s).
-### Force usage of SSL/HTTPS requests
-
-Switch: `--force-ssl`
-
-In case that user wants to force usage of SSL/HTTPS requests toward the target, he can use this switch. This can be useful in cases when urls are being collected by using option `--crawl` or when Burp log is being provided with option `-l`.
-
### Parse and test forms' input fields
Switch: `--forms`