mirror of
https://github.com/sqlmapproject/sqlmap.git
synced 2025-04-22 01:52:03 +03:00
Updated Usage (markdown)
parent
c6a76090f2
commit
7aab4a3e69
2
Usage.md
2
Usage.md
|
@ -878,7 +878,7 @@ If user is controlling a machine registered as a DNS domain server (e.g. domain
|
|||
|
||||
Option: `--second-order`
|
||||
|
||||
Second-order SQL injection attack is an attack where result(s) of an injected payload in one vulnerable page is shown (reflected) at the other. Usually that's happening because of database storage of user provided input at the original vulnerable page.
|
||||
Second-order SQL injection attack is an attack where result(s) of an injected payload in one vulnerable page is shown (reflected) at the other (e.g. frame). Usually that's happening because of database storage of user provided input at the original vulnerable page.
|
||||
|
||||
You can manually tell sqlmap to test for this type of SQL injection by using option `--second-order` with the URL address of the web page where results are being shown.
|
||||
|
||||
|
|
Loading…
Reference in New Issue
Block a user