↑
Помогите разобраться, постоянно прости токен при запуске, конкретно по этой ссылке, при этом через Sqli Dumper. база сливается спокойно, но криво.
https://paste.pics/5EOE3
Как с этим бороться?
GET parameter 'carttoken' appears to hold anti-CSRF token. Do you want sqlmap to automatically update it in further requests?
и чтобы не выбрал по итогу:
Spoiler: КОД
[13:42:18] [INFO] testing connection to the target URL
[13:42:25] [INFO] heuristics detected web page charset 'ISO-8859-2'
[13:42:25] [INFO] testing if the target URL content is stable
[13:42:32] [WARNING] target URL content is not stable (i.e. content differs). sqlmap will base the page comparison on a sequence matcher. If no dynamic nor injectable parameters are detected, or in case of junk results, refer to user's manual paragraph 'Page comparison'
how do you want to proceed? [(C)ontinue/(s)tring/(r)egex/(q)uit] с
[13:42:43] [INFO] ignoring GET parameter 'carttoken'
[13:42:43] [CRITICAL] all tested parameters do not appear to be injectable. Try to increase values for '--level'/'--risk' options if you wish to perform more tests. If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could try to use option '--tamper' (e.g. '--tamper=space2comment') and/or switch '--random-agent'[*] ending @ 13:42:43 /2019-04-27/
'action' is not recognized as an internal or external command,
operable program or batch file.
'ItemID' is not recognized as an internal or external command,
operable program or batch file.
'category' is not recognized as an internal or external command,
operable program or batch file.
'viewby' is not recognized as an internal or external command,
operable program or batch file.
'sortorder' is not recognized as an internal or external command,
operable program or batch file.
исход всегда один и тот же.
Просто я понять не могу, везде про csrf и anti-csrf пишут и показывают, речь идет о входа куда либо (username
assword)
А это обычная страница с описанием товара. токен она отсылает, а где взять anti-csrf - ума не приложу.
Древовидный вид