I noted that a lot of peeps had issue withe getting a 302 redirect when attempting the sqlmap portion. I was too, then noted I was overlooking an important syntactical difference i the way the browser presents the PHPSESSID cookie and the way sqlpmap expects the cookie to be entered in the command line. When I copy pasta the cookie (Firefox’s developer mode/storage tab) from my browser into the sqlmap command line, I had to change the ‘:’ to a ‘=’. For example, --cookie=“PHPSESSID**=**abc123…” is the correct syntax sqlmap expects.
2 Likes
You are a lifesaver.
1 Like