{"action":"created","issue":{"url":"https://api.github.com/repos/sqlmapproject/sqlmap/issues/1289","labels_url":"https://api.github.com/repos/sqlmapproject/sqlmap/issues/1289/labels{/name}","comments_url":"https://api.github.com/repos/sqlmapproject/sqlmap/issues/1289/comments","events_url":"https://api.github.com/repos/sqlmapproject/sqlmap/issues/1289/events","html_url":"https://github.com/sqlmapproject/sqlmap/issues/1289","id":93021616,"number":1289,"title":"Add option to save the payload in a file","user":{"login":"rodrigozanatta","id":812863,"avatar_url":"https://avatars.githubusercontent.com/u/812863?v=3","gravatar_id":"","url":"https://api.github.com/users/rodrigozanatta","html_url":"https://github.com/rodrigozanatta","followers_url":"https://api.github.com/users/rodrigozanatta/followers","following_url":"https://api.github.com/users/rodrigozanatta/following{/other_user}","gists_url":"https://api.github.com/users/rodrigozanatta/gists{/gist_id}","starred_url":"https://api.github.com/users/rodrigozanatta/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rodrigozanatta/subscriptions","organizations_url":"https://api.github.com/users/rodrigozanatta/orgs","repos_url":"https://api.github.com/users/rodrigozanatta/repos","events_url":"https://api.github.com/users/rodrigozanatta/events{/privacy}","received_events_url":"https://api.github.com/users/rodrigozanatta/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-07-04T15:24:52Z","updated_at":"2015-07-04T16:02:15Z","closed_at":null,"body":"The sqlmap is a very good tools to find vulnerable variable. I want use it as a tool to help-me in another project. \r\n\r\nI can save the config that I want with a simple `--save` so I can read it in my program and do a lot of thing. \r\n\r\nBut, after I run the program and it find a valid method to inject SQL, there is no east way to save the working method. The best I can do is read the `log` file. But this can cause **a lot of error** because, well, a lot of things is saved in this file. \r\n\r\nWhy not create a method like `--save-payload` to save all the methods the sqlmap found to inject sql? Can use the format as it show to user. \r\n\r\nMy program will test this working method more advanced and see more things. \r\n\r\nCan you create it?"},"comment":{"url":"https://api.github.com/repos/sqlmapproject/sqlmap/issues/comments/118526965","html_url":"https://github.com/sqlmapproject/sqlmap/issues/1289#issuecomment-118526965","issue_url":"https://api.github.com/repos/sqlmapproject/sqlmap/issues/1289","id":118526965,"user":{"login":"rodrigozanatta","id":812863,"avatar_url":"https://avatars.githubusercontent.com/u/812863?v=3","gravatar_id":"","url":"https://api.github.com/users/rodrigozanatta","html_url":"https://github.com/rodrigozanatta","followers_url":"https://api.github.com/users/rodrigozanatta/followers","following_url":"https://api.github.com/users/rodrigozanatta/following{/other_user}","gists_url":"https://api.github.com/users/rodrigozanatta/gists{/gist_id}","starred_url":"https://api.github.com/users/rodrigozanatta/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rodrigozanatta/subscriptions","organizations_url":"https://api.github.com/users/rodrigozanatta/orgs","repos_url":"https://api.github.com/users/rodrigozanatta/repos","events_url":"https://api.github.com/users/rodrigozanatta/events{/privacy}","received_events_url":"https://api.github.com/users/rodrigozanatta/received_events","type":"User","site_admin":false},"created_at":"2015-07-04T16:02:15Z","updated_at":"2015-07-04T16:02:15Z","body":"Well... I want to do something automatically. \r\n\r\nThe sqlmap use some logics. Somethings are good, others not. I just want to do something more complex to dump table. But I don't want my program find a vulnerable place. The sqlmap is the state-of-art to FIND a vulnerable place, but not to dump it.  And I don't want to change it. \r\n\r\nIf I know the payload, and know the place is vulnerable, I can try another things. \r\n\r\nFor example, in a union place, sqlmap test only ONE place. I found a place that use a union with 15 places. 10 of this 15 places is vulnerable and can return some text. So I can create a logic to use every place and dump fast. But, in another way, this can make is slow in the server. So I am studying the possibilities. \r\n\r\nI just want to interpret the payload the sqlmap send and work with it. This is really complex because all the possibilities. For now I will restrict it to a subset that I want. "}}