From 1738bc5531bbc9532db07efc37dd41fba6db2564 Mon Sep 17 00:00:00 2001 From: Milan Bharanya <10432831+mbharanya@users.noreply.github.com> Date: Tue, 27 Oct 2020 11:31:07 +0100 Subject: [PATCH] Explain '*' use for URL paths in README --- README.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/README.md b/README.md index 3df4820..254ecdd 100644 --- a/README.md +++ b/README.md @@ -92,6 +92,13 @@ $ ./tplmap.py -u 'http://www.target.com/page?name=John' --download REMOTE LOCAL Download remote files ``` +In case the injectable parameter is in the path and not a URL parameter, you can use `*` in the URL where the injection point is. +Example: +``` +./tplmap.py -u 'http://www.target.com/*' +``` + + Use `--os-shell` option to launch a pseudo-terminal on the target. ```