The issue with the -r parameter

[burper00]

Based on tests I performed on several sites, there seems to be a bug with the -r parameter. One of the files I tested contains a POST method with JSON content, while the other uses the GET method with a classic URL endpoint.

In a POST method attack with JSON content using the -r parameter, sometimes it is possible to see the databases. However, when I add the --dbs parameter, it throws an error.

ghauri -r /root/request.txt --level 3

I completely uninstalled Ghauri, reinstalled it, updated the system, and updated the requirements.txt. My system is Kali Linux.

[kavnx77]

Here I'm accruing same kind of issue. Please assist with us. It will be so useful for us.

[r0oth3x49]

I might need a sample request to reproduce and fix. You can share your request by replacing actual target with example.com

[burper00]

I tried running the test with the -r parameter on the sites where the issue occurred. The same error happens on all sites. The problem is related to the -r parameter. When I ran the same test with the -u parameter, it worked successfully. For example, I used the following address: http://testphp.vulnweb.com/listproducts.php?cat=1

[r0oth3x49]

Would you mind typing your full command that you are using while running ghauri?

[burper00]

ghauri -r /root/req.txt --level 3 --confirm this was my command. The command itself is not important, but working with the request file causes issues.