[sqlmap-users] Filter on period

So I did a little test on my site where I simply filtered out "." (period) in incoming GET parameters that were vulnerable to SQLi. sqlmap then failed to list databases, tables and columns. Since INFORMATION_SCHEMA.TABLES would become INFORMATION_SCHEMATABLES and fail with a "Table testdb.INFORMA

Re: [sqlmap-users] How does sqlmap detect the OS?

Thanks a bunch! :) On 2014-01-13 09:06, Miroslav Stampar wrote: > Hi. > > There are two ways: > > 1) From DBMS banner (e.g. banner "Microsoft SQL Server 2005 - > 9.00.1399.06 (Intel X86) Oct 14 2005 00:33:37 Copyright (c) 1988-2005 > Microsoft Corporation Express Edition on WINDOWS NT 5.2 (Build

Re: [sqlmap-users] How does sqlmap detect the OS?

No, the site displays custom error pages. On 2014-01-12 13:43, Miroslav Stampar wrote: > Are error messages turned on on the target server? > > Bye > On Jan 12, 2014 1:19 PM, wrote: > >> Well I checked the HTTP headers on the server and it only says >> "Microsoft/IIS6.0". >> And I can't figure

Re: [sqlmap-users] How does sqlmap detect the OS?

Well I checked the HTTP headers on the server and it only says "Microsoft/IIS6.0". And I can't figure out how to via the SQL injection determine the OS. Anymore information would be greatly appreciated. No rush though, I'm mostly curious on how it does it :) Maybe some sort of example? Regards

[sqlmap-users] How does sqlmap detect the OS?

I tried sqlmap on a site running on Windows Server 2003, and it could detect the OS. How does sqlmap go about doing that? Regards, Jimmy -- CenturyLink Cloud: The Leader in Enterprise Cloud Services. Learn Why More Busin

Re: [sqlmap-users] Server replaces some chars

Ah, I didn't try that one before. That did the trick, thanks! :-) On 2013-06-03 09:35, Dennis wrote: > Haven't tried, but if it's just for the '>' character, you might wanna > try '--tamper=between'. That should get rid of the '>' character in > the > payloads. > > Cheers > Dennis > > > Am 01.

Re: [sqlmap-users] Server replaces some chars

Just to add a bit to this, I tried something else that I got to work. I changed the sqlmap payload by using LEAST(), which became this: ',(SELECT/**/1/**/AND/**/9457=IF((LEAST(ORD(MID((IFNULL(CAST(CURRENT_USER()/**/AS/**/CHAR),0x20)),1,1)),16)=16),SLEEP(5),9457)/**/)),(' Is this something sqlmap

[sqlmap-users] Server replaces some chars

Hey guys, I have a server at work where there's an SQLi in an INSERT, but I can't prove that it's actually a threat so far due to a little "filter" that replaces some input characters. I crafted a little injection that injects a sleep into the insert, and makes it sleep for 10 seconds, and then

Re: [sqlmap-users] Bypassing IDS/IPS

do: git clone https://github.com/sqlmapproject/sqlmap.git sqlmap-dev //C On 30.08.2012 17:06, Arturs Pavlovs wrote: > Hi! > Basically this question is about what Havij does and how to do the > same w/ SQLMap (or better). I made injections and was able to dump > database with Havij i

Re: [sqlmap-users] Melhorar o scan

Actually, SqlMap is far more superior than Havij, and the only reason you like it, is because you simply don't know any better, you are too lazy to learn how SqlMap works and how to use its power. For me Havij has always been a tool for kids, and your mail seems to prove my reasoning to be corre

[sqlmap-users] It seems that "+" is not allowed on server

I noticed that sqlmap is using '+' signs when doing union injection, and I can't seem to stop it from doing that (maybe there's a tamper script I missed?). So I have a scenario, where + is not allowed on the server. Thus the following payload works -579 UNION ALL SELECT 1 -- While this one w

[sqlmap-users] A thought about boolean based injection

So, I came to think about this scenario, and I haven't been able to really get it to work with sqlmap. You have a page where, when injecting something like ?someparam=1' AND 1='1 gives you the "normal expected page" (like a news article or something). And ?someparam=1' AND 1='2 gives you the ex