Re: [sqlmap-users] Adding regexp technique

2012-09-27 Thread Miroslav Stampar
Hi Jerome. Could you explain how "regexp attacks" are different than blind-based inference (in terms of "faster")? Could you explain how "regexp attacks" could be used in time-based attacks (in terms of "faster") in real life situations where network lags are non-deterministic? My 2-cents. That

[sqlmap-users] Adding regexp technique

2012-09-26 Thread Jerome Athias
Hi, I am currently trying to add the support of the regexp technique ( http://www.ihteam.net/papers/blind-sqli-regexp-attack.pdf ) for blind sqli. It is faster than Time-based blind SQL injection. I have some problems to define the correct queries and payloads in the xml files. Did someone alrea