Re: [sqlmap-users] Avoid doing 30 connections in time attack

2017-02-14 Thread Rodrigo Zanatta Silva
I understand your point. But this will be a good thing. This was not the first time that I have problem with it. Because I only have X calls before the server crash, obvious I can't dump long data with it. But there are a lot of userful things like try to know if I can read/write file. I just need

Re: [sqlmap-users] Avoid doing 30 connections in time attack

2017-02-14 Thread Miroslav Stampar
Hi. Obviously, don't use --threads in those kind of situations. Also, --keep-alive could be a good choice together with (hidden) switch --disable-precon. As of time-based SQLi. Well, without the (as Brandon mentioned) statistical model, sqlmap will have a problem. Also, if application is doing "s

Re: [sqlmap-users] Avoid doing 30 connections in time attack

2017-02-13 Thread Rodrigo Zanatta Silva
Yes, because every call I create an error in the server. So, I can only make X call before the pool of connections was full. Than I need to wait the server close this connections and try again. 2017-02-13 14:43 GMT-02:00 Brandon Perry : > > > On Feb 13, 2017, at 10:39 AM, Rodrigo Zanatta Silva <

Re: [sqlmap-users] Avoid doing 30 connections in time attack

2017-02-13 Thread Brandon Perry
> On Feb 13, 2017, at 10:39 AM, Rodrigo Zanatta Silva > wrote: > > How can I disable the sqlmap doing 30 connections before start doing time > attack? You have to build a statistical model of how quickly the requests generally return to ensure accuracy during a timing attack. You can’t get a

[sqlmap-users] Avoid doing 30 connections in time attack

2017-02-13 Thread Rodrigo Zanatta Silva
How can I disable the sqlmap doing 30 connections before start doing time attack? There is a options or I need to find it in code? And where is this set? -- Check out the vibrant tech community on one of the world's most e