I finally discovery why the program wasn't working. I was trying to use in
a table and it use the default:
where column_name > (char string)
So the program get the next element testing if it is bigger than previous.
So it get the name:
JOAO
To get the next, the sqlmap create:
WHERE
CONVERT(NV
Hi.
It works, but in later stage. You can see clearly in the following example
that only parameter goButton is being checked for SQLi.
$ python sqlmap.py -u "http://testphp.vulnweb.com/artists.php?artist=1";
--forms -p goButton
_
___ ___| |_ ___ ___ {1.0-dev-7d418af}
|_ -| . | |
If use "--forms" the parameter "-p" don't work
Best regards
M.M.
--
*[image: Descrizione: Descrizione: image002] Rispetta l'ambiente. Non
stampare questa mail se non è necessario*
*Questa e-mail è riservata compresi gli eventuali allegati. In caso di
ricezione per errore della presente e-mail
This has been replied earlier. That "bug" was "neutralized".
Kind regards
On Thu, Jan 29, 2015 at 10:23 AM, sad fastfood wrote:
> Hi!
> Thanks for the greatest tool!
> I've found some problem in latest revision of sqlmap.
> If you will run something like:
> *sqlmap.py -u "http://www.google.com/
Hi!
Thanks for the greatest tool!
I've found some problem in latest revision of sqlmap.
If you will run something like:
sqlmap.py -u "http://www.google.com/news.php?id=5+OR+(4=4)" --skip-urlencode --random-agent --tamper=space2plus --technique=BSU -v 3 --dbms=mssql
And answer 'y' here:
[09:1
Thanks for your reply ... Test started --
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most
Hi.
I've made couple of changes this moment. Can you please retry it now?
Also, in case that it fails again I would need more information about the
data itself. Thing is that we are already prepared for large table dumps
but your case is kind of specific. How many columns are there in that
table?
Dears,
Fyi, I got the below error after executing the query on "big" table of
users in my test lab.
btw, it's on the latest version
[16:07:17] [ERROR] thread 2:
Hi.
Thank you for your report and find it fixed now [1].
Kind regards,
Miroslav Stampar
[1] https://github.com/sqlmapproject/sqlmap/issues/495
On Mon, Jul 22, 2013 at 11:03 AM, ✿ wrote:
> Hi! I was trying to use metasploit when this error came up.
>
> sqlmap version: 1.0-dev
> Python version
Hi! I was trying to use metasploit when this error came up.
sqlmap version: 1.0-dev
Python version: 2.7
Operating system: nt
Command line: sqlmap.py -u **
--check-tor --
tor --tor-port=9150 --tor-type=SOCKS5 --mobile --os-pwn --msf-path
C:\metasploit
\apps\pro\m
Hi.
Thank you for your report and find it fixed now [1].
Kind regards,
Miroslav Stampar
[1]
https://github.com/sqlmapproject/sqlmap/commit/dc1623a40fc35ce11b452f682476460f0c613910
On Thu, Jul 11, 2013 at 6:48 AM, 沸水浮冰 wrote:
> [00:44:39] [CRITICAL] unhandled exception in sqlmap/1.0-dev-1ae68
[00:44:39] [CRITICAL] unhandled exception in sqlmap/1.0-dev-1ae68b9, retry
your run with the latest development version from the GitHub repository. If
the exception persists, please send by e-mail to '
sqlmap-users@lists.sourceforge.net' or open a new issue at '
https://github.com/sqlmapproject/sql
Hi.
Thank you for your report and find it fixed now.
Kind regards,
Miroslav Stampar
On Sat, Jun 15, 2013 at 12:38 PM, wrote:
> [11:39:22] [CRITICAL] unhandled exception in sqlmap/1.0-dev, retry your
> run with the latest development version from the GitHub repository. If the
> exception persi
[11:39:22] [CRITICAL] unhandled exception in sqlmap/1.0-dev, retry your
run with the latest development version from the GitHub repository. If the
exception persists, please send by e-mail to
'sqlmap-users@lists.sourceforge.net' or open a new issue at
'https://github.com/sqlmapproject/sqlmap/issues
Hi.
It should be "patched" now [1].
Kind regards,
Miroslav Stampar
[1] https://github.com/sqlmapproject/sqlmap/issues/447
On Tue, May 7, 2013 at 9:32 AM, Isai Ofir Juarez Contreras <
ing.y.lic.ofir.jua...@gmail.com> wrote:
> [02:30:15] [CRITICAL] unhandled exception in sqlmap/1.0-dev-427d88b,
[02:30:15] [CRITICAL] unhandled exception in sqlmap/1.0-dev-427d88b, retry
your run with the latest development version from the GitHub repository. If
the exception persists, please send by e-mail to '
sqlmap-users@lists.sourceforge.net' or open a new issue at '
https://github.com/sqlmapproject/sql
Hi.
Thank you for your report. Find it fixed now [1].
Bye
[1]
https://github.com/sqlmapproject/sqlmap/commit/5d068896a95fa61d1bfbb4263a10701764d45091
On Fri, Feb 15, 2013 at 9:38 AM, joyal 8x wrote:
> sqlmap version: 1.0-dev-87db5d0
> Python version: 2.6.5
> Operating system: posix
> Command
sqlmap version: 1.0-dev-87db5d0
Python version: 2.6.5
Operating system: posix
Command line: ./sqlmap.py -u *
--data=zipcode=1 -p zipcode --tmp-path=C:/Windows/Temp/ --os-bof
Technique: STACKED
Back-end DBMS: Microsoft SQL Server (fingerprinted)
Traceback
Hi.
This is fixed two weeks ago [1].
Bye
[1] https://github.com/sqlmapproject/sqlmap/issues/351
On Jan 31, 2013 9:48 PM, "ahmed atif" wrote:
> i got this bug please fix it
>
> [04:04:05] [CRITICAL] unhandled exception in sqlmap/1.0-dev, retry your
> run with
> the latest development version
i got this bug please fix it
[04:04:05] [CRITICAL] unhandled exception in sqlmap/1.0-dev, retry your run with
the latest development version from the GitHub repository. If the exception per
sists, please send by e-mail to 'sqlmap-users@lists.sourceforge.net' or open a n
ew issue at 'https://git
Hi.
I believe that this was fixed few weeks ago. Please update to have it fixed.
Kind regards,
Miroslav Stampar
On Dec 17, 2012 10:01 AM, "beta" wrote:
> g:\progz\Python27>python.exe sqlmap-2012\sqlmap.py -u
> "http:///index.php?f_id=589&main=1";
> -p main --file-read="/etc
g:\progz\Python27>python.exe sqlmap-2012\sqlmap.py -u
"http:///index.php?f_id=589&main=1";
-p main --file-read="/etc/host"
sqlmap/1.0-dev-621ae58 - automatic SQL injection and database takeover
tool
http://sqlmap.org
[!] legal disclaimer: Usage of sqlmap for attacking
Hi Alexander.
I can see what's happening (at first glance it seems obvious, but it's
really not :). It would be a tromendous help if you could send me a traffic
file (just append --fresh-queries -t traffic.txt to those parameters used)
where this happens.
Kind regards,
Miroslav Stampar
On Fri, N
Hi.
Thank you for your report. This moment opened a new issue for it [1]. Will
keep you posted.
Kind regards,
Miroslav Stampar
[1] https://github.com/sqlmapproject/sqlmap/issues/268
On Fri, Nov 30, 2012 at 7:49 AM, Alexander Hagenah wrote:
>
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi List,
another glitch I ran into. Let me know if you need further info.
[07:47:38] [ERROR] thread MainThread: unhandled exception in
sqlmap/1.0-dev-6ea07f7, retry your run with the latest development
version from the GitHub repository. If the exce
Hi Anton,
As Miroslav has already said, the preferred way to report bugs/request
features is now via GitHub issues[1], nevertheless, the mailing list
is always a viable vector to discussion and iteract between developers
and users.
We have recently updated our homepage[2] and FAQ wiki page[3] to
Hi Anton
On Fri, Jul 20, 2012 at 10:53 AM, Anton Sazonov wrote:
> Hi Miroslav and Bernardo:
>
> I just wanted to clear things up regarding the workflow.
>
> What's the preferred method of submitting bugs and feature requests:
> this very mailing list or the Github issues one? I'm not rather sure
Hi Miroslav and Bernardo:
I just wanted to clear things up regarding the workflow.
What's the preferred method of submitting bugs and feature requests:
this very mailing list or the Github issues one? I'm not rather sure
if someone outside the project could post to the Git one, so I'd
welcome any
Hi Marco,
Please find it fixed with commit 3d66e2dfb1efe307ab097b03a18db35775c6058a.
Thanks for reporting.
Bernardo
On 12 July 2012 10:25, Marco Mirandola wrote:
> [11:23:50] [INFO] the back-end DBMS is MySQL
> web server operating system: Windows 2003
> web application technology: ASP.NET, Mi
[11:23:50] [INFO] the back-end DBMS is MySQL
web server operating system: Windows 2003
web application technology: ASP.NET, Microsoft IIS 6.0, ASP
back-end DBMS: MySQL 5.0
[11:23:50] [INFO] testing if current user is DBA
[11:23:50] [INFO] fetching current user
[11:23:50] [INFO] heuristics detected
Hi Ahmed.
Thank you for your report and find it fixed with the latest commit.
Kind regards,
MIroslav Stampar
On Sun, Jul 1, 2012 at 4:57 AM, Ahmed Shawky wrote:
> sqlmap version: 1.0-dev
> Python version: 2.7.2+
> Operating system: posix
> Command line: ./sqlmap.py -u *
sqlmap version: 1.0-dev
Python version: 2.7.2+
Operating system: posix
Command line: ./sqlmap.py -u * --data
username=&password=&priv=null&submit=Login+to+the+matrix -p priv
--technique U --union-col 8 --dbms mysql --random-agent -v 3 --batch
Technique: UNION
Back-end DBMS:
Hi.
IPv6 support is now up and running with the latest r5075.
Kind regards,
Miroslav Stampar
On Thu, May 24, 2012 at 12:00 PM, Miroslav Stampar <
miroslav.stam...@gmail.com> wrote:
> Hi.
>
> To be honest, we haven't tried usage of IPv6 addresses, but you are the
> messenger that we should start
Hi.
To be honest, we haven't tried usage of IPv6 addresses, but you are the
messenger that we should start :)
We'll see what can be done and keep you posted.
Kind regards,
Miroslav Stampar
On May 23, 2012 8:15 PM, "rmillet" wrote:
> Hi all,
>
> sqlmap hangs when using with an IPv6 address:
>
I think : is a delimiter used by the regex in sqlmap.
Try to encode the the URL with some encoder like fullurl
On Wed, May 23, 2012 at 8:14 PM, rmillet wrote:
> Hi all,
>
> sqlmap hangs when using with an IPv6 address:
> ./sqlmap.py -u 'http://[::1]/?p=42'
>
>
> Here is the traceback displayed o
Hi all,
sqlmap hangs when using with an IPv6 address:
./sqlmap.py -u 'http://[::1]/?p=42'
Here is the traceback displayed on keyboard interrupt:
Traceback (most recent call last):
File "./sqlmap.py", line 19, in
main()
File "/sqlmap/_sqlmap.py", line 110, in main
errMsg = unhandle
Hi Reelix.
You are fairly old version of sqlmap. Please follow instructions from (p.s.
section) here:
http://permalink.gmane.org/gmane.comp.security.sqlmap/2053
Kind regards,
Miroslav Stampar
On Wed, Apr 18, 2012 at 5:50 PM, Reelix wrote:
> C:\1\SQL Map>sqlmap.py -u http://www.google.com/ --he
C:\1\SQL Map>sqlmap.py -u http://www.google.com/ --headers=Accept-Language
sqlmap/0.9 - automatic SQL injection and database takeover tool
http://sqlmap.sourceforge.net
[*] starting at: 17:50:11
[17:50:11] [CRITICAL] unhandled exception in sqlmap/0.9, retry your run with the
latest dev
Hi Marco.
Thank you for your report and find it fixed with the latest r4969 commit.
Kind regards,
Miroslav Stampar
On Wed, Apr 4, 2012 at 10:19 PM, Marco Mirandola wrote:
> [22:15:51] [INFO] resuming back-end DBMS 'mysql 5.0.11' from session file
> [22:15:51] [INFO] testing connection to the t
[22:15:51] [INFO] resuming back-end DBMS 'mysql 5.0.11' from session file
[22:15:51] [INFO] testing connection to the target url
sqlmap identified the following injection points with a total of 0 HTTP(s)
reque
sts:
---
Place: GET
Parameter: id
Type: boolean-based blind
Title: AND boolean-ba
Hi nightman.
Could you please update to the latest revision (r4918) and retry it again?
Hopefully, it should be fixed now.
Kind regards,
Miroslav Stampar
On Wed, Mar 28, 2012 at 4:03 PM, wrote:
> [08:43:37] [CRITICAL] unhandled exception in sqlmap/1.0-dev (r4914), retry
> your run with the lat
[08:43:37] [CRITICAL] unhandled exception in sqlmap/1.0-dev (r4914), retry your run with the latestdevelopment version from the Subversion repository. If the exception persists, please send by e-mail to sqlmap-users@lists.sourceforge.net the following text and any information required to reproducet
Hi,
In your case, --null-connection might have worked (comparison based on
"Content-Length" header). If the body has such a minimal difference
between True and False, sqlmap algorithm is not (yet) able to pick
this up therefore comparison based upon --string or other detection
switches is necessar
> Could you update now and send full output of -v3 -t traffic.log
> masking sensible data? This would help us to debug this potential
> comparison issue as we are pretty confident that it is not 302
> redirect related anymore.
Hi,
I'm sorry but I no longer have access to the tested system,
but the
Hi,
Could you update now and send full output of -v3 -t traffic.log
masking sensible data? This would help us to debug this potential
comparison issue as we are pretty confident that it is not 302
redirect related anymore.
Thank you.
Bernardo
On 15 March 2012 23:44, buawig wrote:
> Hi Miroslav
Hi Miroslav,
> Could you please retry it now with the latest r4884? There were few related
> fixes in the mean time.
I tested r4884, but it still needs --string to retrieve data, if this
was what you were asking for.
kind regards
Hi again.
Could you please retry it now with the latest r4884? There were few related
fixes in the mean time.
Kind regards,
Miroslav Stampar
On Thu, Mar 15, 2012 at 7:54 PM, buawig wrote:
> Hi Miroslav,
>
> > Could you please retry it now with the latest revision (r4874)?
>
> now with r4882, s
Hi Miroslav,
> Could you please retry it now with the latest revision (r4874)?
now with r4882, sqlmap doesn't make any follow up requests anymore when
choosing [3] Ignore.
It is not able to retrieve data (blind), but when providing info via the
--string option data retrieval works fine.
thanks!
Hi buawig.
Could you please retry it now with the latest revision (r4874)?
Kind regards,
Miroslav Stampar
On Wed, Mar 14, 2012 at 8:26 PM, Miroslav Stampar <
miroslav.stam...@gmail.com> wrote:
> Found a problematic part. Will fix it tomorrow.
>
> Kind regards,
> Miroslav Stampar
>
> On Wed, Mar
Found a problematic part. Will fix it tomorrow.
Kind regards,
Miroslav Stampar
On Wed, Mar 14, 2012 at 6:42 PM, buawig wrote:
> > Also, "Ignore" should be suitable for your
> > case when you don't want sqlmap to follow the redirection.
>
> This still does not work for me.
> If I choose "[3] Ign
> Also, "Ignore" should be suitable for your
> case when you don't want sqlmap to follow the redirection.
This still does not work for me.
If I choose "[3] Ignore". sqlmap still sends requests to the redirection
Location.
There are even scenarios where sqlmap doesn't detect an sqli due to this
beh
Hi.
One question. Have you resumed a session made from previous revision(s)
(few weeks old) or you've made it from beginning these days?
Kind regards,
Miroslav Stampar
On Mon, Mar 12, 2012 at 10:28 PM, HGroup VN wrote:
> sqlmap version: 1.0-dev (r4853)
> Python version: 2.7.2+
>
> Traceback (m
sqlmap version: 1.0-dev (r4853)
Python version: 2.7.2+
Traceback (most recent call last):
File "/home/root/Desktop/sqlmap/_sqlmap.py", line 82, in main
start()
File "/home/root/Desktop/sqlmap/lib/controller/controller.py", line 348,
in start
setupTargetEnv()
File "/home/root/Desktop/
Hi.
Thank you for your report and find it fixed with the latest commit (r4806).
Kind regards,
Miroslav Stampar
On Sat, Feb 25, 2012 at 5:19 PM, Miroslav Stampar <
miroslav.stam...@gmail.com> wrote:
> Hi.
>
> Will fix it ASAP.
>
> Kind regards
> On Feb 25, 2012 2:26 PM, "Duarte Silva"
> wrote:
Hi.
Thank you for your report and find it fixed with the latest commit (r4806).
Kind regards,
Miroslav Stampar
On Sat, Feb 25, 2012 at 7:22 PM, HGroup VN wrote:
> [01:20:50] [CRITICAL] unhandled exception in sqlmap/1.0-dev (r4805), retry
> your run with the latest development version from the
till the development team handle this issue
edit line 216 in /home/user/Desktop/sqlmap/lib/controller/controller.py
from
kb.xpCmdshellAvailable
=hashDBRetrieve(HASHDB_KEYS.XP_CMDSHELL_AVAILABLE) or
kb.xpCmdshellAvailable
to
try:
kb.xpCmdshellAvailable
=hashDBRetrieve(HASHDB_KEYS.XP_CMDSHELL_AV
[01:20:50] [CRITICAL] unhandled exception in sqlmap/1.0-dev (r4805), retry
your run with the latest development version from the Subversion
repository. If the exception persists, please send by e-mail to
sqlmap-users@lists.sourceforge.net the following text and any information
required to reproduce
Hi.
Will fix it ASAP.
Kind regards
On Feb 25, 2012 2:26 PM, "Duarte Silva" wrote:
> Hi there,
>
> update to the last revision, got this bug while testing.
>
> sqlmap version: 1.0-dev (r4805)
> Python version: 2.7.2
> Operating system: posix
> Command line: sqlmap.py --
> url=***
Hi there,
update to the last revision, got this bug while testing.
sqlmap version: 1.0-dev (r4805)
Python version: 2.7.2
Operating system: posix
Command line: sqlmap.py --
url=*** --
proxy=* --random-agent --threads=3 --timeo
Hi.
Could you please retry with the latest revision together with
--flush-session?
If the problem persists could you please send privately a traffic.txt file
taken by that same command with appended -t traffic.txt --flush-session (or
--fresh-queries)?
Kind regards,
Miroslav Stampar
2012/2/21 朱冯
I met with the bug again. Debug info is:
sqlmap version: 1.0-dev (r4770)Python version: 2.7.1Operating system: ntCommand
line: sqlmap.py -u
***
-v 3 --text-only-o --threads=10 --drop-
Hi Lorenzo.
You are using fairly outdated version. Please checkout the latest v1.0-dev
from our repository. Search for more info at official page www.sqlmap.org.
Kind regards,
Miroslav Stampar
On Feb 5, 2012 2:05 PM, "Lorenzo Mainardi" wrote:
> [14:02:47] [ERROR] unhandled exception in sqlmap/0
Looks fixed in r4717
try http://downloads.sourceforge.net/sqlmap/sqlmap-0.9.tar.gz
or fetch the dev, svn checkout
https://svn.sqlmap.org/sqlmap/trunk/sqlmapsqlmap-dev
On 5 February 2012 15:04, Lorenzo Mainardi wrote:
> [14:02:47] [ERROR] unhandled exception in sqlmap/0.6.4, please copy the
> com
[14:02:47] [ERROR] unhandled exception in sqlmap/0.6.4, please copy the
command line and the following text and send by e-mail to
sqlmap-users@lists.sourceforge.net. The developers will fix it as soon
as possible:
sqlmap version: 0.6.4
Python version: 2.7.2+
Operating system: linux2
Traceback (m
Hi Artjom.
Thank you for your report and find it fixed with the latest revision
(r4689).
Kind regards,
Miroslav Stampar
On Fri, Jan 20, 2012 at 11:52 AM, Artjom wrote:
> Hello Miroslav,
>
> There is one more small problem in the latest revision (4688). Sqlmap
> crashes if the value of "code" i
Hello Miroslav,
There is one more small problem in the latest revision (4688). Sqlmap
crashes if the value of "code" in Detection section of config file is
uncommented and not set (example config attached). This config is (apart
from edited bulkfile value) was generated by sqlmap itself.
Regards,
Hi Nightman.
Thank you for your report. It should be fixed with the latest commit.
Kind regards,
Miroslav Stampar
On Mon, Jan 16, 2012 at 12:18 AM, wrote:
> Hi
> I found a new bug
>
> C:\map>sqlmap -d mysql://USER:PASSWORD@DBMS_IP:DBMS_PORT/DATABASE_NAME
> --file-write=C:\\temp\\test.php
> --f
Hi
I found a new bug
C:\map>sqlmap -d mysql://USER:PASSWORD@DBMS_IP:DBMS_PORT/DATABASE_NAME
--file-write=C:\\temp\\test.php --file-dest=/var/www/*/httpdocs/test.php
[23:23:36] [INFO] confirming MySQL
[23:23:38] [INFO] the back-end DBMS is MySQL
back-end DBMS: MySQL >= 5.0.0
[23:23:38] [
Hi Sherif.
This should be fixed with the latest commit.
Kind regards,
Miroslav Stampar
On Tue, Dec 20, 2011 at 10:20 AM, Sherif El-Deeb wrote:
> The site has Arabic text.
>
> sqlmap version: 1.0-dev (r4595)
> Python version: 2.6.5
> Operating system: posix
> Command line: ./sqlmap.py -u ***
The site has Arabic text.
sqlmap version: 1.0-dev (r4595)
Python version: 2.6.5
Operating system: posix
Command line: ./sqlmap.py -u ** --crawl 4 --form
--random-agent --batch
Technique: None
Back-end DBMS: None (identified)
Traceback (most recent call last):
File "/pentest/d
Hi Fernando.
Please checkout the latest revision from our SVN repository (v1.0-dev) to
have it up to date:
svn checkout https://svn.sqlmap.org/sqlmap/trunk/sqlmap sqlmap-dev
Kind regards,
Miroslav Stampar
On Fri, Dec 16, 2011 at 1:17 AM, Fernando Parodi
wrote:
> 21:15:08] [INFO] the back-end DB
21:15:08] [INFO] the back-end DBMS is MySQL
web server operating system: Windows 2008
web application technology: ASP.NET, Microsoft IIS 7.5, PHP 5.1.2
back-end DBMS: MySQL 5.0
[21:15:08] [INFO] fetching database names
[21:15:11] [CRITICAL] unhandled exception in sqlmap/0.9, retry your
run with th
Hi.
Please try to do the 'svn cleanup' first.
Nevertheless, you are strongly advised to do the fresh checkout like this:
svn checkout https://svn.sqlmap.org/sqlmap/trunk/sqlmap sqlmap-dev
Kind regards,
Miroslav Stampar
On Fri, Dec 9, 2011 at 10:29 AM, Double Dragon wrote:
> root@bt:/pentest/da
root@bt:/pentest/database/sqlmap# ./sqlmap.py --update
sqlmap/1.0-dev (r4009) - automatic SQL injection and database takeover
tool
http://sqlmap.sourceforge.net
[!] Legal Disclaimer: usage of sqlmap for attacking web servers without
prior mutual consent can be considered as an illegal act
Hi m4l1c3.
Find this (both reports) fixed with latest the commit (r4575).
Kind regards,
Miroslav Stampar
p.s. I see you are using combo --crawl --forms --smart. I'll just say nice
that you've figured that by yourself as that combination is a really useful
one ;)
On Mon, Dec 5, 2011 at 3:39 AM,
sqlmap version: 1.0-dev (r4574)
Python version: 2.6.5
Operating system: posix
Command line: ./sqlmap.py -u * --batch --dbs --forms
--crawl 3 --technique=U --threads 10 --level 3 --risk 2 --smart
--random-agent --tor
Technique: None
Back-end DBMS: None (identified)
Traceback (mos
sqlmap version: 1.0-dev (r4574)
Python version: 2.6.5
Operating system: posix
Command line: ./sqlmap.py -u * --batch --dbs --forms --crawl 2
--technique=BU --threads 10 --level 3 --risk 2 --smart --random-agent --tor
Technique: None
Back-end DBMS: None (identified)
Traceback (most recen
Hi.
Do you get message like "15:26:04] [INFO] Table 'DB.TABLE' dumped to CSV
file '/home/.../sqlmap/output/.../dump/DB/TABLE.csv'"?
Thing is that I can't reproduce it so I'll need more information. Traffic
file will be ok together with the console output with -v 3.
Kind regards
On Wed, Nov 23,
Updated to 4543. Dumps still not saved to /output/domain/dump/
Please ignore the previous > DUMP redirection.
On Wed, Nov 23, 2011 at 12:54 AM, m4l1c3 wrote:
> Update:
>
> Command:
> ./sqlmap.py -u "http://www..org:80/php"; --forms --batch
> --technique=U -pfield --dump-all --exclu
Hi.
It should be fixed in r4543.
Kind regards
On Wed, Nov 23, 2011 at 5:37 AM, m4l1c3 wrote:
> sqlmap version: 1.0-dev (r4542)
> Python version: 2.6.5
> Operating system: posix
> Command line: ./sqlmap.py -u ***
> --batch --privileges --forms --technique=U -
Update:
Command:
./sqlmap.py -u "http://www..org:80/php"; --forms --batch
--technique=U -pfield --dump-all --exclude-sysdbs > DUMP
This produces normal. "trimmed" dumps to console.
Then, after cracking hashes:
[INFO] cracked password 'password1' for user 'user1'
[INFO] current stat
Command:
./sqlmap.py -u "http://www..XXX:80/SOME.php"; --forms --technique=U
-pNULL --dump -T TABLE01 -D DB
The command completes with no errors, and the contents are dumped to
console (abbreviated, as normal), however; the /output/domain/dump/
directory remains empty. Need traffic.log?
sqlmap version: 1.0-dev (r4542)
Python version: 2.6.5
Operating system: posix
Command line: ./sqlmap.py -u ***
--batch --privileges --forms --technique=U -pXX --dump -T ** -D
Technique: UNION
Back-end DBMS: MySQL (fingerprinted)
Traceback
Hi m4l1c3.
Thank you for your report and find it fixed and committed in the last
revision (r4542).
Kind regards
On Wed, Nov 23, 2011 at 2:36 AM, m4l1c3 wrote:
> sqlmap version: 1.0-dev (r4541)
> Python version: 2.6.5
> Operating system: posix
> Command line: ./sqlmap.py -u
sqlmap version: 1.0-dev (r4541)
Python version: 2.6.5
Operating system: posix
Command line: ./sqlmap.py -u ** --batch --dbs
--forms --crawl 3 --smart --technique=U
Technique: None
Back-end DBMS: None (identified)
Traceback (most recent call last):
File "/pentest/database/s
Hi m4l1c3.
Thank you for your report. This last bug is fixed.
About the first one. Could you please send the URL used? Thing is that it
seems to be incompatible with standard IDNA encoding and that's kind of
strange.
Kind regards,
Miroslav Stampar
On Tue, Nov 22, 2011 at 4:44 AM, m4l1c3 wrote:
[INFO]s have been removed.
sqlmap version: 1.0-dev (r4525)
Python version: 2.6.5
Operating system: posix
Command line: ./sqlmap.py -u --dbs
--technique=U --level 3 --risk 3 --batch --smart --crawl 3 --threads 3
--forms --random-agent
Technique: None
Back-end DB
sqlmap version: 1.0-dev (r4525)
Python version: 2.6.5
Operating system: posix
Command line: ./sqlmap.py -u ***
Technique: None
Back-end DBMS: None (identified)
Traceback (most recent call last):
File "/pentest/database/sqlmap/_sqlmap.py", line 86, in main
start()
File "/
Hi Jer0nomo.
Could you please retry with the latest revision (r4505) - committed this
moment?
Kind regards,
Miroslav Stampar
On Sun, Nov 13, 2011 at 9:48 PM, Dark-Net Jer0nomo wrote:
> Command line: ./sqlmap.py -u
> --forms --dbs -o
> --batc
Command line: ./sqlmap.py -u
--forms --dbs -o --batch
Technique: None
Back-end DBMS: None (identified)
Traceback (most recent call last):
File "/home/***/Desktop/sqlmap/last/sqlmap/_sqlmap.py", line 86, in main
start()
File
"/home/
New commit works perfectly, thanks.
On Sun, Nov 13, 2011 at 12:53 PM, m4l1c3 wrote:
> hi again
>
> sqlmap version: 1.0-dev (r4503)
> Python version: 2.6.5
> Operating system: posix
> Command line: ./sqlmap.py -u
> **
sqlmap version: 1.0-dev (r4503)
Python version: 2.6.5
Operating system: posix
Command line: ./sqlmap.py -u
--batch --dbs --technique=BU --random-agent --threads 10 --forms --level 2
--risk 2 --smart
Technique: None
Back-end DBMS: None (identified)
Traceback
hi again
sqlmap version: 1.0-dev (r4503)
Python version: 2.6.5
Operating system: posix
Command line: ./sqlmap.py -u
--batch --dbs --techn
This has been fixed last week.
Bernardo
On 20 October 2011 09:07, yarolinux back | track wrote:
> [03:04:51] [WARNING] HTTP error codes detected during testing:
> 403 (Forbidden) - 1 times
>
> [03:04:51] [CRITICAL] unhandled exception in sqlmap/1.0-dev (r4009), retry
> your run with the latest
[03:04:51] [WARNING] HTTP error codes detected during testing:
403 (Forbidden) - 1 times
[03:04:51] [CRITICAL] unhandled exception in sqlmap/1.0-dev (r4009), retry
your run with the latest development version from the Subversion repository.
If the exception persists, please send by e-mail to
sqlma
Hi.
Thank you for your report. It should be fixed with the latest commit.
There is a possibility that you'll need to report that original
exception causing problem - in that case please contact me privately.
Kind regards
On Wed, Oct 19, 2011 at 5:52 PM, Soma Cruz wrote:
> [INFO] 972/4352 links
[INFO] 972/4352 links visited (22%)
[19:50:08] [ERROR] thread MainThread: unhandled exception in sqlmap/1.0-dev
(r4407), retry your run with the latest development version from the
Subversion repository. If the exception persists, please send by e-mail to
sqlmap-users@lists.sourceforge.net the foll
This has been fixed some time ago.
Bernardo
On 29 August 2011 19:13, wrote:
> hello kids!
> recently got this bug
>
> -
> [19:58:45] [CRITICAL] unhandled exception in sqlmap/1.0-dev (r4358), retry
> your run with the latest development version from the Subversion
> repository. If t
hi Christian.
there was a "silent" bug inside which caused buggy waiting for console
input without any warning in cases like yours (no warning waiting
after "[INFO] confirming Microsoft SQL Server").
i've fixed that one in the latest commit, so it would be great if you
could retest and see if tha
Hi Christian,
Can you please rerun with the latest development version from
subversion with --flush-session -v3 -t traffic.log and provide us with
traffic.log file privately in order to debug this possible bug?
Thank you.
Bernardo
On 24 August 2011 16:58, Christian Rothländer
wrote:
> Hi ther
1 - 100 of 167 matches
Mail list logo
