Re: [sqlmap-users] Dump database by injected url, without finding column

2015-10-07 Thread Miroslav Stampar
sqlmap has to find a SQLi. It can't just dump data without knowing anything about the SQLi. Every SQLi technique has different rules for data dumping. I would suggest that you run (if you want to be stricter with your given cases): python sqlmap.py -u "http://hello.com/index.php?id=1"; --techniqu

[sqlmap-users] Dump database by injected url, without finding column

2015-10-07 Thread bogdan
Hello! I have a list of vulners UnionBased urls(example): http://hello.com/index.php?id=-1+and+union+all+select+1,2,3,[point],4,5-- http://world.com/index.php?page=3+and+union+all+select+1,2,3,4,[point]-- How can i to load one url of this list to sqlmap and dumping structure of database, withou