Re: [sqlmap-users] sqlmap log file

2013-06-28 Thread Miroslav Stampar
p.s. just in case, try to rerun with A) --union-char=1 B) --text-only p.p.s. if everytime you have a different number in "appears to be UNION injectable with x columns" then the page "dynamicity" is screwing you up On Fri, Jun 28, 2013 at 10:24 AM, Miroslav Stampar < miroslav.stam...@gmail.com>

Re: [sqlmap-users] sqlmap log file

2013-06-28 Thread Miroslav Stampar
Hi Heidi. 1) appears != is. I am not sure if there is much explanation here to be done. To sqlmap something "appeared" to be injectable (because of our heuristic mechanisms) and in further MORE SERIOUS testing it concluded that "it is not injectable" 2) New info is being logged, but only data from

[sqlmap-users] sqlmap log file

2013-06-27 Thread Heidi Petersen
Hello! New to sqlmap and I'm running some long tests, but I have a few questions. I'm seeing [INFO] target URL appears to be UNION injectable with x columns and then [WARNING] GET parameter 'xxx' is not injectable there is nothing in the log file. So two questions: 1)if it seemed injectable