Re: [sqlmap-users] --os-shell error

2012-07-16 Thread Bernardo Damele A. G.
Ahmed, I have created an issue for this, https://github.com/sqlmapproject/sqlmap/issues/96. Bernardo On 3 May 2012 16:06, Bernardo Damele A. G. wrote: > Hi Ahmed, > > On 2 May 2012 21:09, Ahmed Shawky wrote: >> >> While using sqlmap with --os-shell I found that it only works if the >> writabl

Re: [sqlmap-users] --os-shell error

2012-05-03 Thread Bernardo Damele A. G.
Hi Ahmed, On 2 May 2012 21:09, Ahmed Shawky wrote: > > While using sqlmap with --os-shell I found that it only works if the > writable directory is on the DOCUMENT_ROOT directly > and if it exists on another dir sqlmap successfully uploads the php file but > it couldn't connect  through it This

Re: [sqlmap-users] OS Shell

2011-12-29 Thread Bernardo Damele A. G.
Yes please with --fresh-queries -v3 -t traffic.log. Bernardo Damele A. G. This message was sent from a smartphone On 29 Dec 2011, at 17:05, Chris Oakley wrote: Thanks for the replies. Yes it'll have to be in private. When I relaunch, do you need me to do it from scratch (as in flush session)

Re: [sqlmap-users] OS Shell

2011-12-29 Thread andreoaz
Hi Chris, Yes you have to use the flush-session option. Andre -Original Message- From: Chris Oakley Date: Thu, 29 Dec 2011 17:05:37 To: Bernardo Damele A. G. Cc: Subject: Re: [sqlmap-users] OS Shell

Re: [sqlmap-users] OS Shell

2011-12-29 Thread Chris Oakley
Thanks for the replies. Yes it'll have to be in private. When I relaunch, do you need me to do it from scratch (as in flush session) or is it ok to just use the traffic logging options with the injection already found? On 21 December 2011 15:31, Bernardo Damele A. G. wrote: > Hi Chris, > > On 2

Re: [sqlmap-users] OS Shell

2011-12-21 Thread Bernardo Damele A. G.
Hi Chris, On 21 December 2011 14:56, Chris Oakley wrote: > Hi All > > I have a time based blind injection on a machine running Windows Server > 2003, IIS 6 and SQL Server 2000.  The user is running as DBA.  I should be > able to enable xp_cmdshell, and indeed: Indeed. > ... > As you can see, no

Re: [sqlmap-users] OS Shell

2011-12-21 Thread Miroslav Stampar
Hi Chris. Could you please send the traffic file retrieved with -t traffic.txt? Kind regards, Miroslav Stampar Dana 21.12.2011. 15:57 "Chris Oakley" je napisao/la: > Hi All > > I have a time based blind injection on a machine running Windows Server > 2003, IIS 6 and SQL Server 2000. The user i

Re: [sqlmap-users] --os-shell issue

2011-08-23 Thread Bernardo Damele A. G.
Not long. It should not freeze. You can force it with --os switch if you want. To better debug the issue please send privately the -v3 output and if possible the -t traffic.log file. Bernardo Damele A. G. This message was sent from a smartphone On 22 Aug 2011, at 22:54, Ahmed Shawky wrote: wha