p.s. 15 days ago there was no such warning for "INTO OUTFILE" but also it
(silently) didn't work
On Wed, Feb 20, 2013 at 3:11 PM, Miroslav Stampar <
miroslav.stam...@gmail.com> wrote:
> Do you see that warning: "execution of custom SQL queries is only
> available when stacked queries are supporte
Do you see that warning: "execution of custom SQL queries is only available
when stacked queries are supported". Do you know what does it mean?
I've said that you need stacking -> you need to have "STACKED" technique
available for exploitation. In your case that's not the case.
Kind regards,
Miro
Le 2013-02-20 14:52, Miroslav Stampar a écrit :
> p.s. problem is that INTO OUTFILE affects only the SELECT query where
> is supposed to be done. In your case you have one query which is
> INJECTABLE and one separate CUSTOM query which needs to include INTO
> OUTFILE -> this is a conflict which req
p.s. problem is that INTO OUTFILE affects only the SELECT query where is
supposed to be done. In your case you have one query which is INJECTABLE
and one separate CUSTOM query which needs to include INTO OUTFILE -> this
is a conflict which requires usage of stacking (or you can try to exploit
it ma
For using "INTO OUTFILE" in a specific SELECT query you need stacking (or
you can try to exploit it manually). We can't help you here.
Bye
On Wed, Feb 20, 2013 at 2:45 PM, ml wrote:
> Le 2013-02-20 09:53, Miroslav Stampar a écrit :
>
>> --sql-query WORKS (tested this moment with ERROR based-onl
Le 2013-02-20 09:53, Miroslav Stampar a écrit :
> --sql-query WORKS (tested this moment with ERROR based-only technique
> using query "SELECT id FROM users")
> --sql-shell WORKS (tested this moment with ERROR based-only technique
> using query "SELECT id FROM users")
>
> To distinguish things a bit
--sql-query WORKS (tested this moment with ERROR based-only technique using
query "SELECT id FROM users")
--sql-shell WORKS (tested this moment with ERROR based-only technique using
query "SELECT id FROM users")
To distinguish things a bit. Query is a SQL command that starts with
"SELECT". Non-que
Regression alert! Regression alert! sqlmap needs more unittests :)
On Tue, Feb 19, 2013 at 7:37 PM, ml wrote:
> hello guru
>
>
>
> I ask you a little help.
> all the "custom query" are no longer possible
> to execute custom query sqlmap answers the "stacked query" are not
> supported.
>
> what in
