Hey all.
First id like to congratulate the team for the great tool and for sharing.
Im testing sqlmap on a local script i've created.
When i try to fingerprint the DBMS sqlmap starts using :
Type: boolean-based blind
Title: AND boolean-based blind - WHERE or HAVING clause
to do it. So its using a sqli blind technique to fetch the contents. I know
that this script supports UNION based inyections which would be much faster
to do. so my question is
1) Does sqlmap have a funcionality to fingerprint the contents of
information_schema.tables and information_schema.colums via a UNION based
inyection in order to get the databases, tables and columns ?
2) If so, which are the parameters to use ?
Thanks in Advance,
Mauricio
------------------------------------------------------------------------------
Xperia(TM) PLAY
It's a major breakthrough. An authentic gaming
smartphone on the nation's most reliable network.
And it wants your games.
http://p.sf.net/sfu/verizon-sfdev
_______________________________________________
sqlmap-users mailing list
sqlmap-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sqlmap-users
