Hi Tom,

In order to better understand what is going on and track down a
possible bug, could you please provide us with the full output of your
sqlmap command with --flush-session -v3 --parse-errors --columns -T
<your_table_name> -D <your_db_name> -t traffic.log and send use the
traffic log file too? You can mask sensible information and send it
privately to me and Miroslav to debug if you prefer.

Thank you,
Bernardo


On 24 April 2011 18:53, Tom Thumb <k1...@live.co.uk> wrote:
> When trying to dump a table containing over 10000 entries, only 32 results
> are returned (rows with id 8, 9, 90-99, 990-999, 9990-9999). All the other
> data is not dumped, and I can't understand why.
> Can anyone explain this behaviour?
> Obviously I'm pleased that my database does not appear to be completely
> exploitable, but I'm worried that I'm missing something simple, and that
> there is something a hacker could do to retreive the rest of the data...
> Test subject is an MSSQL 2005 Database runing on Windows 2003.


-- 
Bernardo Damele A. G.

E-mail / Jabber: bernardo.damele (at) gmail.com
Mobile: +447788962949 (UK 07788962949)
PGP Key ID: 0x05F5A30F

------------------------------------------------------------------------------
Fulfilling the Lean Software Promise
Lean software platforms are now widely adopted and the benefits have been 
demonstrated beyond question. Learn why your peers are replacing JEE 
containers with lightweight application servers - and what you can gain 
from the move. http://p.sf.net/sfu/vmware-sfemails
_______________________________________________
sqlmap-users mailing list
sqlmap-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sqlmap-users

Reply via email to