Hi Goce, On 24 April 2011 04:11, Goce Trenchev <amon.amar...@gmail.com> wrote: > I've been doing some experiments with sqlmap and I found out that when i > turn off the icmp so there is no ping reply from the target server, sqlmap > is not working and it says connection timed out. It would be great if there > is an option to treat the host online and don't ping it.
sqlmap only uses ICMP packets when you takeover the back-end DBMS server and chooses to do it over ICMP tunnel with --os-pwn switch. Is this the case? If so, run sqlmap as root on Linux (needed in order to use Impacket and generate arbitrary ICMP echo responses) and, if the back-end DBMS runs on Windows and the OS/firewall allows ICMP echo requests to arbitrary targets (read, the sqlmap attacker Linux box) then the out-of-band will work. If this is not the case, please do a packet dump of your sqlmap run, run it with -t traffic.log and -v 3 and send us the full output and files in order to debug it further, please. Regards, Bernardo -- Bernardo Damele A. G. E-mail / Jabber: bernardo.damele (at) gmail.com Mobile: +447788962949 (UK 07788962949) PGP Key ID: 0x05F5A30F ------------------------------------------------------------------------------ WhatsUp Gold - Download Free Network Management Software The most intuitive, comprehensive, and cost-effective network management toolset available today. Delivers lowest initial acquisition cost and overall TCO of any competing solution. http://p.sf.net/sfu/whatsupgold-sd _______________________________________________ sqlmap-users mailing list sqlmap-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/sqlmap-users
