Hi boys and girls. We are introducing new (experimental) feature called mnemonics (-z option).
All of you who are a hard core users of sqlmap and/or you are tired of writing down long sausages in sqlmap's command line you could enjoy this one. Comparison: A) normal ./sqlmap.py --batch --banner --dump -D=testdb -T=users --technique=E -u="http://xxx.xxx.xxx.xxx/sqlmap/mysql/get_int.php?id=1" B1) with mnemonics ./sqlmap.py -u "http://xxx.xxx.xxx.xxx/sqlmap/mysql/get_int.php?id=1" -z "bat,ban,du,D=testdb,T=users,tec=E" B2) with mnemonics ./sqlmap.py -u "http://xxx.xxx.xxx.xxx/sqlmap/mysql/get_int.php?id=1" --batch --dump -z "ban,D=testdb,T=users,tec=E" C) possible real life example: ./sqlmap.py -u "http://.....?id=1" -z "bat,ban,to,ra,le=3,ri=3" instead of: ./sqlmap.py -u "http://.....?id=1" --batch --banner --tor --random-agent --level=3 --risk=3 (one of many possible equivalents is e.g.: ./sqlmap.py -u "http://.....?id=1" -z "bat,bann,tor,rand,lev=3,ri=3") Trick is that you are writing as shorter names as possible of wanted parameters. Mnemonics are splitted with ',' char and values are explicitly set (if needed) by writing equation mark. In case of ambiguities parameter with the shortest name will be used (e.g. du will be resolved to dump because dump is shorter than dump-all) This is all prone to changes and we are opened for suggestions. KR -- Miroslav Stampar E-mail: miroslav.stampar (at) gmail.com PGP Key ID: 0xB5397B1B ------------------------------------------------------------------------------ EditLive Enterprise is the world's most technically advanced content authoring tool. Experience the power of Track Changes, Inline Image Editing and ensure content is compliant with Accessibility Checking. http://p.sf.net/sfu/ephox-dev2dev _______________________________________________ sqlmap-users mailing list sqlmap-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/sqlmap-users