Hi Liang. First of all please update to the latest v1.0-dev from our repository to have it up to date: svn checkout https://svn.sqlmap.org/sqlmap/trunk/sqlmap sqlmap-dev
Second of all, in those kind of cases, where you have connection timeouts FIRST THING you start the sqlmap, and you are absolutely sure that there are no proxy problems involved, switch --random-agent does miracles. There are WAFs that filter all HTTP traffic containing "sqlmap" as an HTTP "User-Agent" header and --random-agent masks that header value with some valid browser-like one. Kind regards, Miroslav Stampar On Sun, Nov 6, 2011 at 4:32 AM, Liang Guo <liang...@me.com> wrote: > > Hi sqlmap team > this is a great tool, however, if i want to inject on sites that stop on the > sql error, sqlmap got connection timed out error. > is there a option i have to use or is it just a bug? > Thanks you very much > -----------------command-------------------------------------------- > ./sqlmap.py -u "http://www.hubbardbrook.org/gis/data.php?id=3"; > sqlmap/0.9 - automatic SQL injection and database takeover tool > http://sqlmap.sourceforge.net > [*] starting at: 11:21:22 > [11:21:22] [INFO] using > '/Users/Downloads/sqlmap/output/www.hubbardbrook.org/session' as session file > [11:21:22] [INFO] testing connection to the target url > [11:21:52] [CRITICAL] connection timed out to the target url or proxy, sqlmap > is going to retry the request > [11:22:23] [CRITICAL] connection timed out to the target url or proxy, sqlmap > is going to retry the request > [11:22:54] [CRITICAL] connection timed out to the target url or proxy, sqlmap > is going to retry the request > [11:23:25] [CRITICAL] connection timed out to the target url or proxy > > ------------------------------------------------------------------------------ > RSA(R) Conference 2012 > Save $700 by Nov 18 > Register now > http://p.sf.net/sfu/rsa-sfdev2dev1 > _______________________________________________ > sqlmap-users mailing list > sqlmap-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/sqlmap-users > -- Miroslav Stampar http://about.me/stamparm ------------------------------------------------------------------------------ RSA(R) Conference 2012 Save $700 by Nov 18 Register now http://p.sf.net/sfu/rsa-sfdev2dev1 _______________________________________________ sqlmap-users mailing list sqlmap-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/sqlmap-users
