Hi.
First of all you can't use '%PASSWORD%' if you want to search for
identifiers LIKE 'PASSWORD'. In your case just put: -D authdb --search -C
PASSWORD.
With the last commit (r4563) there is an upgrade in --search mechanism that
will more suite your needs.
Now the lowest denominator dictates what is going to be searched. So:
--search -D .. -T .. -C .. will search for column(s)
--search -D .. -C .. will search for column(s)
--search -D .. -T .. will search for table(s)
--search -D .. will search for db(s)
...
Kind regards,
Miroslav Stampar
On Fri, Dec 2, 2011 at 1:50 PM, Miroslav Stampar <miroslav.stam...@gmail.com
> wrote:
> Hi.
>
> You are right. The lowest common denominator should be searched for with
> --search (in this case that's column). Going to modify it and report back.
>
> Kind regards,
> Miroslav Stampar
>
> 2011/12/2 CoeTs7 <t...@hotmail.com>
>
>> hi all. i'm wondering if there's a way to search for column name in a
>> specific database while using '--search' ?
>> i've tried '-D authdb --search -C "%PASSWORD%"' but sqlmap think that
>> i'm trying to search a database named "authdb" and a column named like
>> 'password' . I am sure that the password i want to know is in the database
>> 'authdb' so i don't want to waste time searching in other dbs.
>> Is there any way i can do this?
>> thx a lot.
>>
>>
>> ------------------------------------------------------------------------------
>> All the data continuously generated in your IT infrastructure
>> contains a definitive record of customers, application performance,
>> security threats, fraudulent activity, and more. Splunk takes this
>> data and makes sense of it. IT sense. And common sense.
>> http://p.sf.net/sfu/splunk-novd2d
>> _______________________________________________
>> sqlmap-users mailing list
>> sqlmap-users@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>>
>>
>
>
> --
> Miroslav Stampar
> http://about.me/stamparm
>
--
Miroslav Stampar
http://about.me/stamparm
------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure
contains a definitive record of customers, application performance,
security threats, fraudulent activity, and more. Splunk takes this
data and makes sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-novd2d
_______________________________________________
sqlmap-users mailing list
sqlmap-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sqlmap-users
