Hi Miroslav,

On Fri, Feb 10, 2012 at 03:59:39PM +0100, Miroslav Stampar wrote:

> Basically, IMO average user doesn't care about anything but the data
> retrieval. But, nevertheless, find this "patch" included with the latest
> commit (r4735). You'll be able to see the vector if you use greater verbose
> mode than the default 1 (e.g. -v 2).

thank you for including the patch. But I would like to propose to change
payload and vector in the output. To me it looks more useful to display
the vector instead of the payload in a normal use case. The Payload
usually does not make it clear how a certain injection works and what it
does without the information what the vector is. Therefore I do not see
much value for the average user to see the payload without the vector.
But the vector is useful without knowing the payload imho, because the
actual values used for the payload are imho mainly useful for debugging.

So my proposal is to show the vector instead of the payload by default
and only the payload if the verbosity is greater than 1. Or do you know
use cases for average users to know the payload?

Regards
Till

------------------------------------------------------------------------------
Virtualization & Cloud Management Using Capacity Planning
Cloud computing makes use of virtualization - but cloud computing 
also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/
_______________________________________________
sqlmap-users mailing list
sqlmap-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sqlmap-users

Reply via email to