On 26 June 2012 10:48, Bernardo Damele A. G. <bernardo.dam...@gmail.com> wrote: > In the meantime, we have --predict-output switch. You can tweak > upfront the txt/common-outputs.txt for speed improvements. > Refer to the user's manual for details.
Unfortunately that doesn't help when it is in the middle of a run and you spot "site_userna" in the output. It takes to long to kill the script and add "site_username" to the list then restart it. That feature is useful however when you do know the format of the data you are expecting so can put some good guesses into it. Robin > Bernardo > > > On 26 June 2012 09:36, Robin Wood <ro...@digininja.org> wrote: >> On 26 June 2012 08:10, Miroslav Stampar <miroslav.stam...@gmail.com> wrote: >>> Hi Robin. >>> >>> You are an xyz-th user with this same request ;) >> >> Thought I might be. >> >>> Problem is that Python doesn't have a getch() mechanism (there are some >>> dirty hacks, but are really dirty, OS dependent and unstable) making it >>> clumsy for this feature. You would have to enter something and press Enter >>> for it to register input with current raw_input(). But, the problem is also >>> that with current mechanism thread waiting for input would be 'unkillable' >>> by the program as python also doesn't have mechanism for that too :) >> >> And figured that was probably the case. I've tried to do similar >> things with multi-threaded apps and always had problems. >> >>> Anyway, I can only promise that we'll spend some time on this one in next >>> week and see if something is doable (at least the dirty way). >> >> It would be good but not worth compromising good clean code to get it in. >> >> Robin >> >>> Kind regards, >>> Miroslav Stampar >>> >>> On Jun 25, 2012 7:32 PM, "Robin Wood" <ro...@digininja.org> wrote: >>>> >>>> I was retrieving table names at the time but I guess it would help in >>>> other situations as well. >>>> >>>> Robin >>>> >>>> On Jun 25, 2012 6:07 PM, "Miroslav Stampar" <miroslav.stam...@gmail.com> >>>> wrote: >>>>> >>>>> You forgot to mention which technique? >>>>> >>>>> Kind regards, >>>>> Miroslav Stampar >>>>> >>>>> On Mon, Jun 25, 2012 at 6:03 PM, Robin Wood <ro...@digininja.org> wrote: >>>>>> >>>>>> I've just been testing a site which has to have the --no-cast option >>>>>> to retrieve data, it works great but it is very slow. Because of this >>>>>> I'd quite often guessed the data it was pulling down way before the >>>>>> command had finished, especially with table names. >>>>>> >>>>>> It would be really good if you could in some way pause the script and >>>>>> suggest what you think the value would be then have it test that, if >>>>>> you are right it moves on, if not it continues from where it left off. >>>>>> >>>>>> I guess this would be quite hard to implement as it would have to work >>>>>> across multiple threads but would be a really cool feature if it could >>>>>> be added. >>>>>> >>>>>> Robin >>>>>> >>>>>> >>>>>> ------------------------------------------------------------------------------ >>>>>> Live Security Virtual Conference >>>>>> Exclusive live event will cover all the ways today's security and >>>>>> threat landscape has changed and how IT managers can respond. >>>>>> Discussions >>>>>> will include endpoint security, mobile security and the latest in >>>>>> malware >>>>>> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ >>>>>> _______________________________________________ >>>>>> sqlmap-users mailing list >>>>>> sqlmap-users@lists.sourceforge.net >>>>>> https://lists.sourceforge.net/lists/listinfo/sqlmap-users >>>>> >>>>> >>>>> >>>>> >>>>> -- >>>>> Miroslav Stampar >>>>> http://about.me/stamparm >> >> ------------------------------------------------------------------------------ >> Live Security Virtual Conference >> Exclusive live event will cover all the ways today's security and >> threat landscape has changed and how IT managers can respond. Discussions >> will include endpoint security, mobile security and the latest in malware >> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ >> _______________________________________________ >> sqlmap-users mailing list >> sqlmap-users@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/sqlmap-users > > > > -- > Bernardo Damele A. G. > > Homepage: http://about.me/inquis > E-mail / Jabber: bernardo.damele (at) gmail.com > Mobile: +447788962949 (UK 07788962949) > > ------------------------------------------------------------------------------ > Live Security Virtual Conference > Exclusive live event will cover all the ways today's security and > threat landscape has changed and how IT managers can respond. Discussions > will include endpoint security, mobile security and the latest in malware > threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ > _______________________________________________ > sqlmap-users mailing list > sqlmap-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/sqlmap-users ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ sqlmap-users mailing list sqlmap-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/sqlmap-users
