Hi.
sqlmap hasn't been able to detect that it's exploitable through stacking.
Maybe some characters are filtered out. Maybe you are using --proxy or
--tor which introduce lagging which are causing problems like yours.
Use --flush-session --time-sec=20 if you are going to retry.
The best way how you could help is by using payloads used by sqlmap in
detection phase (use -v 3 to see those) and trying those in browser. If you
are able to find out what's happening, report back.
Bye
On Feb 22, 2013 6:28 AM, "root" <r...@cnmoker.org> wrote:
> ** ********
> hi,all
>
> sqlmap can not support stacked queries in aspx+mssql?
>
>
> [11:42:43] [CRITICAL] unable to prompt for an interactive operating system
> shell
>
> via the back-end DBMS because stacked queries SQL injection is not supported
>
>
>
> thanks&Best
> Regards
>
>
>
> ------------------------------------------------------------------------------
> Everyone hates slow websites. So do we.
> Make your web apps faster with AppDynamics
> Download AppDynamics Lite for free today:
> http://p.sf.net/sfu/appdyn_d2d_feb
> _______________________________________________
> sqlmap-users mailing list
> sqlmap-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>
------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_d2d_feb
_______________________________________________
sqlmap-users mailing list
sqlmap-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sqlmap-users
