Hi.
This looks strange, especially when considering used options/switches and
the SQL type.
Do you see "duplications" in console output while dumping entries? Do you
get this kind of behavior in non-SQLITE format(s) too? Have you noticed
duplicate error messages in vulnerable web application?
Kind regards,
Miroslav Stampar
On Mon, Aug 25, 2014 at 11:07 AM, Michael Bachmann <mbachman...@gmail.com>
wrote:
> Hi
>
> I try to dump a db. my command is as follows:
>
> sqlmap.py -c sqlmap.conf -D TheDb -T TheTable --dump --pivot-column=ID -X
> SomeNotNeededColumns -o --dump-format SQLITE
>
> injection method is:
>
> Type: error-based
> Title: Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause
>
> if i do a count on this table i get:
>
> about 40k entries
>
> but when i check the dumped sqlite-db i got about 40k entries, but every
> id is present at least 3 times. so if i do a distinct on id, i get about
> 10k entries. why is this?
>
> sometimes the target throws the db-error "user can't login", i guess cause
> of to high usage (probably a shared solution). is this causing this
> behavior?
>
> Kind regards
> Michael
>
>
>
>
>
>
> ------------------------------------------------------------------------------
> Slashdot TV.
> Video for Nerds. Stuff that matters.
> http://tv.slashdot.org/
> _______________________________________________
> sqlmap-users mailing list
> sqlmap-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>
--
Miroslav Stampar
http://about.me/stamparm
------------------------------------------------------------------------------
Slashdot TV.
Video for Nerds. Stuff that matters.
http://tv.slashdot.org/
_______________________________________________
sqlmap-users mailing list
sqlmap-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sqlmap-users