Hi.
You haven't told which SQLi technique has been identified by sqlmap (e.g.
boolean-based blind). Also, has sqlmap extracted those table names by
common table name search or by regular querying of the system tables (you
could remember this from first sqlmap's run).
If you are combining --common-tables with regular --tables, especially if
the sqlmap uses regular querying of system tables, this won't work. Thing
is that sqlmap doesn't know what is the "first table in database", nor
"second table in database", nor... All those tables are the same when
querying from system tables. Also, there can't be one huge "...WHERE
table_name NOT IN ('...','...'...)" as your request would most probably be
dropped by the web server (due to its HUGE length).
Bye
On Mon, Sep 28, 2015 at 3:40 AM, Indra Zulkarnain <netzerosp...@gmail.com>
wrote:
> Hi, miro thanks for the reply
>
> Actually I already have 105 tables name crack so I use it in common tables.
> I'm try to run a sqlmap with - - common tables
>
> So far it works a sqlmap successfully brute force all the 105 table names
> But when I try to resume it with --tables it start from 1 again
>
> I just thought that if a sqlmap can do start and stop for data extraction
> why not table names
> On Sep 27, 2015 9:01 PM, "Miroslav Stampar" <miroslav.stam...@gmail.com>
> wrote:
>
>> In case of flushing the session, nothing is being left (session is erased
>> and overwritten).
>>
>> Bye
>>
>> On Sun, Sep 27, 2015 at 5:45 AM, Indra Zulkarnain <netzerosp...@gmail.com
>> > wrote:
>>
>>> hi guys
>>>
>>> is there a way to resume tables injection
>>>
>>> i already have 105 tables but then i flush the session
>>> how do i start from 105 to 113 tables
>>>
>>> thanks
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> _______________________________________________
>>> sqlmap-users mailing list
>>> sqlmap-users@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>>>
>>
>>
>>
>> --
>> Miroslav Stampar
>> http://about.me/stamparm
>>
>
--
Miroslav Stampar
http://about.me/stamparm
------------------------------------------------------------------------------
_______________________________________________
sqlmap-users mailing list
sqlmap-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sqlmap-users
