hi again.
sorry, i was out of town (without source code) and haven't noticed
that we already do support this in this kind of cases.
also, i've tried to against our testing environment and both methods
do the job correctly.
this means that maybe in your case we do have some bug/problem.
kr
On
ortes@lpt-rj-015:~/Documents/Proof/Ágora/scan-1106$ sudo sqlmap --update
sqlmap/0.6.4 coded by Bernardo Damele A. G. bernardo.dam...@gmail.com
and Daniele Bellucci daniele.bellu...@gmail.com
[*] starting at: 22:51:37
[22:51:37] [INFO] updating sqlmap
[22:51:38]
Hello,
I've been testing a non-production app from a black-box perspective. The
only SQLi I've found is from the login page. I can bypass the login by
dropping something like: 1' or 1=1-- into the password field.
Unfortunately, sqlmap doesn't find this vulnerability. Well, that's not
quite
hi Fabio
you are using fairly outdated version (0.6). please checkout the
latest revision from our repository to have it updated (1.0-dev):
svn checkout https://svn.sqlmap.org/sqlmap/trunk/sqlmap sqlmap-dev
kr
On Sun, Jun 5, 2011 at 3:53 AM, Fabio Portes fabio.por...@proof.com.br wrote:
appendix:
When I get in, I can't extract data. I can get verification that I'm
a DBA, but little to nothing else
and
why I would get no data returned?
for all of you who experience these symptoms here and there, there are
two possibilities:
a) there is something actually wrong with sqlmap and
[02:45:36] [CRITICAL] unhandled exception in sqlmap/1.0-dev (r4027), retry
your run with the latest development version from the Subversion repository.
If the exception persists, please send by e-mail to
sqlmap-users@lists.sourceforge.net the following text and any information
required to