Re: [sqlmap-users] backdoor file permission

2011-06-06 Thread Miroslav Stampar
hi again. sorry, i was out of town (without source code) and haven't noticed that we already do support this in this kind of cases. also, i've tried to against our testing environment and both methods do the job correctly. this means that maybe in your case we do have some bug/problem. kr On

[sqlmap-users] sqlmap --update error

2011-06-06 Thread Fabio Portes
ortes@lpt-rj-015:~/Documents/Proof/Ágora/scan-1106$ sudo sqlmap --update sqlmap/0.6.4 coded by Bernardo Damele A. G. bernardo.dam...@gmail.com and Daniele Bellucci daniele.bellu...@gmail.com [*] starting at: 22:51:37 [22:51:37] [INFO] updating sqlmap [22:51:38]

[sqlmap-users] Struggling with an injection

2011-06-06 Thread Matt Gardenghi
Hello, I've been testing a non-production app from a black-box perspective. The only SQLi I've found is from the login page. I can bypass the login by dropping something like: 1' or 1=1-- into the password field. Unfortunately, sqlmap doesn't find this vulnerability. Well, that's not quite

Re: [sqlmap-users] sqlmap --update error

2011-06-06 Thread Miroslav Stampar
hi Fabio you are using fairly outdated version (0.6). please checkout the latest revision from our repository to have it updated (1.0-dev): svn checkout https://svn.sqlmap.org/sqlmap/trunk/sqlmap sqlmap-dev kr On Sun, Jun 5, 2011 at 3:53 AM, Fabio Portes fabio.por...@proof.com.br wrote:

Re: [sqlmap-users] Struggling with an injection

2011-06-06 Thread Miroslav Stampar
appendix: When I get in, I can't extract data. I can get verification that I'm a DBA, but little to nothing else and why I would get no data returned? for all of you who experience these symptoms here and there, there are two possibilities: a) there is something actually wrong with sqlmap and

[sqlmap-users] error

2011-06-06 Thread Kirill Morozov
[02:45:36] [CRITICAL] unhandled exception in sqlmap/1.0-dev (r4027), retry your run with the latest development version from the Subversion repository. If the exception persists, please send by e-mail to sqlmap-users@lists.sourceforge.net the following text and any information required to