[sqlmap-users] Data retrieval over DNS in SQL injection attacks

2012-06-14 Thread Bernardo Damele A. G.
We have recently implemented data retrieval over DNS in sqlmap. This data exfiltration technique adds up to the six existing techniques already implemented: boolean-based blind, time-based blind, full UNION, partial UNION, error-based and stacked (nested) queries. It is supported on Oracle (running

Re: [sqlmap-users] cant detect column types

2012-06-14 Thread Miroslav Stampar
Hi Adi. Could you please send a console output for that case? Kind regards, Miroslav Stampar On Wed, Jun 13, 2012 at 11:14 AM, Adi Mutu wrote: > Hello, > > I'm using sqlmap in a pentest on a mssql 2000, and it only detects one > column type from a table of 21 columns. > The detected type is nv

Re: [sqlmap-users] Feature Request - Select Specific Test

2012-06-14 Thread Miroslav Stampar
Find it unhidden with the latest r5123. Kind regards On Thu, Jun 14, 2012 at 3:51 PM, Miroslav Stampar < miroslav.stam...@gmail.com> wrote: > Ok. Cool :) > > We'll most probably unhide that switch these days as it's a quite usable > one > > Kind regards > > > On Thu, Jun 14, 2012 at 3:49 PM, Yor

Re: [sqlmap-users] Feature Request - Select Specific Test

2012-06-14 Thread Miroslav Stampar
Ok. Cool :) We'll most probably unhide that switch these days as it's a quite usable one Kind regards On Thu, Jun 14, 2012 at 3:49 PM, Yori Kvitchko < y...@counterhackchallenges.com> wrote: > Miroslav, > > It looks like --test-filter is what I need. I don't need a custom suffix > and prefix, I

Re: [sqlmap-users] Feature Request - Select Specific Test

2012-06-14 Thread Yori Kvitchko
Miroslav, It looks like --test-filter is what I need. I don't need a custom suffix and prefix, I just need to force sqlmap to use a specific test it already has in its collection of payloads.xml and only that test. If I can use test-filter to select exactly the test I need and sqlmap will onl

[sqlmap-users] sqlmap version: 1.0-dev (r5112)

2012-06-14 Thread jing feng
sqlmap version: 1.0-dev (r5112) Python version: 2.6.6 Operating system: posix Command line: sqlmap.py --url * -D