[sqlmap-users] (no subject)

2012-07-03 Thread Marco Mirandola
Hello sqlMap I thought of an improvement, because when you retrieve the databases (or tables or columns) does not enumerate the number of the item? == current sqlMap == [22:15:39] [INFO] the back-end DBMS is Microsoft SQL Ser

Re: [sqlmap-users] another bug....

2012-07-03 Thread Miroslav Stampar
Hi Pedrito. Thank you for your report. Apparently --page-rank was not working properly for some time because Google changed some logic behind it. With the latest commit (40fc648) everything should be up and running (no more crashes). Kind regards, Miroslav Stampar On Mon, Jul 2, 2012 at 11:36 P

Re: [sqlmap-users] ms sql database names' enum

2012-07-03 Thread Miroslav Stampar
Hi Henry. Find "SELECT DB_NAME(i++)" mechanism implemented with the latest commit (27fdccc) as a fallback in case that standard one fails. Kind regards, Miroslav Stampar On Tue, Jul 3, 2012 at 2:01 AM, Henry Waves wrote: > I've met dozens of practical cases when --dbs switch becomes useless >

Re: [sqlmap-users] ERROR SQLMAPge

2012-07-03 Thread Bernardo Damele A. G.
Hi Diego, Can you please rerun your command using sqlmap latest development version from Git[1]? If the bug persists, let us know. [1] https://github.com/sqlmapproject/sqlmap Cheers, Bernardo On 30 June 2012 07:20, diego system wrote: > Dear. > > I have a doubt time to do an audit the followi

Re: [sqlmap-users] ms sql database names' enum

2012-07-03 Thread Bernardo Damele A. G.
Hi Henry, On 3 July 2012 01:01, Henry Waves wrote: > I've met dozens of practical cases when --dbs switch becomes useless > with --dbms=mssql (can't say precisely, but maybe <2008 versions). The > only workaround proved itself useful is retrieval of db_name(i++) using > --sql-shell while other st

[sqlmap-users] ms sql database names' enum

2012-07-03 Thread Henry Waves
I've met dozens of practical cases when --dbs switch becomes useless with --dbms=mssql (can't say precisely, but maybe <2008 versions). The only workaround proved itself useful is retrieval of db_name(i++) using --sql-shell while other standart techniques were totally useless. Another reason i

[sqlmap-users] another bug....

2012-07-03 Thread Pedrito Perez
sqlmap/1.0-dev - automatic SQL injection and database takeover tool http://www.sqlmap.org [!] legal disclaimer: usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Authors

Re: [sqlmap-users] SQL Injection Pointer *

2012-07-03 Thread Miroslav Stampar
Hi Ulisses. It's on a TODO list along with custom header injections. We'll inform you when it will be available. Until then cheers :) Kind regards, Miroslav Stampar On Tue, Jul 3, 2012 at 6:42 AM, Ulisses Castro wrote: > Hello my friends, > > I'm looking for SQL injection pointer like in GET/P