Re: [sqlmap-users] [Critical] not authorized

2014-04-30 Thread Miroslav Stampar
Hi. Please update to the latest revision and retry it again. Bye On Wed, Apr 30, 2014 at 4:19 PM, Travis Altman wrote: > Miroslav, > > Thanks for the update and help, the --ignore-401 worked perfectly. > Another question, sqlmap does not appear to be able to parse the XML that > I have as dat

Re: [sqlmap-users] error while uploading shell

2014-04-30 Thread Miroslav Stampar
With sqlmap you can try --file-write. If that doesn't work Google for other methods. Bye On Apr 30, 2014 11:53 AM, "Sabin Ranjit" wrote: > how can i do it in MySQL then? I have current-user and password retrieved. > > thanks. > > > On Tue, Apr 29, 2014 at 9:13 PM, Miroslav Stampar < > miroslav.s

Re: [sqlmap-users] unable to fench password with sqlmap

2014-04-30 Thread Miroslav Stampar
--sql-shell is only an interface in sqlmap to run custom SQL queries. Bye On Apr 30, 2014 11:51 AM, "Sabin Ranjit" wrote: > but how come i can prompt to sql-shell? > > thanks > > > On Tue, Apr 29, 2014 at 9:10 PM, Miroslav Stampar < > miroslav.stam...@gmail.com> wrote: > >> As the error suggests

Re: [sqlmap-users] [Critical] not authorized

2014-04-30 Thread Travis Altman
Miroslav, Thanks for the update and help, the --ignore-401 worked perfectly. Another question, sqlmap does not appear to be able to parse the XML that I have as data in the post request, can sqlmap parse XML as input today? Below is the output of me running it and it tries to chop out the xml ta

Re: [sqlmap-users] error while uploading shell

2014-04-30 Thread Sabin Ranjit
how can i do it in MySQL then? I have current-user and password retrieved. thanks. On Tue, Apr 29, 2014 at 9:13 PM, Miroslav Stampar < miroslav.stam...@gmail.com> wrote: > As the error suggests, you are limited to only regular queries. In your > case, you are using INTO. That requires stacked

Re: [sqlmap-users] unable to fench password with sqlmap

2014-04-30 Thread Sabin Ranjit
but how come i can prompt to sql-shell? thanks On Tue, Apr 29, 2014 at 9:10 PM, Miroslav Stampar < miroslav.stam...@gmail.com> wrote: > As the error suggests, no sufficient privileges. Common mitigation. > > Bye > On Apr 29, 2014 11:19 AM, "Sabin Ranjit" wrote: > >> hi, >> I have sql injection