[sqlmap-users] error when load a large session file

hi, veryone:first thanks for the improvement the dev team have done. Again i met another problem today:i want to dump a large table into a csv format file using --dump, but the process is interrupted. so i restart the sqlmap to go on dumping process. but sqlmap exited with this error:sqlmap

[sqlmap-users] i think there may be a bug in "Oracle AND error-based - WHERE or HAVING clause (XMLType)" in sqlmap1.0-dev

when i test a injectable point, i found sqlmap0.9 can exploit while 1.0-dev(r4567) can not. 1.0-dev first send testf') AND 3339=(SELECT UPPER(XMLType(CHR(60)||CHR(58)||CHR(116)||CHR(105)||CHR(102)||CHR(58)||(SELECT (CASE WHEN (3339=3339) THEN 1 ELSE 0 END) FROM DUAL)||CHR(58)||CHR(120)||CHR(

Re: [sqlmap-users] how to search for column name in a specific database using '--search' ?

Kind regards,Miroslav Stampar On Fri, Dec 2, 2011 at 1:50 PM, Miroslav Stampar wrote: Hi. You are right. The lowest common denominator should be searched for with --search (in this case that's column). Going to modify it and report back. Kind regards, Miroslav Stampar 2011/12/2 CoeTs

[sqlmap-users] how to search for column name in a specific database using '--search' ?

hi all. i'm wondering if there's a way to search for column name in a specific database while using '--search' ? i've tried '-D authdb --search -C "%PASSWORD%"' but sqlmap think that i'm trying to search a database named "authdb" and a column named like 'password' . I am sure that the passwo