Hi.
It works, but in later stage. You can see clearly in the following example
that only parameter goButton is being checked for SQLi.
$ python sqlmap.py -u "http://testphp.vulnweb.com/artists.php?artist=1";
--forms -p goButton
_
___ ___| |_ ___ ___ {1.0-dev-7d418af}
|_ -| . | |
If use "--forms" the parameter "-p" don't work
Best regards
M.M.
--
*[image: Descrizione: Descrizione: image002] Rispetta l'ambiente. Non
stampare questa mail se non è necessario*
*Questa e-mail è riservata compresi gli eventuali allegati. In caso di
ricezione per errore della presente e-mail
Hi Marco,
Please find it fixed with commit 3d66e2dfb1efe307ab097b03a18db35775c6058a.
Thanks for reporting.
Bernardo
On 12 July 2012 10:25, Marco Mirandola wrote:
> [11:23:50] [INFO] the back-end DBMS is MySQL
> web server operating system: Windows 2003
> web application technology: ASP.NET, Mi
[11:23:50] [INFO] the back-end DBMS is MySQL
web server operating system: Windows 2003
web application technology: ASP.NET, Microsoft IIS 6.0, ASP
back-end DBMS: MySQL 5.0
[11:23:50] [INFO] testing if current user is DBA
[11:23:50] [INFO] fetching current user
[11:23:50] [INFO] heuristics detected
Hi Marco.
Thank you for your report and find it fixed with the latest r4969 commit.
Kind regards,
Miroslav Stampar
On Wed, Apr 4, 2012 at 10:19 PM, Marco Mirandola wrote:
> [22:15:51] [INFO] resuming back-end DBMS 'mysql 5.0.11' from session file
> [22:15:51] [INFO] testing connection to the t
[22:15:51] [INFO] resuming back-end DBMS 'mysql 5.0.11' from session file
[22:15:51] [INFO] testing connection to the target url
sqlmap identified the following injection points with a total of 0 HTTP(s)
reque
sts:
---
Place: GET
Parameter: id
Type: boolean-based blind
Title: AND boolean-ba
Hi Zeze,
Perhaps because the session user does not have read privileges over
the table you're trying to dump? Try to run with --parse-errors to see
if the web application discloses DBMS error and -v 3. Run also with
--privileges -U CU to see the current user's privileges.
Bernardo
On 8 July 201
Hi Zeze,
This is fixed as of yesterday night.
Bernardo
On 8 July 2011 22:24, Zeze Canarinha wrote:
> Sirs,
>
> After the update of today... :|
>
> [CRITICAL] unhandled exception in sqlmap/1.0-dev (r4236), retry your
> run with the latest development version from the Subversion
> repository. If
New fresh install.
Appears to be everything ok... Or not... Data in not being shown.
Sqlinjection is ok, found database, tables and columns but no data is show.
Anyone having this problem?
BS
On 08/07/2011, Zeze Canarinha wrote:
> Sirs,
>
> After the update of today... :|
>
> [CRITICAL] unhan
Sirs,
After the update of today... :|
[CRITICAL] unhandled exception in sqlmap/1.0-dev (r4236), retry your
run with the latest development version from the Subversion
repository. If the exception persists, please send by e-mail to
sqlmap-users@lists.sourceforge.net the following text and any
info
10 matches
Mail list logo
