Re: [sqlmap-users] feature request - suggest answer

2012-06-26 Thread Robin Wood
On 26 June 2012 10:48, Bernardo Damele A. G. wrote: > In the meantime, we have --predict-output switch. You can tweak > upfront the txt/common-outputs.txt for speed improvements. > Refer to the user's manual for details. Unfortunately that doesn't help when it is in the middle of a run and you sp

Re: [sqlmap-users] feature request - suggest answer

2012-06-26 Thread Bernardo Damele A. G.
In the meantime, we have --predict-output switch. You can tweak upfront the txt/common-outputs.txt for speed improvements. Refer to the user's manual for details. Bernardo On 26 June 2012 09:36, Robin Wood wrote: > On 26 June 2012 08:10, Miroslav Stampar wrote: >> Hi Robin. >> >> You are an xy

Re: [sqlmap-users] feature request - suggest answer

2012-06-26 Thread Robin Wood
On 26 June 2012 08:10, Miroslav Stampar wrote: > Hi Robin. > > You are an xyz-th user with this same request ;) Thought I might be. > Problem is that Python doesn't have a getch() mechanism (there are some > dirty hacks, but are really dirty, OS dependent and unstable) making it > clumsy for thi

Re: [sqlmap-users] feature request - suggest answer

2012-06-26 Thread Miroslav Stampar
Hi Robin. You are an xyz-th user with this same request ;) Problem is that Python doesn't have a getch() mechanism (there are some dirty hacks, but are really dirty, OS dependent and unstable) making it clumsy for this feature. You would have to enter something and press Enter for it to register

Re: [sqlmap-users] feature request - suggest answer

2012-06-25 Thread Brandon Perry
I technique is the mechanism by which the SQL injection works, be it UNION, Blind, Stacked, or what have you. The technique alters how you may do what you are asking for. On Mon, Jun 25, 2012 at 12:32 PM, Robin Wood wrote: > I was retrieving table names at the time but I guess it would help in ot

Re: [sqlmap-users] feature request - suggest answer

2012-06-25 Thread Robin Wood
I was retrieving table names at the time but I guess it would help in other situations as well. Robin On Jun 25, 2012 6:07 PM, "Miroslav Stampar" wrote: > You forgot to mention which technique? > > Kind regards, > Miroslav Stampar > > On Mon, Jun 25, 2012 at 6:03 PM, Robin Wood wrote: > >> I've

Re: [sqlmap-users] feature request - suggest answer

2012-06-25 Thread Miroslav Stampar
You forgot to mention which technique? Kind regards, Miroslav Stampar On Mon, Jun 25, 2012 at 6:03 PM, Robin Wood wrote: > I've just been testing a site which has to have the --no-cast option > to retrieve data, it works great but it is very slow. Because of this > I'd quite often guessed the d

[sqlmap-users] feature request - suggest answer

2012-06-25 Thread Robin Wood
I've just been testing a site which has to have the --no-cast option to retrieve data, it works great but it is very slow. Because of this I'd quite often guessed the data it was pulling down way before the command had finished, especially with table names. It would be really good if you could in