sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2024-11-25 11:03:47 +03:00
Code Issues Packages Projects Releases Wiki Activity

Updated FAQ (markdown)

Miroslav Stampar 2019-06-03 09:41:31 +02:00
parent 4bd1725757
commit c0de36df40
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
FAQ.md

@ -95,7 +95,7 @@ We already support the major and some minor databases. We do have plans to exten
Please use that other tool. Please use that other tool.
## Which tamper script to use to bypass a (WAF/IDS/IPS) protection? ## Which tamper script to use to bypass a (WAF/IPS) protection?
Don't use tamper scripts if you are not able to manually assess the target. Tamper scripts are used only in cases when the penetration tester knows how to bypass the protection in the first place (most probably after hours of request/response inspection). Blind usage and combination of numerous tamper scripts without the comprehension is always a bad idea. Don't use tamper scripts if you are not able to manually assess the target. Tamper scripts are used only in cases when the penetration tester knows how to bypass the protection in the first place (most probably after hours of request/response inspection). Blind usage and combination of numerous tamper scripts without the comprehension is always a bad idea.
@ -158,7 +158,7 @@ Question(s):
## I am getting `[CRITICAL] connection timed` while I am able to browse the site normally? ## I am getting `[CRITICAL] connection timed` while I am able to browse the site normally?
There are few IDSes that filter out all sqlmap requests based on its default `User-Agent` HTTP header (e.g. `User-agent: sqlmap/1.0-dev`). To prevent this There are few WAF/IPS-es that filter out all sqlmap requests based on its default `User-Agent` HTTP header (e.g. `User-agent: sqlmap/1.0-dev`). To prevent this
kind of situations you are advised to use switch `--random-agent`. kind of situations you are advised to use switch `--random-agent`.
If you are getting those kind of messages for all targets then you most probably need to properly set up your proxy settings (switches `--proxy` If you are getting those kind of messages for all targets then you most probably need to properly set up your proxy settings (switches `--proxy`
and/or `--ignore-proxy`). and/or `--ignore-proxy`).