Re: [sqlmap-users] information_schema not avaible

[Bernardo D. A. G. <ber...@gm...>]

Hi ehmo,

On Sun, Aug 16, 2009 at 01:45, ehmo <dis...@gm...> wrote:
> Hey guys,
> i'm very curious about this thing.
>
> If back-end DB is MySQL < 5.0, SQLmap will always stop table lookup
> with this error.
> [ERROR] information_schema not available, back-end DBMS is MySQL < 5.0
>
> but this MySQL version doesn't have information_schema and i'm
> curious, why it will not to try guess all tables. Or exist any way in
> SQLmap how to get list of tables, if informatiom_schema is not
> avaible?

information_schema is not available by design in any MySQL < 5.0,
sqlmap is then not able to rely on it to enumerate information like
databases, table names, columns, etc.
sqlmap does not have an option to brute-force table names. Although,
you can provide database name (-D), table name (-T) and column name(s)
(-C) to use to dump entries from.

> Also, you should to add option for injecting referer, because
> sometimes is sqli there and sqlmpa doesn't know this method.

This will come in the long run.

Cheers,
-- 
Bernardo Damele A. G.

E-mail / Jabber: bernardo.damele (at) gmail.com
Mobile: +447788962949 (UK 07788962949)
PGP Key ID: 0x05F5A30F