[sqlmap-users] Possible bug in enumeration of results

[Alone S. <alo...@gm...>]

Hi all,

First at all, sorry for my English and congrats for this great tool xD

ok, I'm auditing a web application with iis5 and SQL Server 2000 and in all
the enumeration techniques (--dbs, --users ... ) the number of entities
retrieved is greater than the real retrieved data, resulting in duplicated
entries.

------ example
$ ./sqlmap.py -u "****************************************************"
--dbs

....... skipped

[11:48:33] [INFO] the back-end DBMS is Microsoft SQL Server
web server operating system: Windows 2000
web application technology: PHP 5.2.5, Microsoft IIS 5.0
back-end DBMS: Microsoft SQL Server 2000
[11:48:33] [INFO] fetching database names
[11:48:33] [INFO] fetching number of databases
[11:48:33] [INFO] retrieved: 12
[11:48:43] [INFO] retrieved: master
[11:49:32] [INFO] retrieved: tempdb
[11:50:27] [INFO] retrieved: model
[11:51:14] [INFO] retrieved: msdb
[11:51:54] [INFO] retrieved: ***********
[11:53:34] [INFO] retrieved: ***********
[11:54:23] [INFO] retrieved: ***********
[11:55:02] [INFO] retrieved: ***********
[11:55:52] [INFO] retrieved: master
[11:56:41] [INFO] retrieved: model
[11:57:34] [INFO] retrieved: msdb
[11:58:07] [INFO] retrieved: ***********
available databases [12]:
[*] ***********
[*] ***********
[*] ***********
[*] ***********
[*] master
[*] model
[*] msdb
[*] tempdb
-------- end of example

Regards