Re: [sqlmap-users] MySQL < 5.0.0

[Bernardo D. A. G. <ber...@gm...>]

Hi Freeman,

On Tue, Oct 21, 2008 at 07:17, Freeman Y. <fre...@la...> wrote:
> Am I still not able to enumerate tables in a DB even though i have the
> DB name in MySQL 5.0.0?

In a default configuration of MySQL >= 5.0 there is the
information_schema system database which sqlmap uses to enumerate DB,
tables, etc.

> I understand that I cannot get a list of DBs because of no
> information_schema, but even if I have a DB name I cannot enumerate the
> tables?
> If not, how else can I attack a 5.0.0 server?

If you read the documentation carefully, or even just run sqlmap with
-h option, you see that you can provide the DB name with -D option
together with the --tables option to enumerate its tables.

Cheers,
-- 
Bernardo Damele A. G.

E-mail / Jabber: bernardo.damele (at) gmail.com
Mobiles: +39-3493821385 (IT), +44-(0)7788962949 (UK)
PGP Key ID: 0x05F5A30F