[sqlmap-users] sqlmap stop after testing User-Agent
Brought to you by:
inquisb
From: Adrien L. <lem...@gm...> - 2009-09-16 09:35:39
|
Hi everyone, I'm new to this list mail :) I want to learn how to use sqlmap. I've installed sqlmap on my ubuntu, and tried to launch it : sqlmap-0.7 $ python sqlmap.py -u > http://invest.infomirmo.fr/webdesigner/connexion.php -v 1 > > sqlmap/0.7 > by Bernardo Damele A. G. <ber...@gm...> > > [*] starting at: 11:13:17 > > [11:13:17] [INFO] testing connection to the target url > [11:13:17] [INFO] testing if the url is stable, wait a few seconds > [11:13:19] [INFO] url is stable > [11:13:19] [INFO] testing if User-Agent parameter 'User-Agent' is dynamic > [11:13:19] [WARNING] User-Agent parameter 'User-Agent' is not dynamic > > [*] shutting down at: 11:13:19 > This website is a french site for hacking challenges, and I wanted to try if sqlmap couldn't bruteforce the login/password. But I thought that sqlmap will also test for GET, POST and Cookie before shutting down if nothing is dynamic. Reference to user manual : > Let's say that you are auditing a web application and found a web page that > accepts dynamic user-provided values on GET or POST parameters or HTTP > Cookie values or HTTP User-Agent header value. > Did I misunderstood something ? Do you think I forgot to configure something in sqlmap config files ? (I havn't modified any file yet). Thank you a lot for your answer, and sorry for disturb.. Best regards, Adrien Lemaire |