[sqlmap-users] Fwd: sqlmap stop after testing User-Agent

[Erik N. <da...@gm...>]

You'll need to enter GET and/or POST values like

sqlmap-0.7 $ python sqlmap.py -u
http://invest.infomirmo.fr/webdesigner/connexion.php -v 1
--data="user=user&password=password"

OR

sqlmap-0.7 $ python sqlmap.py
--url="http://invest.infomirmo.fr/webdesigner/connexion.php?user=user&data=data"

---------- Forwarded message ----------
From: Adrien LEMAIRE <lem...@gm...>
Date: Wed, Sep 16, 2009 at 11:35 AM
Subject: [sqlmap-users] sqlmap stop after testing User-Agent
To: sql...@li...


Hi everyone,

I'm new to this list mail :)
I want to learn how to use sqlmap. I've installed sqlmap on my ubuntu,
and tried to launch it :

>  sqlmap-0.7 $ python sqlmap.py -u http://invest.infomirmo.fr/webdesigner/connexion.php -v 1
>
>     sqlmap/0.7
>     by Bernardo Damele A. G. <ber...@gm...>
>
> [*] starting at: 11:13:17
>
> [11:13:17] [INFO] testing connection to the target url
> [11:13:17] [INFO] testing if the url is stable, wait a few seconds
> [11:13:19] [INFO] url is stable
> [11:13:19] [INFO] testing if User-Agent parameter 'User-Agent' is dynamic
> [11:13:19] [WARNING] User-Agent parameter 'User-Agent' is not dynamic
>
> [*] shutting down at: 11:13:19

This website is a french site for hacking challenges, and I wanted to
try if sqlmap couldn't bruteforce the login/password.
But I thought that sqlmap will also test for GET, POST and Cookie
before shutting down if nothing is dynamic.

Reference to user manual :
>
> Let's say that you are auditing a web application and found a web page that accepts dynamic user-provided values on GET or POST parameters or HTTP Cookie values or HTTP User-Agent header value.


Did I misunderstood something ? Do you think I forgot to configure
something in sqlmap config files ? (I havn't modified any file yet).

Thank you a lot for your answer, and sorry for disturb..
Best regards,
Adrien Lemaire

------------------------------------------------------------------------------
Come build with us! The BlackBerry&reg; Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9&#45;12, 2009. Register now&#33;
http://p.sf.net/sfu/devconf
_______________________________________________
sqlmap-users mailing list
sql...@li...
https://lists.sourceforge.net/lists/listinfo/sqlmap-users