Re: [sqlmap-users] forcing sqlmap to detect a vulnerability

[Patrick W. <pa...@au...>]

Hey,

You can force the DB option with --dbms "Microsoft SQL 2000" or 2005 (from memory).



-----Original Message-----
From: Adi Mutu <adi...@ya...>
Sent: Tuesday, 22 December 2009 6:22 PM
To: sql...@li...
Subject: [sqlmap-users] forcing sqlmap to detect a vulnerability


Hello,

I have found manually an inband vulnerability which uses ms-sql as a db server, however sqlmap is unable to detect it. I've tried creating a log file (similar to the one created with -s option by sqlmap), I have filled all the data I thought necessary hand, so that sqlmap can read it from there......however this doesn't work also and sqlmap goes blind....Any idea why? Or can you show me the correct syntax of this log file?

Thanks,
ps: of course making sqlmap detect the vuln. in the first place, would be perfect;)....