[sqlmap-users] R: Bug?
Brought to you by:
inquisb
From: Alessandro T. <ale...@lo...> - 2010-03-19 09:13:35
|
The bug is human, missing quotes. Il giorno 19/mar/2010 06:31, "Brandon" <bmu...@gm...> ha scritto: I am having a problem auditing the cat param. It appears it audits the param before it but totally ignores the params after it and shuts down. C:\sqlmap8>sqlmap -u vulnsite.org/ks.php?mode=cat&cat=26 -v 1 \ -p "mode,cat" sqlmap/0.8 - automatic SQL injection and database takeover tool http://sqlmap.sourceforge.net [*] starting at: 01:25:31 [01:25:31] [INFO] using 'C:\sqlmap8\output\vulnsite.org\session' as session file [01:25:31] [INFO] testing connection to the target url [01:25:33] [INFO] testing if the url is stable, wait a few seconds [01:25:39] [INFO] url is stable [01:25:39] [INFO] testing if User-Agent parameter 'User-Agent' is dynamic [01:25:41] [WARNING] User-Agent parameter 'User-Agent' is not dynamic [01:25:41] [INFO] testing if GET parameter 'mode' is dynamic [01:25:48] [WARNING] GET parameter 'mode' is not dynamic [*] shutting down at: 01:25:48 'cat' is not recognized as an internal or external command, operable program or batch file. I do the command just like in the manual and it still doesn't work ------------------------------------------------------------------------------ Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev _______________________________________________ sqlmap-users mailing list sql...@li... https://lists.sourceforge.net/lists/listinfo/sqlmap-users |