Re: [sqlmap-users] Reporting a Problem

[Miroslav S. <mir...@gm...>]

Hi.

You've probably come to the problem of dealing with unicode symbols in 
sql injection. Currently (in blind injection) we use bisection algorithm 
with settings for ASCII coding, but we could research how to use it with 
Unicode too. As this is not a one day job (we have to find some 
universal solution, adapt it and test it for usage on all supported 
DBMSes) we'll put it on a queue.

Kind regards,
Miroslav Stampar

On 29.3.2010 16:55, Smith Andy wrote:
> Hello,
> first I just want to say that your sqlmap tool is the best there is 
> online for SQLi.
> however I've been facing a problem that I wasn't able to solve
> when dumping a column contents, sometimes, the contents are in Japanes 
> or Arabic ...etc (not in english)
> in which case sqlmap doesn't get the contents properly (I get 
> gibberish symbols)
> even in the session file, the column contents doesn't get written 
> correctly.
> I was hoping you can help me with this problem.
>
> Thanks a lot,
> Matt Lun.
>
> ------------------------------------------------------------------------
> Hotmail has tools for the New Busy. Search, chat and e-mail from your 
> inbox. Learn More. 
> <http://www.windowslive.com/campaign/thenewbusy?ocid=PID27925::T:WLMTAGL:ON:WL:en-US:WM_HMP:032010_1> 
>
>
>
> ------------------------------------------------------------------------------
> Download Intel&#174; Parallel Studio Eval
> Try the new software tools for yourself. Speed compiling, find bugs
> proactively, and fine-tune applications for parallel performance.
> See why Intel Parallel Studio got high marks during beta.
> http://p.sf.net/sfu/intel-sw-dev
>
>
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>    


-- 
Miroslav Stampar

E-mail / Jabber: miroslav.stampar (at) gmail.com
Mobile: +385921010204 (HR 0921010204)
PGP Key ID: 0xB5397B1B