Re: [sqlmap-users] in case backend db mysql 5.x
Brought to you by:
inquisb
From: Miroslav S. <mir...@gm...> - 2010-04-28 08:19:17
|
Hi. In matter of fact it does use information schema. Go to sqlmap/xml/queries.xml, try to find <tables> tags and you'll see for yourself. Slow nature of your problem could be related (probably) to blind injection approach. Kind regards. On Wed, Apr 28, 2010 at 2:12 AM, Pagera <pag...@gm...> wrote: > hello and hope u fine > > im wondering in case that the backend db is mysql 5.x > why SQLmap doesnt get the db info from information schema immediately ? > it take too long to retrieve the table names and columns > > while comparing some sql injection > it took me about 2 minutes to get all info by querying the information > schema > while sqlmap spend about an hour to et the same info > > as u know all the db info exist in the information schema > so is it possible to apply this to sqlmap > to retrieve the table and column names from information schema immediately ? > and u know how much mysql 5.x used all over the web > > > regards > > > ------------------------------------------------------------------------------ > _______________________________________________ > sqlmap-users mailing list > sql...@li... > https://lists.sourceforge.net/lists/listinfo/sqlmap-users > -- Miroslav Stampar E-mail / Jabber: miroslav.stampar (at) gmail.com Mobile: +385921010204 (HR 0921010204) PGP Key ID: 0xB5397B1B |