[sqlmap-users] Call for common table names
Brought to you by:
inquisb
From: Miroslav S. <mir...@gm...> - 2010-09-29 12:20:14
|
Hi. We are currently adding new feature into sqlmap for retrieving table names when database (information_) schema is missing and/or sqlmap is unable to extract table names via normal ways. Basic injection vector is: ...AND EXISTS(SELECT 1 FROM <table_name>)... So, if you have some knowledge to share please do. PHP, Joomla, Wordpress,... everything is more than welcome, except database system tables. We have those more than enough ;) Bye. -- Miroslav Stampar E-mail / Jabber: miroslav.stampar (at) gmail.com Mobile: +385921010204 (HR 0921010204) PGP Key ID: 0xB5397B1B Location: Zagreb, Croatia |