Re: [sqlmap-users] Call for common table names

[Andres R. <and...@gm...>]

Maybe if you search google's codesearch for "create table ..." inside. sql
files and automate the result extraction you would get something really cool
:)

Regards,
--
Andres Riancho

El sep 29, 2010 9:21 a.m., "Miroslav Stampar" <mir...@gm...>
escribió:

Hi.

We are currently adding new feature into sqlmap for retrieving table
names when database (information_) schema is missing and/or sqlmap is
unable to extract table names via normal ways.

Basic injection vector is: ...AND EXISTS(SELECT 1 FROM <table_name>)...

So, if you have some knowledge to share please do.

PHP, Joomla, Wordpress,... everything is more than welcome, except
database system tables. We have those more than enough ;)

Bye.

--
Miroslav Stampar

E-mail / Jabber: miroslav.stampar (at) gmail.com
Mobile: +385921010204 (HR 0921010204)
PGP Key ID: 0xB5397B1B
Location: Zagreb, Croatia

------------------------------------------------------------------------------
Start uncovering the many advantages of virtual appliances
and start using them to simplify application deployment and
accelerate your shift to cloud computing.
http://p.sf.net/sfu/novell-sfdev2dev
_______________________________________________
sqlmap-users mailing list
sql...@li...
https://lists.sourceforge.net/lists/listinfo/sqlmap-users