Re: [sqlmap-users] Back-end DBMS charset encoding

[mitchell <mit...@tu...>]

Hi Miroslav,

In say 80% of the cases I delt with Bulgarian sites, the data in the
database used the same encoding as the encoding announced on the webpage,
usually CP-1251. The rest use UTF.

# mitchell
On 17 Jan 2011 16:52, "Miroslav Stampar" <mir...@gm...> wrote:
> Hi all.
>
> I have a general question to all those pentesters that are retrieving data
> from sites with "funny" charset encodings (...russian, chinese...).
>
> What's should be the general "consensus" for data retrieval:
>
> A) assume that the backend DBMS uses the "utf8" charset encoding
> or
> B) treat data retrieved with the same encoding as used in the page
> or
> C) find out the proper collation used and use that one? (i am not a fan of
> this one :)
> or
> D) don't care (some people tend to use mixed collations which is quite
> romantic)
>
> Also, I would like to ask you all to try out the latest revision with
cases
> that could be problematic and report impressions.
>
> Kind regards