Re: [sqlmap-users] SQLMap Stager Uploader

[Miroslav S. <mir...@gm...>]

hi yonny.

few questions.

do you have write permissions "for all" at the "target" directory (for
example: /var/www/Multidae)? at which directory does Multidae reside
at your debian machine? what have you entered as "target directory"
when sqlmap asked you?

as you can guess, most occuring problem with "stager" are the write
permissions for the web servers process.

KR

On Wed, Jan 19, 2011 at 8:06 PM, yonny mutai <yo...@go...> wrote:
> Hi,
>    Wonderful tool.... Seems like the stager uploader has ceased to work...
> anyone to help with this please..
>   To add more info that might help in troubleshooting :
>     DB : mysql  Ver 14.14 Distrib 5.1.41, for debian-linux-gnu (i486) using
> readline 6.1
>     App: The vulnerable Multidae app
>     Command Used: ./sqlmap.py  --level 5 --risk 3 --parse-errors   --os-pwn
>      --time-sec 10  -a txt/user-agents.txt   --text-only  --threads 1
> --timeout 39  -u "http://127.0.0.1/mutillidae/index.php?page=login.php"
> --method "POST" --data "user_name=txv&password=txv&Submit_button=Submit"
>
> Rgds
> ------------------------------------------------------------------------------
> Protect Your Site and Customers from Malware Attacks
> Learn about various malware tactics and how to avoid them. Understand
> malware threats, the impact they can have on your business, and how you
> can protect your company and customers by using code signing.
> http://p.sf.net/sfu/oracle-sfdevnl
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>



-- 
Miroslav Stampar

E-mail / Jabber: miroslav.stampar (at) gmail.com
Mobile: +385921010204 (HR 0921010204)
PGP Key ID: 0xB5397B1B
Location: Zagreb, Croatia