[sqlmap-users] UNION injectable -> sqlmap stops to work
Brought to you by:
inquisb
From: -insane- <in...@gm...> - 2011-02-26 04:16:16
|
Hey, i've been using sqlmap and proxychains together for months and it allways worked fine for me. Today i updated to the latest revision (3369) and i tried to find and use UNION injections. In the past it was no problem, but with the latest revision i got one. After sqlmap reports the following: "target url appears to be UNION injectable with 22 columns" it connects to the target one last time and afterwards it stops to work. I tried some different targets and i also tried to use sqlmap without proxychains, but in all cases i got the same result. Is it a bug or am i making a mistake? The end of my output: [03:12:04] [INFO] testing 'MySQL UNION query (NULL) - 21 to 22 columns' |D-chain|-<>-xxx.xxx.xxx.xxx:8080-<><>-xxx.xxx.xxx.xxx:80-<><>-OK |D-chain|-<>-xxx.xxx.xxx.xxx:8080-<><>-xxx.xxx.xxx.xxx:80-<><>-OK |D-chain|-<>-xxx.xxx.xxx.xxx:8080-<><>-xxx.xxx.xxx.xxx:80-<><>-OK |D-chain|-<>-xxx.xxx.xxx.xxx:8080-<><>-xxx.xxx.xxx.xxx:80-<><>-OK |D-chain|-<>-xxx.xxx.xxx.xxx:8080-<><>-xxx.xxx.xxx.xxx:80-<><>-OK |D-chain|-<>-xxx.xxx.xxx.xxx:8080-<><>-xxx.xxx.xxx.xxx:80-<><>-OK [03:12:43] [INFO] target url appears to be UNION injectable with 22 columns |D-chain|-<>-xxx.xxx.xxx.xxx:8080-<><>-xxx.xxx.xxx.xxx:80-<><>-OK ^C[04:07:55] [WARNING] Ctrl+C detected in detection phase My very simple cmd: proxychains sqlmap -u "http://www.xxx.com/index.php?id=1&type=0" --dbms mysql -p id --union-cols 21-22 Content of /usr/bin/sqlmap: #!/bin/sh python2.6 /path2sqlmap/sqlmap-dev/sqlmap.py $@ |