Re: [sqlmap-users] [Resend] Webcast question

[Bernardo D. A. G. <ber...@gm...>]

Hi Kevin,

On 9 April 2011 17:00, Kevin Johnson <kjo...@se...> wrote:
> *** I was subscribed under a different email ***
>
> Hi all,
>
> First let me say thanks for SQLMap.  It is a great tool and I use it constantly!

Welcome!

> The reason for this email is that I am doing a webcast next week and I will be
> talking about SQLMap.  I thought it would make sense to ask if there was
> anything specific you would want to see covered?  I am focusing on
> exploitation in the talk.

You can either list the major features or you could be more precise
and detail the niche ones.

Personally, I would kick off with a brief overview (actively developed
since 2006, open source - GPLv2, wide enthusiastic community, very
good users' feedback, lovely developers ;)) then a three-points core
features (see from homepage) and real world scenarios where it really
helped. You can grab some ideas from the user's manual - it is updated
as of 0.9 stable released two days ago.

Niche features that you could talk about, if you feel confident, are
--predict-output, --tamper, --common-*, --udf-inject and since you're
going to focus on exploitation I would certainly recommend --os-pwn.
These are all documented in the user's manual, some have examples in
there too.

Good luck!

-- 
Bernardo Damele A. G.

E-mail / Jabber: bernardo.damele (at) gmail.com
Mobile: +447788962949 (UK 07788962949)
PGP Key ID: 0x05F5A30F