Re: [sqlmap-users] sqlmap not working without icmp

[Bernardo D. A. G. <ber...@gm...>]

Hi Goce,

On 24 April 2011 04:11, Goce Trenchev <amo...@gm...> wrote:
> I've been doing some experiments with sqlmap and I found out that when i
> turn off the icmp so there is no ping reply from the target server, sqlmap
> is not working and it says connection timed out. It would be great if there
> is an option to treat the host online and don't ping it.

sqlmap only uses ICMP packets when you takeover the back-end DBMS
server and chooses to do it over ICMP tunnel with --os-pwn switch. Is
this the case? If so, run sqlmap as root on Linux (needed in order to
use Impacket and generate arbitrary ICMP echo responses) and, if the
back-end DBMS runs on Windows and the OS/firewall allows ICMP echo
requests to arbitrary targets (read, the sqlmap attacker Linux box)
then the out-of-band will work.
If this is not the case, please do a packet dump of your sqlmap run,
run it with -t traffic.log and -v 3 and send us the full output and
files in order to debug it further, please.

Regards,
Bernardo


-- 
Bernardo Damele A. G.

E-mail / Jabber: bernardo.damele (at) gmail.com
Mobile: +447788962949 (UK 07788962949)
PGP Key ID: 0x05F5A30F