[sqlmap-users] filtering of sqlmap by it's default User-Agent HTTP header
Brought to you by:
inquisb
From: Miroslav S. <mir...@gm...> - 2011-05-03 08:10:40
|
hi all. if you are encountering simptoms like this: [10:01:17] [INFO] testing connection to the target url [10:01:47] [CRITICAL] connection timed out to the target url or proxy, sqlmap is going to retry the request [10:02:18] [CRITICAL] connection timed out to the target url or proxy, sqlmap is going to retry the request ... - while you are able to connect to the target url via browser, please use --random-agent to get it solved thing is that probably either sqlmap is blacklisted by some IDSes around or the web server itself just refuses requests with "uncommon" user agents (to prevent spidering and stuff). conclusion, use --random-agent in those strange "connection timed out" cases. kr -- Miroslav Stampar E-mail: miroslav.stampar (at) gmail.com PGP Key ID: 0xB5397B1B |