Re: [sqlmap-users] Unable to upload stager

[Miroslav S. <mir...@gm...>]

hi Muto.

obviously it's very hard to answer generic questions like these :)

to get into the core there are 5 thing that would be very helpul to
futher investigate this case:

1) which backend OS are you using for hosting PHP/MySQL web server
2) which techniques are recognized as exploitable (blind, timed,....)
3) what's the version of backend MySQL (5.5?)
4) it would be great if you could post the resulting traffic.txt after
usage of: -t traffic.txt --fresh-queries
5) what are the simptoms (warnings, criticals,...) after running those
--os-... switches

kr

On Thu, May 5, 2011 at 8:58 PM, Muto kirov <mut...@gm...> wrote:
> I have set up a vulnerable php site with MySQL and used sqlmap against it to
> test it. All working, except for the --os-shell, --os-pwn and the other os
> system access commands. The problem is that sqlmap cannot upload the stager,
> even when i specify the correct document root. Why is that happening ?
>
> ------------------------------------------------------------------------------
> WhatsUp Gold - Download Free Network Management Software
> The most intuitive, comprehensive, and cost-effective network
> management toolset available today.  Delivers lowest initial
> acquisition cost and overall TCO of any competing solution.
> http://p.sf.net/sfu/whatsupgold-sd
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>



-- 
Miroslav Stampar

E-mail: miroslav.stampar (at) gmail.com
PGP Key ID: 0xB5397B1B