Re: [sqlmap-users] Can sqlmay work with microsoft sql server 2008

[Miroslav S. <mir...@gm...>]

Hi Bob.

Yes, sqlmap works with MsSQL 2008.

Could you please post traffic file for that run (-t traffic.txt
--current-user --fresh-queries)?

Also, if you could send url that could be good too.

Kind regards

On Sat, May 26, 2012 at 4:38 AM, Bob <sto...@qq...> wrote:

> I meet the problem with sqlmap working with sql server 2008 .  the details
> if below . sometimes can retrieval db,and user ,but sometimes is show below
> .
>
> Place: GET
> Parameter: nclassid
>     Type: boolean-based blind
>     Title: OR boolean-based blind - WHERE or HAVING clause
>     Payload: classid=4&nclassid=-2854 OR (2950=2950)
> ---
>
> [10:31:11] [INFO] the back-end DBMS is Microsoft SQL Server
> web server operating system: Windows 2003
> web application technology: ASP.NET, Microsoft IIS 6.0, ASP
> back-end DBMS: Microsoft SQL Server 2008
> [10:31:11] [INFO] fetching current user
> [10:31:12] [WARNING] running in a single-thread mode. Please consider
> usage of option '--threads' for faster data retrieval
> sqlmap got a 302 redirect to 'http://www.xxxxx:80/index.asp'. Do you want
> to follow? [Y/n] n
>
> [10:33:03] [INFO] heuristics detected web page charset 'ascii'
>
> current user:    None
>
>
>
>
> ------------------------------------------------------------------------------
> Live Security Virtual Conference
> Exclusive live event will cover all the ways today's security and
> threat landscape has changed and how IT managers can respond. Discussions
> will include endpoint security, mobile security and the latest in malware
> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>


-- 
Miroslav Stampar
http://about.me/stamparm