Re: [sqlmap-users] feature request - suggest answer

[Bernardo D. A. G. <ber...@gm...>]

In the meantime, we have --predict-output switch. You can tweak
upfront the txt/common-outputs.txt for speed improvements.
Refer to the user's manual for details.

Bernardo


On 26 June 2012 09:36, Robin Wood <ro...@di...> wrote:
> On 26 June 2012 08:10, Miroslav Stampar <mir...@gm...> wrote:
>> Hi Robin.
>>
>> You are an xyz-th user with this same request ;)
>
> Thought I might be.
>
>> Problem is that Python doesn't have a getch() mechanism (there are some
>> dirty hacks, but are really dirty, OS dependent and unstable) making it
>> clumsy for this feature. You would have to enter something and press Enter
>> for it to register input with current raw_input(). But, the problem is also
>> that with current mechanism thread waiting for input would be 'unkillable'
>> by the program as python also doesn't have mechanism for that too :)
>
> And figured that was probably the case. I've tried to do similar
> things with multi-threaded apps and always had problems.
>
>> Anyway, I can only promise that we'll spend some time on this one in next
>> week and see if something is doable (at least the dirty way).
>
> It would be good but not worth compromising good clean code to get it in.
>
> Robin
>
>> Kind regards,
>> Miroslav Stampar
>>
>> On Jun 25, 2012 7:32 PM, "Robin Wood" <ro...@di...> wrote:
>>>
>>> I was retrieving table names at the time but I guess it would help in
>>> other situations as well.
>>>
>>> Robin
>>>
>>> On Jun 25, 2012 6:07 PM, "Miroslav Stampar" <mir...@gm...>
>>> wrote:
>>>>
>>>> You forgot to mention which technique?
>>>>
>>>> Kind regards,
>>>> Miroslav Stampar
>>>>
>>>> On Mon, Jun 25, 2012 at 6:03 PM, Robin Wood <ro...@di...> wrote:
>>>>>
>>>>> I've just been testing a site which has to have the --no-cast option
>>>>> to retrieve data, it works great but it is very slow. Because of this
>>>>> I'd quite often guessed the data it was pulling down way before the
>>>>> command had finished, especially with table names.
>>>>>
>>>>> It would be really good if you could in some way pause the script and
>>>>> suggest what you think the value would be then have it test that, if
>>>>> you are right it moves on, if not it continues from where it left off.
>>>>>
>>>>> I guess this would be quite hard to implement as it would have to work
>>>>> across multiple threads but would be a really cool feature if it could
>>>>> be added.
>>>>>
>>>>> Robin
>>>>>
>>>>>
>>>>> ------------------------------------------------------------------------------
>>>>> Live Security Virtual Conference
>>>>> Exclusive live event will cover all the ways today's security and
>>>>> threat landscape has changed and how IT managers can respond.
>>>>> Discussions
>>>>> will include endpoint security, mobile security and the latest in
>>>>> malware
>>>>> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
>>>>> _______________________________________________
>>>>> sqlmap-users mailing list
>>>>> sql...@li...
>>>>> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>>>>
>>>>
>>>>
>>>>
>>>> --
>>>> Miroslav Stampar
>>>> http://about.me/stamparm
>
> ------------------------------------------------------------------------------
> Live Security Virtual Conference
> Exclusive live event will cover all the ways today's security and
> threat landscape has changed and how IT managers can respond. Discussions
> will include endpoint security, mobile security and the latest in malware
> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users



-- 
Bernardo Damele A. G.

Homepage: http://about.me/inquis
E-mail / Jabber: bernardo.damele (at) gmail.com
Mobile: +447788962949 (UK 07788962949)