Re: [sqlmap-users] Re-retrieving wrong data?

[Miroslav S. <mir...@gm...>]

hi

On Wed, Feb 13, 2013 at 9:31 AM, Владимир Мартьянов <vil...@gm...>wrote:

> Hello!
> Sometimes I have a problems: when I'm retrieving data I have errors in
> database/table/column name. Here is an example:
> [12:08:52] [INFO] retrieved: foo_cli
> [12:10:48] [ERROR] invalid character detected. retrying..
> [12:10:48] [WARNING] increasing time delay to 7 seconds
> ents
> [12:13:02] [ERROR] unable to properly validate last character value ('!')..
> !
> ...skipped...
> [12:17:48] [INFO] fetching columns for table 'foo_clients!' in database
> 'bar'
> [12:17:48] [INFO] retrieved: 0
> [12:17:56] [ERROR] unable to retrieve the number of columns for table
> 'foo_clients!' in database 'bar'
> [12:17:56] [WARNING] unable to retrieve column names for table
> '`foo_clients!`' in database 'bar'
>
> foo_clients! is a wrong name, I think, and it's the reason to not retrieve
> it's columns.
>
yes. this is common in time-based injections where network lags are
foobaring data

Maybe it'll be a good idea to add some command-line option to re-retrieve
> wrong data if it's possible? Or maybe there is some way to do it in current
> version?
>
you can always use --fresh-queries in following runs (when you don't want
to reuse data from session file)

bye

>
>
> ------------------------------------------------------------------------------
> Free Next-Gen Firewall Hardware Offer
> Buy your Sophos next-gen firewall before the end March 2013
> and get the hardware for free! Learn more.
> http://p.sf.net/sfu/sophos-d2d-feb
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>


-- 
Miroslav Stampar
http://about.me/stamparm