Re: [sqlmap-users] problems extracting table names
Brought to you by:
inquisb
From: Miroslav S. <mir...@gm...> - 2013-02-26 15:09:36
|
Hi. You can't expect sqlmap to compress a query if it needs to have database name, table name and a query statement inside. It's physically impossible. You are advised to check out manually what's going on. Kind regards, Miroslav Stampar On Tue, Feb 26, 2013 at 4:02 PM, Brian Milliron <Br...@ec...>wrote: > Miroslav, this may be the case. Since this is a common scenario for the > input field to be limited in number of characters, does Sqlmap have any > configuration options to overcome this obstacle? Perhaps using shorter > queries or out of band output? > > Hi. >> >> Maybe web server has a treshold value for a parameter value length. This >> looks like such case. >> >> Kind regards, >> Miroslav Stampar >> > > -- Miroslav Stampar http://about.me/stamparm |