Re: [sqlmap-users] Not getting any sensitive data from database

[Miroslav S. <mir...@gm...>]

Hi Marcell.

There is no such capability (and IMO it would be ugly to put a
--banner-md5:), although it makes sense what you are trying to do).

Nevertheless, you can go to xml/queries.xml and change (line 23):

<banner query="VERSION()"/>
to
<banner query="MD5(VERSION())"/>

Kind regards,
Miroslav Stampar


On Sat, May 18, 2013 at 7:36 AM, Marcell Fodor <fod...@gm...>wrote:

> Heya,
>
> Is it possible to get the version as md5 hash? I mean a simple
> md5(@@version). The whole point it not pulling any sensitive data from
> database. The question comes up when database owner only wants confirmation
> of found injection point by md5 hash.
>
> like --banner-md5
>
>
> M
>
>
>
>
> ------------------------------------------------------------------------------
> AlienVault Unified Security Management (USM) platform delivers complete
> security visibility with the essential security capabilities. Easily and
> efficiently configure, manage, and operate all of your security controls
> from a single console and one unified framework. Download a free trial.
> http://p.sf.net/sfu/alienvault_d2d
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>


-- 
Miroslav Stampar
http://about.me/stamparm