Re: [sqlmap-users] Providing multiple dbms

[Miroslav S. <mir...@gm...>]

Hi.

Problem with this approach is that only payloads specific for those
payloads will be used, skipping all generic ones.

To further address the issue suggested option is:
--test-filter "MySQL|PostgreSQL|Oracle|Generic"

Nevertheless, in vast majority of cases, default sqlmap run and/or
--level=5 --risk=3 is more recommended (at least in your case) than
--test-filter.

Kind regards,
Miroslav Stampar


On Wed, May 29, 2013 at 5:40 PM, Bernardo Damele A. G. <
ber...@gm...> wrote:

> Sebastian,
>
> Launch with --test-filter "MySQL|PostgreSQL|Oracle". sqlmap will only
> try related payloads.
>
> Bernardo
>
>
> On 29 May 2013 16:29, Miroslav Stampar <mir...@gm...> wrote:
> > Hi Sebastian.
> >
> > No, it's not possible. The question is why do you want to provide any
> DBMS
> > in that case? Why don't you just skip the option --dbms and don't use it.
> > sqlmap will then do tests against all possible DBMSes the best it can.
> >
> > Kind regards,
> > Miroslav Stampar
> >
> >
> > On Wed, May 29, 2013 at 5:22 PM, Sebastian Nerz <seb...@sy...>
> > wrote:
> >>
> >> Hi,
> >>
> >> is it possible to provide multiple dbms? In some cases, one does know
> >> that it might be e.g. MySQL or PostgreSQL or Oracle.
> >>
> >> all the best,
> >>
> >> Sebastian Nerz
> >> --
> >> Sebastian Nerz
> >> Dipl.-Inform.
> >> IT-Security Consultant
> >>
> >> mailto:seb...@sy...
> >> ___________________________________________________________
> >>
> >> SySS GmbH
> >> Wohlboldstraße 8
> >> 72072 Tübingen
> >> Germany
> >> Voice: +49 7071 407856-31
> >> Fax:   +49 7071 407856-19
> >> WWW:   http://www.syss.de
> >>
> >> PGP FP: 79DC 2CEC D18D F92F CBB4 AF09 D12D 26A4 9180 FDB2
> >>
> >> Geschaeftsfuehrer Sebastian Schreiber
> >> Registergericht: Amtsgericht Stuttgart / HRB 382420
> >> Steuernummer: 86118 / 55809
> >>
> >>
> >>
> >>
> >>
> ------------------------------------------------------------------------------
> >> Introducing AppDynamics Lite, a free troubleshooting tool for Java/.NET
> >> Get 100% visibility into your production application - at no cost.
> >> Code-level diagnostics for performance bottlenecks with <2% overhead
> >> Download for free and get started troubleshooting in minutes.
> >> http://p.sf.net/sfu/appdyn_d2d_ap1
> >> _______________________________________________
> >> sqlmap-users mailing list
> >> sql...@li...
> >> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
> >>
> >
> >
> >
> > --
> > Miroslav Stampar
> > http://about.me/stamparm
> >
> >
> ------------------------------------------------------------------------------
> > Introducing AppDynamics Lite, a free troubleshooting tool for Java/.NET
> > Get 100% visibility into your production application - at no cost.
> > Code-level diagnostics for performance bottlenecks with <2% overhead
> > Download for free and get started troubleshooting in minutes.
> > http://p.sf.net/sfu/appdyn_d2d_ap1
> > _______________________________________________
> > sqlmap-users mailing list
> > sql...@li...
> > https://lists.sourceforge.net/lists/listinfo/sqlmap-users
> >
>
>
>
> --
> Bernardo Damele A. G.
>
> E-mail / Jabber: bernardo.damele (at) gmail.com
> Mobile: +447788962949 (UK 07788962949)
>



-- 
Miroslav Stampar
http://about.me/stamparm