Re: [sqlmap-users] sqlmap log file

[Miroslav S. <mir...@gm...>]

Hi Heidi.

1) appears != is. I am not sure if there is much explanation here to be
done. To sqlmap something "appeared" to be injectable (because of our
heuristic mechanisms) and in further MORE SERIOUS testing it concluded that
"it is not injectable"
2) New info is being logged, but only data from "is injectable" cases

Kind regards,
Miroslav Stampar


On Fri, Jun 28, 2013 at 7:35 AM, Heidi Petersen <hei...@gm...>wrote:

> Hello! New to sqlmap and I'm running some long tests, but I have a few
> questions.
>
> I'm seeing
> [INFO] target URL appears to be UNION injectable with x columns
> and then
> [WARNING] GET parameter 'xxxxxxx' is not injectable
>
> there is nothing in the log file.
>
> So two questions:
> 1)if it seemed injectable but then ran further tests,  why does it say
> it's injectable and then that parameter isn't?
> 2)I ran this with a lower level earlier in the day on the same target.  I
> didn't replace the log file.  Is the new info being logged or am I losing
> this info?
>
> Much appreciated,
> Heidi
>
>
>
> ------------------------------------------------------------------------------
> This SF.net email is sponsored by Windows:
>
> Build for Windows Store.
>
> http://p.sf.net/sfu/windows-dev2dev
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>


-- 
Miroslav Stampar
http://about.me/stamparm