Re: [sqlmap-users] sqlmap log file

[Miroslav S. <mir...@gm...>]

p.s. just in case, try to rerun with
A) --union-char=1
B) --text-only

p.p.s. if everytime you have a different number in "appears to be UNION
injectable with x columns" then the page "dynamicity" is screwing you up


On Fri, Jun 28, 2013 at 10:24 AM, Miroslav Stampar <
mir...@gm...> wrote:

> Hi Heidi.
>
> 1) appears != is. I am not sure if there is much explanation here to be
> done. To sqlmap something "appeared" to be injectable (because of our
> heuristic mechanisms) and in further MORE SERIOUS testing it concluded that
> "it is not injectable"
> 2) New info is being logged, but only data from "is injectable" cases
>
> Kind regards,
> Miroslav Stampar
>
>
> On Fri, Jun 28, 2013 at 7:35 AM, Heidi Petersen <hei...@gm...>wrote:
>
>> Hello! New to sqlmap and I'm running some long tests, but I have a few
>> questions.
>>
>> I'm seeing
>> [INFO] target URL appears to be UNION injectable with x columns
>> and then
>> [WARNING] GET parameter 'xxxxxxx' is not injectable
>>
>> there is nothing in the log file.
>>
>> So two questions:
>> 1)if it seemed injectable but then ran further tests,  why does it say
>> it's injectable and then that parameter isn't?
>> 2)I ran this with a lower level earlier in the day on the same target.  I
>> didn't replace the log file.  Is the new info being logged or am I losing
>> this info?
>>
>> Much appreciated,
>> Heidi
>>
>>
>>
>> ------------------------------------------------------------------------------
>> This SF.net email is sponsored by Windows:
>>
>> Build for Windows Store.
>>
>> http://p.sf.net/sfu/windows-dev2dev
>> _______________________________________________
>> sqlmap-users mailing list
>> sql...@li...
>> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>>
>>
>
>
> --
> Miroslav Stampar
> http://about.me/stamparm
>



-- 
Miroslav Stampar
http://about.me/stamparm