[sqlmap-users] search password LIKE small bug
Brought to you by:
inquisb
From: Jacco v. T. <jac...@gm...> - 2013-11-01 07:53:46
|
Hi all, When using the * --search 'password'* option and selecting the LIKE option: * * *do you want sqlmap to consider provided column(s):* *[1] as LIKE column names (default)* *[2] as exact column names* *> 1* When searching a database for a column with the text 'password' it uses LIKE. when searching the table it doesn't use LIKE : it uses = and so it doesn't return a column. *[15:15:49] [INFO] fetching number of tables containing columns like 'password' in database 'master'* *[15:15:49] [INFO] retrieved: 4* *[15:15:50] [INFO] retrieving the length of query output* *[15:15:50] [INFO] retrieved: 10* *[15:16:06] [INFO] retrieved: sql_logins * *[15:16:06] [INFO] fetching columns 'password' for table 'sql_logins' in database 'master'* *[15:16:06] [INFO] retrieved: 0* this one should be easy to fix :) |