Re: [sqlmap-users] How does sqlmap detect the OS?

[Miroslav S. <mir...@gm...>]

Are error messages turned on on the target server?

Bye
On Jan 12, 2014 1:19 PM, <du...@al...> wrote:

> Well I checked the HTTP headers on the server and it only says
> "Microsoft/IIS6.0".
> And I can't figure out how to via the SQL injection determine the OS.
>
> Anymore information would be greatly appreciated.
> No rush though, I'm mostly curious on how it does it :)
> Maybe some sort of example?
>
> Regards
>
> On 2014-01-12 12:55, Miroslav Stampar wrote:
>
>> Hi.
>>
>> There are multiple vectors sqlmap uses. For example, it usually uses
>> DBMS banner if available and HTTP header values (e.g. Server). Do you
>> need more specific info?
>>
>> Bye
>> On Jan 11, 2014 10:17 PM, <du...@al...> wrote:
>>
>>  I tried sqlmap on a site running on Windows Server 2003, and it
>>> could
>>> detect the OS.
>>> How does sqlmap go about doing that?
>>>
>>> Regards, Jimmy
>>>
>>>
>>>  ------------------------------------------------------------
>> ------------------
>>
>>> CenturyLink Cloud: The Leader in Enterprise Cloud Services.
>>> Learn Why More Businesses Are Choosing CenturyLink Cloud For
>>> Critical Workloads, Development Environments & Everything In
>>> Between.
>>> Get a Quote or Start a Free Trial Today.
>>>
>>>  http://pubads.g.doubleclick.net/gampad/clk?id=119420431&
>> iu=/4140/ostg.clktrk
>>
>>> [1]
>>> _______________________________________________
>>> sqlmap-users mailing list
>>> sql...@li...
>>> https://lists.sourceforge.net/lists/listinfo/sqlmap-users [2]
>>>
>>
>>
>> Links:
>> ------
>> [1]
>> http://pubads.g.doubleclick.net/gampad/clk?id=119420431&
>> amp;iu=/4140/ostg.clktrk<http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk>
>> [2] https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>>
>