Re: [sqlmap-users] Slow Crawl / Timeout?

[Doritos <dor...@ya...>]

I'm trying again.
It always stucks at .doc/docx files

Is there any way on command line that I can exclude some extensions / 
file names?

Thanks.



On 06-02-2014 13:12, Miroslav Stampar wrote:
> Hi.
>
> Lower the --crawl to something like --crawl=2. Also, you are most
> probably accessing some binary files. If you could provide problematic
> extensions we could exclude those (we are already excluding known binary
> extensions).
>
> Bye
>
>
> On Thu, Feb 6, 2014 at 1:09 PM, Doritos
> <dor...@ya...
> <mailto:dor...@ya...>> wrote:
>
>     I've been trying to use sqlmap to crawl our site, but it doesn't even
>     end the link search phase…
>
>     Looks like the site doesn't respond to some requests but the timeout
>     takes a long time to trigger the timeout…
>
>     Look at the timestamps.
>
>     The site is working. At least, I can access it via browser.
>
>
>     ./sqlmap.py -u http://www.site.com --level 3 --risk 5 -b --threads=4
>     --batch --random-agent --crawl=5
>
>     [09:04:15] [INFO] fetched random HTTP User-Agent header from file
>     '/opt/sqlmap-dev/txt/user-agents.txt': Mozilla/4.0 (compatible; MSIE
>     7.0; Windows NT 6.1; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET
>     CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
>     [09:04:15] [INFO] starting crawler
>     [09:04:15] [INFO] searching for links with depth 1
>     sqlmap got a 302 redirect to 'http://www.site:80/page.php'. Do you want
>     to follow? [Y/n] Y
>     [09:04:15] [INFO] searching for links with depth 2
>
>
>     [09:04:15] [INFO] starting 4 threads
>     [09:04:16] [INFO] 25/64 links visited (39%)
>     [09:04:16] [INFO] heuristics detected web page charset 'ISO-8859-5'
>     [09:04:19] [INFO] searching for links with depth 3
>
>
>     [09:04:19] [INFO] starting 4 threads
>     [09:04:20] [INFO] 31/602 links visited (5%)
>     [09:04:20] [INFO] heuristics detected web page charset 'IBM855'
>     [09:04:28] [INFO] 182/602 links visited (30%)
>     [09:04:28] [INFO] heuristics detected web page charset 'ISO-8859-2'
>     [09:04:34] [INFO] 317/602 links visited (53%)
>     [09:04:34] [INFO] heuristics detected web page charset 'UTF-8'
>     [09:04:49] [INFO] 484/602 links visited (80%)
>     [09:04:49] [INFO] heuristics detected web page charset 'ascii'
>     [09:04:51] [INFO] searching for links with depth 4
>
>
>     [09:04:51] [INFO] starting 4 threads
>     [09:12:46] [INFO] searching for links with depth 5
>
>
>     [09:12:46] [INFO] starting 4 threads
>     [09:38:56] [INFO] 527/4622 links visited (11%)
>     [09:38:56] [CRITICAL] unable to connect to the target URL or proxy.
>     sqlmap is going to retry the request
>     [09:38:56] [WARNING] if the problem persists please check that the
>     provided target URL is valid. In case that it is, you can try to rerun
>     with the switch '--random-agent' turned on and/or proxy switches
>     ('--ignore-proxy', '--proxy',...)
>     [10:01:44] [INFO] 1556/4622 links visited (34%)
>     [10:01:44] [INFO] heuristics detected web page charset 'windows-1251'
>     [10:01:45] [INFO] 1560/4622 links visited (34%)
>
>
>
>
>     What options can I try to sucessfully crawl and scan the site?
>
>
>     ------------------------------------------------------------------------------
>     Managing the Performance of Cloud-Based Applications
>     Take advantage of what the Cloud has to offer - Avoid Common Pitfalls.
>     Read the Whitepaper.
>     http://pubads.g.doubleclick.net/gampad/clk?id=121051231&iu=/4140/ostg.clktrk
>     _______________________________________________
>     sqlmap-users mailing list
>     sql...@li...
>     <mailto:sql...@li...>
>     https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>
>
>
> --
> Miroslav Stampar
> http://about.me/stamparm
>
>
> ------------------------------------------------------------------------------
> Managing the Performance of Cloud-Based Applications
> Take advantage of what the Cloud has to offer - Avoid Common Pitfalls.
> Read the Whitepaper.
> http://pubads.g.doubleclick.net/gampad/clk?id=121051231&iu=/4140/ostg.clktrk
>
>
>
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>