Re: [sqlmap-users] Slow Crawl / Timeout?

[Miroslav S. <mir...@gm...>]

Hi.

Please update to the latest revision [1] and try it again.

Kind regards,
Miroslav Stampar

[1]
https://github.com/sqlmapproject/sqlmap/commit/56d76e6bfdb29968af352e2bf960b5ab257daa9a


On Fri, Mar 14, 2014 at 9:18 PM, Doritos <dor...@ya...> wrote:

> I'm trying again.
> It always stucks at .doc/docx files
>
> Is there any way on command line that I can exclude some extensions /
> file names?
>
> Thanks.
>
>
>
> On 06-02-2014 13:12, Miroslav Stampar wrote:
> > Hi.
> >
> > Lower the --crawl to something like --crawl=2. Also, you are most
> > probably accessing some binary files. If you could provide problematic
> > extensions we could exclude those (we are already excluding known binary
> > extensions).
> >
> > Bye
> >
> >
> > On Thu, Feb 6, 2014 at 1:09 PM, Doritos
> > <dor...@ya...
> > <mailto:dor...@ya...>> wrote:
> >
> >     I've been trying to use sqlmap to crawl our site, but it doesn't even
> >     end the link search phase...
> >
> >     Looks like the site doesn't respond to some requests but the timeout
> >     takes a long time to trigger the timeout...
> >
> >     Look at the timestamps.
> >
> >     The site is working. At least, I can access it via browser.
> >
> >
> >     ./sqlmap.py -u http://www.site.com --level 3 --risk 5 -b --threads=4
> >     --batch --random-agent --crawl=5
> >
> >     [09:04:15] [INFO] fetched random HTTP User-Agent header from file
> >     '/opt/sqlmap-dev/txt/user-agents.txt': Mozilla/4.0 (compatible; MSIE
> >     7.0; Windows NT 6.1; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729;
> .NET
> >     CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
> >     [09:04:15] [INFO] starting crawler
> >     [09:04:15] [INFO] searching for links with depth 1
> >     sqlmap got a 302 redirect to 'http://www.site:80/page.php'. Do you
> want
> >     to follow? [Y/n] Y
> >     [09:04:15] [INFO] searching for links with depth 2
> >
> >
> >     [09:04:15] [INFO] starting 4 threads
> >     [09:04:16] [INFO] 25/64 links visited (39%)
> >     [09:04:16] [INFO] heuristics detected web page charset 'ISO-8859-5'
> >     [09:04:19] [INFO] searching for links with depth 3
> >
> >
> >     [09:04:19] [INFO] starting 4 threads
> >     [09:04:20] [INFO] 31/602 links visited (5%)
> >     [09:04:20] [INFO] heuristics detected web page charset 'IBM855'
> >     [09:04:28] [INFO] 182/602 links visited (30%)
> >     [09:04:28] [INFO] heuristics detected web page charset 'ISO-8859-2'
> >     [09:04:34] [INFO] 317/602 links visited (53%)
> >     [09:04:34] [INFO] heuristics detected web page charset 'UTF-8'
> >     [09:04:49] [INFO] 484/602 links visited (80%)
> >     [09:04:49] [INFO] heuristics detected web page charset 'ascii'
> >     [09:04:51] [INFO] searching for links with depth 4
> >
> >
> >     [09:04:51] [INFO] starting 4 threads
> >     [09:12:46] [INFO] searching for links with depth 5
> >
> >
> >     [09:12:46] [INFO] starting 4 threads
> >     [09:38:56] [INFO] 527/4622 links visited (11%)
> >     [09:38:56] [CRITICAL] unable to connect to the target URL or proxy.
> >     sqlmap is going to retry the request
> >     [09:38:56] [WARNING] if the problem persists please check that the
> >     provided target URL is valid. In case that it is, you can try to
> rerun
> >     with the switch '--random-agent' turned on and/or proxy switches
> >     ('--ignore-proxy', '--proxy',...)
> >     [10:01:44] [INFO] 1556/4622 links visited (34%)
> >     [10:01:44] [INFO] heuristics detected web page charset 'windows-1251'
> >     [10:01:45] [INFO] 1560/4622 links visited (34%)
> >
> >
> >
> >
> >     What options can I try to sucessfully crawl and scan the site?
> >
> >
> >
> ------------------------------------------------------------------------------
> >     Managing the Performance of Cloud-Based Applications
> >     Take advantage of what the Cloud has to offer - Avoid Common
> Pitfalls.
> >     Read the Whitepaper.
> >
> http://pubads.g.doubleclick.net/gampad/clk?id=121051231&iu=/4140/ostg.clktrk
> >     _______________________________________________
> >     sqlmap-users mailing list
> >     sql...@li...
> >     <mailto:sql...@li...>
> >     https://lists.sourceforge.net/lists/listinfo/sqlmap-users
> >
> >
> >
> >
> > --
> > Miroslav Stampar
> > http://about.me/stamparm
> >
> >
> >
> ------------------------------------------------------------------------------
> > Managing the Performance of Cloud-Based Applications
> > Take advantage of what the Cloud has to offer - Avoid Common Pitfalls.
> > Read the Whitepaper.
> >
> http://pubads.g.doubleclick.net/gampad/clk?id=121051231&iu=/4140/ostg.clktrk
> >
> >
> >
> > _______________________________________________
> > sqlmap-users mailing list
> > sql...@li...
> > https://lists.sourceforge.net/lists/listinfo/sqlmap-users
> >
>
>
>
> ------------------------------------------------------------------------------
> Learn Graph Databases - Download FREE O'Reilly Book
> "Graph Databases" is the definitive new guide to graph databases and their
> applications. Written by three acclaimed leaders in the field,
> this first edition is now available. Download your free book today!
> http://p.sf.net/sfu/13534_NeoTech
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>



-- 
Miroslav Stampar
http://about.me/stamparm