Re: [sqlmap-users] Why do i get multiple entries for Unique-IDs while dumping?

[Miroslav S. <mir...@gm...>]

Hi.

This looks strange, especially when considering used options/switches and
the SQL type.

Do you see "duplications" in console output while dumping entries? Do you
get this kind of behavior in non-SQLITE format(s) too? Have you noticed
duplicate error messages in vulnerable web application?

Kind regards,
Miroslav Stampar


On Mon, Aug 25, 2014 at 11:07 AM, Michael Bachmann <mba...@gm...>
wrote:

> Hi
>
> I try to dump a db. my command is as follows:
>
> sqlmap.py -c sqlmap.conf -D TheDb -T TheTable --dump --pivot-column=ID -X
> SomeNotNeededColumns -o --dump-format SQLITE
>
> injection method is:
>
> Type: error-based
> Title: Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause
>
> if i do a count on this table i get:
>
> about 40k entries
>
> but when i check the dumped sqlite-db i got about 40k entries, but every
> id is present at least 3 times. so if i do a distinct on id, i get about
> 10k entries. why is this?
>
> sometimes the target throws the db-error "user can't login", i guess cause
> of to high usage (probably a shared solution). is this causing this
> behavior?
>
> Kind regards
> Michael
>
>
>
>
>
>
> ------------------------------------------------------------------------------
> Slashdot TV.
> Video for Nerds.  Stuff that matters.
> http://tv.slashdot.org/
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>


-- 
Miroslav Stampar
http://about.me/stamparm