Re: [sqlmap-users] Strict Web Server Perms - Retrieval Issues

[Christopher D. <chr...@ch...>]

Jonathan,
Sorry for the late reply. I actually waited over night and retried. With (
--threads=2 ) instead of --threads=5 and it started working fine. Slow !
But All good. Maybe the interface was tortured or something.

Thanks !
Chris.

On Sat, Aug 15, 2015 at 12:05 AM, Johnathon Doe <hoo...@gm...>
wrote:

> if you use a simple sleep command within the --eval argument does that
> help any better then the builtin --delay function? set it maybe to 'import
> time, random; time.sleep(random.randrange(1,8))' to cause a random sleep on
> each request before processing. Haven't tested, just another idea worth
> trying. Also have you tried working with the --second-order option if the
> results are indeed being output on a second page/request?
>
> On Fri, Aug 14, 2015 at 9:47 AM, Christopher Downs <
> chr...@ch...> wrote:
>
>> Bummer doesn't work. I'm getting the same errors on 5 and 10 sec delay
>> inervals.
>> [14:45:11] [ERROR] unable to retrieve the table names for any database
>>
>> The other idea I was thinking about ( I'm not sure if it's even possible
>> ) is like a reverse tamper. We're the data retrieval is set to some other
>> response technique the app server would respond too ?
>>
>> Much appreciated !
>> Chris.
>>
>> On Fri, Aug 14, 2015 at 9:38 AM, Miroslav Stampar <
>> mir...@gm...> wrote:
>>
>>> Try option --delay
>>>
>>> Bye
>>> On Aug 14, 2015 4:30 PM, "Christopher Downs" <
>>> chr...@ch...> wrote:
>>>
>>>> Yeah Exactly. Im wondering if you can do that maybe the strict servers
>>>> would not just barf out on retrieval ? I've seen others with this issue and
>>>> it's seams pretty obvious. But I'm trying to see if there is anything else
>>>> I should try before I know it's not worth it.
>>>>
>>>> Thanks !
>>>> Chris.
>>>>
>>>> On Fri, Aug 14, 2015 at 9:18 AM, Miroslav Stampar <
>>>> mir...@gm...> wrote:
>>>>
>>>>> Throttle like? You mean like slower data retrieval?
>>>>>
>>>>> Bye
>>>>> On Aug 14, 2015 4:11 PM, "Christopher Downs" <
>>>>> chr...@ch...> wrote:
>>>>>
>>>>>> Good Morning Gents,
>>>>>> Is there a way to throttle or manipulate data retrieval through app
>>>>>> servers that are puking with strict permissions or am I just out of luck ?
>>>>>> I can see this happening in v6 debug mode. I thought I may email the list
>>>>>> and ask.
>>>>>>
>>>>>> Maybe you guys have some thoughts ?
>>>>>>
>>>>>> sql-shell> select name from Customer LIMIT 10;
>>>>>> [13:16:51] [INFO] fetching SQL SELECT statement query output: 'select
>>>>>> name from Customer LIMIT 10'
>>>>>> [13:16:51] [INFO] retrieving the length of query output
>>>>>> [13:16:51] [INFO] retrieved:
>>>>>> [13:16:52] [INFO] retrieved:
>>>>>> [13:16:52] [INFO] retrieving the length of query output
>>>>>> ------ snip for brevity ------
>>>>>> [13:16:54] [INFO] retrieved:
>>>>>> [13:16:54] [INFO] retrieving the length of query output
>>>>>> [13:16:55] [INFO] retrieved:
>>>>>> [13:16:55] [INFO] retrieved:
>>>>>> select name from Customer LIMIT 10; [10]:
>>>>>> [*]
>>>>>> [*]
>>>>>> [*]
>>>>>> [*]
>>>>>> [*]
>>>>>> [*]
>>>>>> [*]
>>>>>> [*]
>>>>>> [*]
>>>>>> [*]
>>>>>>
>>>>>> sql-shell> x
>>>>>>
>>>>>> As a note I am running last nights latest git repo release.
>>>>>> 1.0-dev-2c1cde0
>>>>>>
>>>>>> Thanks in Advance.
>>>>>> Chris.
>>>>>>
>>>>>>
>>>>>> ------------------------------------------------------------------------------
>>>>>>
>>>>>> _______________________________________________
>>>>>> sqlmap-users mailing list
>>>>>> sql...@li...
>>>>>> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>>>>>>
>>>>>>
>>>>
>>>>
>>
>>
>>
>>
>> ------------------------------------------------------------------------------
>>
>> _______________________________________________
>> sqlmap-users mailing list
>> sql...@li...
>> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>>
>>
>