I recently downloaded the latest version of sqlmap and ran it against a
known database. I had previously run Scrawlr against the database and it
detected a "verbose" SQL Injection issue. It told me the database was MS
SQL and it enumerated the database names. I ran the sqlmap tool and it told
me there as a "LIKE" SQL Injection issue but couldn't detect the database
type. Am I doing something wrong? Unfortunately I don't know the exact
version of the MS SQL database to know if it's supported.
|