sqlmap-users

[sqlmap-users] strange bheviour with MySQL on Ubuntu

[jebe8668 <jeb...@gm...>]

Hi all,

testing sqlmap-0.64 on an Ubuntu box, with:

apache 2 2.2.4-3ubuntu0.2
mysql 5.0.45-Debian_1ubuntu3.4-log
php5.2.3-1ubuntu6.5

exploitable php:

$query = "SELECT c2 FROM cms WHERE c1=".$_GET['id'];

I can do union inj by hand, but sqlmap returns:

GET parameter 'id' is unescaped numeric injectable with 0 parenthesis

but dies on error:
[ERROR] sqlmap was not able to fingerprint the back-end database
management system. Support for this DBMS will be implemented if you ask,
just drop us an email

if I add option --dbms MySQL I get

[12:19:06] [INFO] testing MySQL
[12:19:06] [WARNING] the back-end DMBS is not MySQL
[12:19:06] [ERROR] sqlmap was not able to fingerprint the back-end
database management system. Support for this DBMS will be implemented if
you ask, just drop us an email

what's going on ?

Note that I have succesfully used sqlmap against an oracle10 dbms with
php5 in front...

cheers

Re: [sqlmap-users] strange bheviour with MySQL on Ubuntu

[Bernardo D. A. G. <ber...@gm...>]

Hi,

On Wed, Apr 1, 2009 at 11:19, jebe8668 <jeb...@gm...> wrote:
> ...
> [ERROR] sqlmap was not able to fingerprint the back-end database
> management system. Support for this DBMS will be implemented if you ask,
> just drop us an email
> ...

This happen because, for some reasons, it looks like the dbms user is
not allowed to call CONNECTION_ID() option, which I use in sqlmap to
fingerprint MySQL at first try.
I've the very same test environment, among others, and it works smoothly.

> if I add option --dbms MySQL I get

As a work-around run sqlmap with --dbms "MySQL 5": it won't perform
any fingerprint request.

Regards,
-- 
Bernardo Damele A. G.

E-mail / Jabber: bernardo.damele (at) gmail.com
Mobiles: +447788962949 (UK), +393493821385 (IT)
PGP Key ID: 0x05F5A30F