Hi.
In matter of fact it does use information schema. Go to
sqlmap/xml/queries.xml, try to find <tables> tags and you'll see for
yourself. Slow nature of your problem could be related (probably) to
blind injection approach.
Kind regards.
On Wed, Apr 28, 2010 at 2:12 AM, Pagera <pag...@gm...> wrote:
> hello and hope u fine
>
> im wondering in case that the backend db is mysql 5.x
> why SQLmap doesnt get the db info from information schema immediately ?
> it take too long to retrieve the table names and columns
>
> while comparing some sql injection
> it took me about 2 minutes to get all info by querying the information
> schema
> while sqlmap spend about an hour to et the same info
>
> as u know all the db info exist in the information schema
> so is it possible to apply this to sqlmap
> to retrieve the table and column names from information schema immediately ?
> and u know how much mysql 5.x used all over the web
>
>
> regards
>
>
> ------------------------------------------------------------------------------
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
--
Miroslav Stampar
E-mail / Jabber: miroslav.stampar (at) gmail.com
Mobile: +385921010204 (HR 0921010204)
PGP Key ID: 0xB5397B1B
|
