Thread: [sqlmap-users] Force thread even if time based blind?

Brought to you by: inquisb

sqlmap-users

[sqlmap-users] Force thread even if time based blind?

From: Tobias G. <tgl...@se...> - 2015-09-25 17:14:03

Hi List,

does anybobdy know a way to disable the "multi-threading is considered
unsafe in time-based data retrieval. Going to switch it off automatically"
thing? I don't care about some wrong characters, I need speed :) So maybe
there is a "force" option I missed. Thanks in advance.

Tobias

Re: [sqlmap-users] Force thread even if time based blind?

From: Brandon P. <bpe...@gm...> - 2015-09-25 17:16:19

There is not as far as I know, but there is no reason why you can't open up
multiple instances of sqlmap dumping specifics parts of the database you
want.

On Fri, Sep 25, 2015 at 12:01 PM, Tobias Glemser <tgl...@se...>
wrote:

> Hi List,
>
> does anybobdy know a way to disable the "multi-threading is considered
> unsafe in time-based data retrieval. Going to switch it off automatically"
> thing? I don't care about some wrong characters, I need speed :) So maybe
> there is a "force" option I missed. Thanks in advance.
>
> Tobias
>
>
> ------------------------------------------------------------------------------
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>



-- 
http://volatile-minds.blogspot.com -- blog
http://www.volatileminds.net -- website

Re: [sqlmap-users] Force thread even if time based blind?

From: Miroslav S. <mir...@gm...> - 2015-09-25 17:17:00

I majority of cases you'll get totally wrong results. Also, you are risking
to DoS the server (especially in case of OR time-based and heavy queries).
There is no force option nor there will be.

Bye
On Sep 25, 2015 7:14 PM, "Tobias Glemser" <tgl...@se...> wrote:

> Hi List,
>
> does anybobdy know a way to disable the "multi-threading is considered
> unsafe in time-based data retrieval. Going to switch it off automatically"
> thing? I don't care about some wrong characters, I need speed :) So maybe
> there is a "force" option I missed. Thanks in advance.
>
> Tobias
>
>
> ------------------------------------------------------------------------------
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>

Re: [sqlmap-users] Force thread even if time based blind?

From: Tobias G. <tgl...@se...> - 2015-09-25 19:07:42

Hi Miroslav,

thanks for your fast reply (as always).

> I majority of cases you'll get totally wrong results.
In the past it worked quite nice with lots of targets.

> Also, you are risking to DoS
> the server (especially in case of OR time-based and heavy queries).
Right.

> There is no force option nor there will be.
Alright, I'll move to my /lib/techniques/blind/inference.py :)

Cheers

Tobias


> -----Ursprüngliche Nachricht-----
> Von: Miroslav Stampar [mailto:mir...@gm...]
> Gesendet: Freitag, 25. September 2015 19:17
> An: Tobias Glemser
> Cc: SqlMap List
> Betreff: Re: [sqlmap-users] Force thread even if time based blind? [ Z1
> UNGESICHERT ]
>
> I majority of cases you'll get totally wrong results. Also, you are 
> risking to DoS
> the server (especially in case of OR time-based and heavy queries). There 
> is
> no force option nor there will be.
>
> Bye
>
> On Sep 25, 2015 7:14 PM, "Tobias Glemser" <tgl...@se...> wrote:
>
>
> 	Hi List,
>
> 	does anybobdy know a way to disable the "multi-threading is
> considered
> 	unsafe in time-based data retrieval. Going to switch it off
> automatically"
> 	thing? I don't care about some wrong characters, I need speed :) So
> maybe
> 	there is a "force" option I missed. Thanks in advance.
>
> 	Tobias
>
> 	------------------------------------------------------------------------------
> 	_______________________________________________
> 	sqlmap-users mailing list
> 	sql...@li...
> 	https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>

Re: [sqlmap-users] Force thread even if time based blind?

From: Miroslav S. <mir...@gm...> - 2015-09-25 20:10:02

I'll make hidden switch and let you know.

Bye
On Sep 25, 2015 9:07 PM, "Tobias Glemser" <tgl...@se...> wrote:

> Hi Miroslav,
>
> thanks for your fast reply (as always).
>
> > I majority of cases you'll get totally wrong results.
> In the past it worked quite nice with lots of targets.
>
> > Also, you are risking to DoS
> > the server (especially in case of OR time-based and heavy queries).
> Right.
>
> > There is no force option nor there will be.
> Alright, I'll move to my /lib/techniques/blind/inference.py :)
>
> Cheers
>
> Tobias
>
>
> > -----Ursprüngliche Nachricht-----
> > Von: Miroslav Stampar [mailto:mir...@gm...]
> > Gesendet: Freitag, 25. September 2015 19:17
> > An: Tobias Glemser
> > Cc: SqlMap List
> > Betreff: Re: [sqlmap-users] Force thread even if time based blind? [ Z1
> > UNGESICHERT ]
> >
> > I majority of cases you'll get totally wrong results. Also, you are
> > risking to DoS
> > the server (especially in case of OR time-based and heavy queries). There
> > is
> > no force option nor there will be.
> >
> > Bye
> >
> > On Sep 25, 2015 7:14 PM, "Tobias Glemser" <tgl...@se...> wrote:
> >
> >
> >       Hi List,
> >
> >       does anybobdy know a way to disable the "multi-threading is
> > considered
> >       unsafe in time-based data retrieval. Going to switch it off
> > automatically"
> >       thing? I don't care about some wrong characters, I need speed :) So
> > maybe
> >       there is a "force" option I missed. Thanks in advance.
> >
> >       Tobias
> >
> >
>  ------------------------------------------------------------------------------
> >       _______________________________________________
> >       sqlmap-users mailing list
> >       sql...@li...
> >       https://lists.sourceforge.net/lists/listinfo/sqlmap-users
> >
>
>

Re: [sqlmap-users] Force thread even if time based blind?

From: Miroslav S. <mir...@gm...> - 2015-09-25 22:10:51

Implemented (hidden) switch --force-threads with the latest commit.

Example sqlmap call:

python sqlmap.py -u "http://testphp.vulnweb.com/artists.php?artist=1"
--technique=T --threads=4 --batch --banner *--force-threads*

Bye

On Fri, Sep 25, 2015 at 10:09 PM, Miroslav Stampar <
mir...@gm...> wrote:

> I'll make hidden switch and let you know.
>
> Bye
> On Sep 25, 2015 9:07 PM, "Tobias Glemser" <tgl...@se...> wrote:
>
>> Hi Miroslav,
>>
>> thanks for your fast reply (as always).
>>
>> > I majority of cases you'll get totally wrong results.
>> In the past it worked quite nice with lots of targets.
>>
>> > Also, you are risking to DoS
>> > the server (especially in case of OR time-based and heavy queries).
>> Right.
>>
>> > There is no force option nor there will be.
>> Alright, I'll move to my /lib/techniques/blind/inference.py :)
>>
>> Cheers
>>
>> Tobias
>>
>>
>> > -----Ursprüngliche Nachricht-----
>> > Von: Miroslav Stampar [mailto:mir...@gm...]
>> > Gesendet: Freitag, 25. September 2015 19:17
>> > An: Tobias Glemser
>> > Cc: SqlMap List
>> > Betreff: Re: [sqlmap-users] Force thread even if time based blind? [ Z1
>> > UNGESICHERT ]
>> >
>> > I majority of cases you'll get totally wrong results. Also, you are
>> > risking to DoS
>> > the server (especially in case of OR time-based and heavy queries).
>> There
>> > is
>> > no force option nor there will be.
>> >
>> > Bye
>> >
>> > On Sep 25, 2015 7:14 PM, "Tobias Glemser" <tgl...@se...> wrote:
>> >
>> >
>> >       Hi List,
>> >
>> >       does anybobdy know a way to disable the "multi-threading is
>> > considered
>> >       unsafe in time-based data retrieval. Going to switch it off
>> > automatically"
>> >       thing? I don't care about some wrong characters, I need speed :)
>> So
>> > maybe
>> >       there is a "force" option I missed. Thanks in advance.
>> >
>> >       Tobias
>> >
>> >
>>  ------------------------------------------------------------------------------
>> >       _______________________________________________
>> >       sqlmap-users mailing list
>> >       sql...@li...
>> >       https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>> >
>>
>>


-- 
Miroslav Stampar
http://about.me/stamparm

Re: [sqlmap-users] Force thread even if time based blind?

From: Tobias G. <tgl...@se...> - 2015-09-26 09:00:39

Hi Miroslav,

awesome, thanks so much!

Best Regards

Tobias

> -----Ursprüngliche Nachricht-----
> Von: Miroslav Stampar [mailto:mir...@gm...]
> Gesendet: Samstag, 26. September 2015 00:11
> An: Tobias Glemser
> Cc: SqlMap List
> Betreff: Re: AW: [sqlmap-users] Force thread even if time based blind? [ 
> Z1
> UNGESICHERT ]
>
> Implemented (hidden) switch --force-threads with the latest commit.
>
> Example sqlmap call:
>
> python sqlmap.py -u "http://testphp.vulnweb.com/artists.php?artist=1" --
> technique=T --threads=4 --batch --banner --force-threads
>
>
> Bye
>
> On Fri, Sep 25, 2015 at 10:09 PM, Miroslav Stampar
> <mir...@gm...> wrote:
>
>
> 	I'll make hidden switch and let you know.
>
> 	Bye
>
> 	On Sep 25, 2015 9:07 PM, "Tobias Glemser" <tgl...@se...>
> wrote:
>
>
> 		Hi Miroslav,
>
> 		thanks for your fast reply (as always).
>
> 		> I majority of cases you'll get totally wrong results.
> 		In the past it worked quite nice with lots of targets.
>
> 		> Also, you are risking to DoS
> 		> the server (especially in case of OR time-based and heavy
> queries).
> 		Right.
>
> 		> There is no force option nor there will be.
> 		Alright, I'll move to my /lib/techniques/blind/inference.py :)
>
> 		Cheers
>
> 		Tobias
>
>
> 		> -----Ursprüngliche Nachricht-----
> 		> Von: Miroslav Stampar
> [mailto:mir...@gm...]
> 		> Gesendet: Freitag, 25. September 2015 19:17
> 		> An: Tobias Glemser
> 		> Cc: SqlMap List
> 		> Betreff: Re: [sqlmap-users] Force thread even if time based
> blind? [ Z1
> 		> UNGESICHERT ]
> 		>
> 		> I majority of cases you'll get totally wrong results. Also, you
> are
> 		> risking to DoS
> 		> the server (especially in case of OR time-based and heavy
> queries). There
> 		> is
> 		> no force option nor there will be.
> 		>
> 		> Bye
> 		>
> 		> On Sep 25, 2015 7:14 PM, "Tobias Glemser"
> <tgl...@se...> wrote:
> 		>
> 		>
> 		>       Hi List,
> 		>
> 		>       does anybobdy know a way to disable the "multi-
> threading is
> 		> considered
> 		>       unsafe in time-based data retrieval. Going to switch it off
> 		> automatically"
> 		>       thing? I don't care about some wrong characters, I need
> speed :) So
> 		> maybe
> 		>       there is a "force" option I missed. Thanks in advance.
> 		>
> 		>       Tobias
> 		>
> 
>     ---------------------------------------------------------------------
> ---------
> 		>
> _______________________________________________
> 		>       sqlmap-users mailing list
> 		>       sql...@li...
> 		>       https://lists.sourceforge.net/lists/listinfo/sqlmap-users
> 		>
>
>
>
>
>
>
> --
>
> Miroslav Stampar
> http://about.me/stamparm