sqlmap does not implement itself any call to xp_getfiledetails.
If you provide it within the --sql-shell, try to increase the
verbosity level (-v 3 would suffice) and provide also --parse-errors
and -t traffic.log to the command line. You can then see in real time
if any DBMS error message is raised when executing the
xp_getfiledetails procedure. Also, by reading through the generated
traffic.log file you might find further error messages. Feel free to
provide us with the masked file privately.
Cheers,
Bernardo
On 28 February 2011 02:30, Johnny Venter <Joh...@zo...> wrote:
> Does sqlmap currently implement an alternative to "xp_getfiledetails"?
>
> I am working with a MSSQL 2000 Server and has access via "--sql-shell" as a limited user account.
>
> This stored procedure is works as a low level user but am having hard time getting results from db server.
>
>
>
>
>
> ------------------------------------------------------------------------------
> Free Software Download: Index, Search & Analyze Logs and other IT data in
> Real-Time with Splunk. Collect, index and harness all the fast moving IT data
> generated by your applications, servers and devices whether physical, virtual
> or in the cloud. Deliver compliance at lower cost and gain new business
> insights. http://p.sf.net/sfu/splunk-dev2dev
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
--
Bernardo Damele A. G.
E-mail / Jabber: bernardo.damele (at) gmail.com
Mobile: +447788962949 (UK 07788962949)
PGP Key ID: 0x05F5A30F
|
