Thread: [sqlmap-users] Introducing --crawl switch

Brought to you by: inquisb

This project can now be found here.

sqlmap-users

[sqlmap-users] Introducing --crawl switch

From: Miroslav S. <mir...@gm...> - 2011-06-20 11:43:51

Hi all.

With the last commit you'll find --crawl (multithreaded) switch implemented.

Example of usage:
python sqlmap.py -u www.site.com --crawl

It's a basic HTML scrapping crawler based on BeautifulSoup module.

KR

-- 
Miroslav Stampar

E-mail: miroslav.stampar (at) gmail.com
PGP Key ID: 0xB5397B1B

Re: [sqlmap-users] Introducing --crawl switch

From: André S. <and...@gm...> - 2011-06-20 12:12:33

Sirs,

I got a question:

I´m receiving this error from an sqlmap " --os-shel"l command on a MSSQL
database.
[13:06:03] [CRITICAL] unable to prompt for an interactive operating system
shell via the back-end DBMS because stacked queries SQL injection is not
supported

Using the same url but from internal network i got the disered shell
[13:08:46] [INFO] going to use xp_cmdshell extended procedure for operating
system command execution
[13:08:46] [INFO] calling Windows OS shell. To quit type 'x' or 'q' and
press ENTER
os-shell> exit


Is this a normal?

BR

2011/6/20 Miroslav Stampar <mir...@gm...>

> Hi all.
>
> With the last commit you'll find --crawl (multithreaded) switch
> implemented.
>
> Example of usage:
> python sqlmap.py -u www.site.com --crawl
>
> It's a basic HTML scrapping crawler based on BeautifulSoup module.
>
> KR
>
> --
> Miroslav Stampar
>
> E-mail: miroslav.stampar (at) gmail.com
> PGP Key ID: 0xB5397B1B
>
>
> ------------------------------------------------------------------------------
> EditLive Enterprise is the world's most technically advanced content
> authoring tool. Experience the power of Track Changes, Inline Image
> Editing and ensure content is compliant with Accessibility Checking.
> http://p.sf.net/sfu/ephox-dev2dev
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>

Re: [sqlmap-users] Introducing --crawl switch

From: Miroslav S. <mir...@gm...> - 2011-06-20 21:33:29

p.s.:

there were few really nasty bugs involved. now it should be pretty stable

kr

On Mon, Jun 20, 2011 at 1:43 PM, Miroslav Stampar
<mir...@gm...> wrote:
> Hi all.
>
> With the last commit you'll find --crawl (multithreaded) switch implemented.
>
> Example of usage:
> python sqlmap.py -u www.site.com --crawl
>
> It's a basic HTML scrapping crawler based on BeautifulSoup module.
>
> KR
>
> --
> Miroslav Stampar
>
> E-mail: miroslav.stampar (at) gmail.com
> PGP Key ID: 0xB5397B1B
>



-- 
Miroslav Stampar

E-mail: miroslav.stampar (at) gmail.com
PGP Key ID: 0xB5397B1B

Re: [sqlmap-users] Introducing --crawl switch

From: Miroslav S. <mir...@gm...> - 2011-06-24 05:39:13

hi all.

minor update. --crawl is no more a boolean switch. now as a parameter
it takes depth value (e.g. --crawl=2). done by request from Anthony
Boynes.

kr

On Mon, Jun 20, 2011 at 11:33 PM, Miroslav Stampar
<mir...@gm...> wrote:
> p.s.:
>
> there were few really nasty bugs involved. now it should be pretty stable
>
> kr
>
> On Mon, Jun 20, 2011 at 1:43 PM, Miroslav Stampar
> <mir...@gm...> wrote:
>> Hi all.
>>
>> With the last commit you'll find --crawl (multithreaded) switch implemented.
>>
>> Example of usage:
>> python sqlmap.py -u www.site.com --crawl
>>
>> It's a basic HTML scrapping crawler based on BeautifulSoup module.
>>
>> KR
>>
>> --
>> Miroslav Stampar
>>
>> E-mail: miroslav.stampar (at) gmail.com
>> PGP Key ID: 0xB5397B1B
>>
>
>
>
> --
> Miroslav Stampar
>
> E-mail: miroslav.stampar (at) gmail.com
> PGP Key ID: 0xB5397B1B
>



-- 
Miroslav Stampar (@stamparm)

E-mail: miroslav.stampar (at) gmail.com
PGP Key ID: 0xB5397B1B