There are no errors and it is a time based injection, so not much to go on in terms of page content. I have no issues enumerating tables or bruteforcing columns.
Will test out the -f --banner args tonight. Good to hear it should be supported well.
Sent from a computer
> On Oct 23, 2013, at 0:56, Miroslav Stampar <mir...@gm...> wrote:
>
> Hi Brandon.
>
> HSQLDB should be considered as (fully) supported by sqlmap. Nevertheless, there is always a space for improvements.
>
> You won't be able to run shell commands nor read OS files with it as it is a very constrained DBMS (Java based).
>
> As of a problem with enumerating column names. Do you get any error message with --parse-errors or are there any messages inside the page response (you can use -t traffic.txt for this) when it is being done?
>
> Do you get any information with -f --banner?
>
> Kind regards,
> Miroslav Stampar
>
>> On Oct 22, 2013 11:17 PM, "Brandon Perry" <bpe...@gm...> wrote:
>> How supported would we consider hsqldb? Not sure of its limitations, but I seem to have trouble enumerating columns with it.
>>
>> Also, --os-shell and --file-read report that hsqldb doesnt support either. Very possible, but I want to ensure it is because of technical limitations with hsqldb and not with partial support on the sqlmap side. If it is the latter, i am in a good spot to help better the support.
>>
>> Sent from a computer
>> ------------------------------------------------------------------------------
>> October Webinars: Code for Performance
>> Free Intel webinars can help you accelerate application performance.
>> Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from
>> the latest Intel processors and coprocessors. See abstracts and register >
>> http://pubads.g.doubleclick.net/gampad/clk?id=60135991&iu=/4140/ostg.clktrk
>> _______________________________________________
>> sqlmap-users mailing list
>> sql...@li...
>> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
|