Assistance Needed with Sqlmap Security Product

[aryater2212]

Dear Stamp,

I hope this email finds you well. I am writing to seek assistance regarding an issue I encountered while using the Sqlmap security product.

During my usage of the Sqlmap security product, I identified and confirmed two injection types. The first type is boolean-based blind with DBMS set to MySQL, and the second type is time-based blind.

Following this, I submitted a request to Sqlmap to obtain databases (denoted by --dbs) using time-based blind injection. I received a response for the --dbs request, and it successfully listed all databases. However, when I attempted to retrieve tables (denoted by --tables), I encountered an obstacle.

The --tables request seems to be repeating the content of one table byte, such as "action," for all tables. This repetition fills up the response with the number of tables present, but it does not provide the actual table names or information. I have been unable to identify the root cause of this issue, and I would greatly appreciate your assistance in resolving it.

Could you please provide guidance on how to troubleshoot and resolve this issue? Additionally, if there are any specific configurations or adjustments that need to be made, please let me know.

Thank you very much for your attention to this matter. I look forward to your prompt response and assistance.

Best regards,

[stamparm]

you should run sqlmap with -v 3 and try to find whether some of payloads are wrong during the retrieval of those table names

[aryater2212]

Alright, I'll give it a try. Thanks for your response, just wait for me to check if there are any payloads that are wrong during the retrieval of these table names.

…

On Mon, Apr 29, 2024 at 10:37 PM Miroslav Stampar ***@***.***> wrote: you should run sqlmap with -v 3 and try to find whether some of payloads are wrong during the retrieval of those table names — Reply to this email directly, view it on GitHub <#5695 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/BIBOKTEMORIG7SM456QLWN3Y7ZLJDAVCNFSM6AAAAABGWKZKYWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDAOBSHEZDANRSGI> . You are receiving this because you authored the thread.Message ID: ***@***.***>