This is the first time I'm using sqlmap against SQLite.
When I run:
sqlmap -u www.site.com:80/index.php?vulnParametr=p --dump-all --keep-alive --dbms=sqlite
It gives me this:
What is that? Is SQLite using some sort of encrypting?
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community
I could decipher the characters using ASCII code, I got the following result:
[BEL] K [LF] [LF] [LF] [FF] NULL ceuQ \n CI <&NG [SI] [BEL] [BS] [ESC] ( [SO] & " \n E [FS] #' [DC2] [DC4] K [DC1]
[BEL], [LF], [FF], [SI], [BS], [ESC], [SO], [FS], [DC2], [DC4], [DC1] are control characters, then it isn't a encrypted text, it's text in hexadecimal. I think that sqlmap inject control characters to know if it is possible to execute specific actions, for example, [BEL] is a device control code to execute a warning.
You can know more about control characters in the following link.
I hope this information helps you.