1

This is the first time I'm using sqlmap against SQLite.

When I run:
sqlmap -u www.site.com:80/index.php?vulnParametr=p --dump-all --keep-alive --dbms=sqlite

It gives me this:

Output of sqlmap command.

What is that? Is SQLite using some sort of encrypting?

1
  • 3
    In the future, it is a good courtesy to go ahead and type or paste-in complex text rather than only giving us the image. We're here to help, not to do your work for you. Oct 12, 2016 at 20:38

2 Answers 2

2

I could decipher the characters using ASCII code, I got the following result:

[BEL] K [LF] [LF] [LF] [FF] NULL ceuQ \n CI <&NG [SI] [BEL] [BS] [ESC] ( [SO] & " \n E [FS] #' [DC2] [DC4] K [DC1]

[BEL], [LF], [FF], [SI], [BS], [ESC], [SO], [FS], [DC2], [DC4], [DC1] are control characters, then it isn't a encrypted text, it's text in hexadecimal. I think that sqlmap inject control characters to know if it is possible to execute specific actions, for example, [BEL] is a device control code to execute a warning.

You can know more about control characters in the following link.

https://en.wikipedia.org/wiki/Control_character

I hope this information helps you.

1

This looks like encoding, not encryption. It is a string of hex codes, likely corresponding to ASCII characters.

2
  • I think the same, this image show a table of ASCII character with the ehxadecimal value: elcodigoascii.com.ar/…
    – hmrojas.p
    Jul 12, 2016 at 15:38
  • Yeah, if the data had been presented as text rather than an image I would've deciphered it... but I'm not typing all that out. :) Jul 13, 2016 at 15:04

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .