Questions tagged [sqlmap]

sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers.

Filter by
Sorted by
Tagged with
1
vote
1answer
1k views

How to get Sqlmap to detect insertion point with sleep payload?

I have a server which seems to be vulnerable to SQL injection with the following payload detected by BurpSuite: param=value,(select*from(select(sleep(10)))a) The application takes twice the time ...
4
votes
1answer
3k views

How to update table with sqlmap and without stacked queries?

down vote favorite I'm trying to use following code sqlmap -u "http://exp.com/portal/pd.jsp action=edit&info=products&sub_info=price" --cookie="JSESSIONID....." --dbms Oracle -D PRODUCTS -T ...
1
vote
1answer
681 views

techniques of sql injection (boolean based, UNION query-based, stacked queries and time-based blind) [closed]

I would like to know about these 2 SQL Injection techniques. I completed my studies in SQL databases and my teacher told me about SQL injection, then I became interested in this topic. I discovered a ...
2
votes
0answers
932 views

SQLMap Strange Dump Result

Using SQLMap in this way: sqlmap -u "xxxxx" --dbms=MySql --dbs --user-agent="Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0" -D xxxxx -T "#__xxxxx" --columns I am obtaining ...
2
votes
2answers
1k views

Sqlmap: bypass website security filtering SQL reserved words

I'm using sqlmap to get a website's DB and found out that the site is time-based boolean vulnerable; but the target is showing SQL errors, which made me think that it would be an injection error. I ...
2
votes
1answer
9k views

sqlmap load https request using “-r REQUESTFILE Load HTTP request from a file”

I'm testing a site that automatically redirects http request to https. When I'm using Burp I set the target to use https and the request goes through without a problem. However when I use the same ...
1
vote
1answer
599 views

someone trying to SQLi server using sqlmap

Someone is trying to SQLi my domain using sqlmap. I'm getting a lot of errors from mysql. My server access log shows: - - HTTP/1.1" 200 10559 "-" "sqlmap/1.0.4.0#dev (http://sqlmap.org)" ...
1
vote
1answer
6k views

run sqlmap with http post request with encoding data

I have a target that http post request from that encoded As follows: data request post first url encoded and then base64 encoded. example request post from mentioned target As follows: POST /test/...
0
votes
4answers
5k views

sqlmap injection point in POST data

I am currently doing a blackbox test on a web application for training purposes. It's a personal project. In addition to my manual testing process, I used an automated scanner for detecting obvious ...
2
votes
2answers
761 views

Can the server crash while testing with the sqlmap tool?

When I was pentesting a cpanel web app I've got some passwords but while reading the tables the server went offline. I can exclude that my ip wasn't blocked because I tried to access the server ...
1
vote
2answers
577 views

using the CO2-Extension within Burp for sql injection

I am using the free version of Burp Suite and the CO2-Extension for sql injection attacks. Using the extension offers you two possible attacking ways: Either you copy the command which is ...
0
votes
3answers
3k views

Sqlmap dumping all tables without data

Is it possible to see all columns of all tables of a database without the data using sqlmap I don't want to use -D database -T table manually for all the tables
1
vote
0answers
4k views

SQLMAP - POST JSON data as body

Hi I'm trying to do a SQL injection in a login form. With BurpSuite I intercept the request: POST /xxxx/web/Login HTTP/1.1 Host: 10.0.0.70:42020 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10....
0
votes
1answer
1k views

Timed out in sqlmap

I detect a sqli vulnerability in a target url using sqlmap. Now when I try this I always get "connection timed out to the target URL": ./sqlmap.py -u targetURL --dbs How can I solve it?
1
vote
0answers
373 views

Microsoft IIS 7.5 from Time Based SQLi DBA to shell

I am dealing with a time-based SQLi in a Microsoft IIS 7.5 Server and I want to upload a shell. My approach is to get the internal application path, and then, try to upload a file with sqlmap --file-...
1
vote
0answers
495 views

How to use SQLMap/Burp to perform SQL injection on a form that is behind another form

I have a form that takes in an IP address and loads that page (Acts as a Web Application Proxy). The page that gets loaded has an SQL injection vulnerability. How can I use SQLMap or BURP to exploit ...
1
vote
1answer
3k views

Using sqlmap to find password hashes

I'm learning SQL-injection (and SQL in the first place) by playing a CTF. I'm using sqlmap and have for my target IP so far found: Uses: MySQL, PHP 2 databases: information_schema users 1 table in ...
0
votes
1answer
6k views

Sqlmap tested parameters might not be injectable

When I try to inject something, after testing all parameters with --level=3 --risk=3, this shows up. Please tell me what to do, and where I'm wrong. This is the full command: sqlmap -u "www....
1
vote
0answers
351 views

sqlmap automatically trims response

When i try to dump a database with --dump-all I first get [WARNING] large response detected. This could take a while then [WARNING] too large response detected. Automatically trimming it How ...
1
vote
0answers
64 views

what is this injection query looks like? [closed]

what might be the mysql query if mysql injected it with '# only for username and password blank logged in as admin how to get mysql info using this injection ?
0
votes
2answers
709 views

Using sqlmap for SQL injection vulnerabilities in Vaadin

I implemented a small website for penetration testing purposes using the Vaadin framework. I have a MySQL database running in the background as well as a Jetty server. The website is vulnerable ...
1
vote
1answer
2k views

Scrambled database name / unable to retrieve the number of databases with SQLMap

I have the results for sqlmap: ./sqlmap.py -u "http://REDACTED/browse?destination_id=12" --identify-waf --random-agent -v 3 --dbs GET parameter 'destination_id' is vulnerable. Do you want to keep ...
0
votes
2answers
222 views

Is there a way to specify PHP escape method when using SQLmap?

I'm helping a collegue of mine to test if his website is completely SQLi-proof. It looks promising, but i'm trying to make sure, and by chance I know he's using pg_escape_string to sanitize his POST ...
0
votes
2answers
838 views

Vega shows SQL injection vulnerablity but sqlmap says no

I'm pen testing an application. The URL is basically app.php?app=appname. If app exists it gives correct output, but if it doesn't exist we get a internal server error 500. Vega detects it as a SQL ...
2
votes
1answer
556 views

Using update with SQLMAP error

I am trying to use UPDATE or insert after getting victim database information, for that I am using command: sqlmap -u somewebsite.com/id=2 --sql-shell After that: > sql-shell : UPDATE ...
2
votes
2answers
706 views

Special sqlmap injection

I'm currently pentesting my friends website. I found an SQL injection with acunetix' help: - URL encoded GET input for was set to 1##### Error message found: supplied argument is not a valid MySQL ...
1
vote
0answers
549 views

The database sqlmap is trying to read is too big. I time out every time

So I found the database and then the table and the columns and I'm trying to dump the column data but it is too big. It keep taking ~2 mins then timing out.
-3
votes
1answer
418 views

Securing php script from sql injection

my friends website got hacked, the hacker leak all of the database data using SQLMAP from http://example.com/users/users.php?id=3 what methods exist in php to avoid writing vulnerable code like this?
0
votes
1answer
796 views

sqlmap login post problem

I have an asp login form (username & password) that is SQL-injectable when the username is found in the database For example, if I inserted -username : foo (foo founded in database) -...
1
vote
1answer
612 views

SQLMap, SQLiPy and connection

I can successfully perform a sqlmap scan of my target from a host. However, if I run sqlmapapi from that same host and use SQLiPy from Burp, sqlmapapi returns connection errors. The specific SQLiPy ...
1
vote
2answers
2k views

Weird table names in SQLite database

This is the first time I'm using sqlmap against SQLite. When I run: sqlmap -u www.site.com:80/index.php?vulnParametr=p --dump-all --keep-alive --dbms=sqlite It gives me this: What is that? Is ...
7
votes
2answers
2k views

What's the best way to test for SQL Injection vulnerabilities? Manual or SQLMap?

As part of my job I test for web application vulnerabilities regularly. When it comes to SQL Injection, my methodology is to start by manually browsing the website and spidering it, then, sending the ...
1
vote
0answers
2k views

Dumping Large table using Sqlmap

I am learning/working on sqlmap and I was trying to dump a large table with 11K entries on my localhost. The command I used is: python sqlmap.py -u "http://localhost/searchre.php" --data="search=' ...
1
vote
1answer
694 views

sqlmap not finding a proven vulnerability

I'm testing a wordpress site with the jetpack plugin installed. According to: https://www.exploit-db.com/exploits/18126/ this plugin should be vulnerable to SQL injection (found with sqlmap) but when ...
2
votes
3answers
1k views

SQLMap deleted database items

While doing test on my website, SQLMap deleted data in my database tables. Everything is corrupt. What is a safe way of using this tool without touching other items on a live server? How do you use ...
1
vote
1answer
537 views

Is sqlmap scan detectable?

I have a REST API running on a server. Is there a way to detect an unexpected sqlmap analysis?
2
votes
1answer
811 views

Sqlmap, how to move forward? [duplicate]

So, I'm using Sqlmap for a while now to test the security for my company (we're too small to have IT guy and I'm the closest they got for now), I already managed to access the database remotely and ...
6
votes
2answers
2k views

Sqlmap doesn't exploit verified SQL injection

Right now I'm tinkering with the Hackxor VM (a pentesting training enviroment) and I'm trying to use sqlmap to exploit a vulnerability which I can exploit manually. The vulnerability is in the ...
4
votes
2answers
13k views

SQLmap POST parameter 'txtLoginID' is not injectable

I have a lab machine that I have been practicing some SQL injection on. I know that the POST parameter that I am trying to exploit is vulnerable as I was able to extract the user DB manually. I ...
1
vote
1answer
265 views

How do I exploit with vunerability in special format with sqlmap?

I used ZAP proxy to determine that login was injectable with GET request as login" AND "1"="1 was injectable, but it returned the url to me in this format: https://example.com/login%22%20AND%20%221%...
0
votes
1answer
3k views

How too use R0b0tPirates 500 error bypass

I had a valid injection, but could not exploit it due to 500 errors, so I looked around and found that R0b0t Pirates, a blog that specializes in tools like sqlmap, has put out a 500 error bypass, ...
3
votes
2answers
495 views

Presence of table “sqlmapoutput” in PostgreSQL database

I was pentesting a client's database and saw this one table "sqlmapoutput" in one of the user created schemas. It's a PostgreSQL DBMS. and he has no idea how it came there. There was no data in the ...
1
vote
1answer
426 views

Can SQL test by using SqlMap tool harm a website?

I am just learning about SQL injection attack, and I want to test this by using sqlmap on my own website.However I wonder if the attack can cause any harm on my website's services during the attack? ...
5
votes
1answer
1k views

sqlmap HTTP 405 error on a vulnerable POST parameter

For academical purposes I need to explode a blind sql injection on a form paramater which is sent using the POST method. The form is very simple, it just has an input text box where to introduce the ...
3
votes
1answer
746 views

Plugin for integrating SQLMAP and BURP SUITE [closed]

I am trying to do SQL Injection using the SQLMAP Burp Plugin which I downloaded from http://code.google.com/p/gason/downloads/list. I have followed the steps for windows provided in http://resources....
1
vote
0answers
4k views

How to tell sqlmap to resume an exploit from results-*.csv file?

How to notify SQLMap to resume an exploit from results-*.csv file? Example: ~/.sqlmap/output/results-xxxxxxxxxx.csv Target URL,Place,Parameter,Techniques http://example.com:80/login.php,POST,...
0
votes
2answers
352 views

SQLMap using “?ref=”

I'm learning about net security and how to deal with SQLmap. A friend made some demo web pages on his server to test SQLmap. One of the pages is a fake phishing site with a refer to a real site (index....
2
votes
3answers
13k views

SQLMap: How to dump tables that begin with a specific letter?

I would like to know the command of SQLMap, which permits me to retreive just tables that begin with a special letter. Example with letter "T": sqlmap.py -u www.website -D database -T tables (...)
5
votes
1answer
2k views

SQLmap injection not working, manually it works fine

I have built a vulnerable web application to demonstrate SQL injection. I want to show both manual injection and automated injection. The injection requires a) the user to be logged in (session cookie)...
1
vote
0answers
204 views

sqlmap injection question [closed]

I'm trying to test my website, the command is: sqlmap -u website -D sitedb -T table -C column --dump --threads 10. While sqlmap is retrieving data it displays: [19:36:55] [INFO] retrieved: "","", [19:...