diff --git a/doc/README.html b/doc/README.html index ecd79c802..55e722b9d 100644 --- a/doc/README.html +++ b/doc/README.html @@ -2022,6 +2022,10 @@ want to enumerate the privileges.

If you provide CU as username it will consider it as an alias for current user and will enumerate the privileges for this user.

+

On Microsoft SQL Server, this feature will display you whether or not each +user is a database administrator rather than the list of privileges for +all users.

+

List database management system users roles

@@ -2048,13 +2052,11 @@ current user and will enumerate the privileges for this user.

information about available databases, it is possible to enumerate the list of databases.

-

Note that this feature is not available if the database management system -is Oracle.

-

Enumerate database's tables

-

Switches: --tables and -D

+

Switches: --tables, -D and +--exclude-sysdbs

When the session user has read access to the system table containing information about databases' tables, it is possible to enumerate @@ -2063,6 +2065,9 @@ the list of tables for a specific database management system's databases.

If you do not provide a specific database with switch -D, sqlmap will enumerate the tables for all DBMS databases.

+

You can also provide the --exclude-sysdbs switch to +exclude all system databases.

+

Note that on Oracle you have to provide the TABLESPACE_NAME instead of the database name.

@@ -2086,8 +2091,8 @@ name like the one you provided to be enumerated.

-$ python sqlmap.py -u "http://192.168.136.131/sqlmap/sqlite/get_int.php?id=1" --columns -D testdb \
-  -T users -C name
+$ python sqlmap.py -u "http://192.168.136.131/sqlmap/sqlite/get_int.php?id=1" --columns \
+  -D testdb -T users -C name
 [...]
 Database: SQLite_masterdb
 Table: users
@@ -2145,6 +2150,11 @@ Table: USERS

+

This switch can also be used to dump all tables' entries of a provided +database. You simply have to provide sqlmap with the --dump +switch along with only the -D switch, no -T and no +-C.

+

You can also provide a comma-separated list of the specific columns to dump with the -C switch.

@@ -2171,8 +2181,8 @@ error-based and UNION query SQL injection techniques the number of requests is exactly the same, regardless of the length of the column's entry output to dump.

-

As you know by down, sqlmap is flexible. You can leave it to -automatically enumerate the whole database table or you can be very +

As you may have noticed by now, sqlmap is flexible: you can leave +it to automatically dump the whole database table or you can be very precise in which characters to dump, from which columns and which range of entries.

diff --git a/doc/README.pdf b/doc/README.pdf index daf2af846..3e4c34f2f 100644 Binary files a/doc/README.pdf and b/doc/README.pdf differ diff --git a/doc/README.sgml b/doc/README.sgml index efe75f155..eef8bd0ed 100644 --- a/doc/README.sgml +++ b/doc/README.sgml @@ -2043,6 +2043,11 @@ want to enumerate the privileges. If you provide CU as username it will consider it as an alias for current user and will enumerate the privileges for this user. +

+On Microsoft SQL Server, this feature will display you whether or not each +user is a database administrator rather than the list of privileges for +all users. + List database management system users roles @@ -2076,15 +2081,12 @@ When the session user has read access to the system table containing information about available databases, it is possible to enumerate the list of databases. -

-Note that this feature is not available if the database management system -is Oracle. - Enumerate database's tables

-Switches: --tables and -D +Switches: --tables, -D and +--exclude-sysdbs

When the session user has read access to the system table containing @@ -2095,6 +2097,10 @@ the list of tables for a specific database management system's databases. If you do not provide a specific database with switch -D, sqlmap will enumerate the tables for all DBMS databases. +

+You can also provide the --exclude-sysdbs switch to +exclude all system databases. +

Note that on Oracle you have to provide the TABLESPACE_NAME instead of the database name. @@ -2122,8 +2128,8 @@ name like the one you provided to be enumerated. Example against a SQLite target: -$ python sqlmap.py -u "http://192.168.136.131/sqlmap/sqlite/get_int.php?id=1" --columns -D testdb \ - -T users -C name +$ python sqlmap.py -u "http://192.168.136.131/sqlmap/sqlite/get_int.php?id=1" --columns \ + -D testdb -T users -C name [...] Database: SQLite_masterdb Table: users @@ -2181,6 +2187,12 @@ Table: USERS +----+--------+------------+ +

+This switch can also be used to dump all tables' entries of a provided +database. You simply have to provide sqlmap with the --dump +switch along with only the -D switch, no -T and no +-C. +

You can also provide a comma-separated list of the specific columns to dump with the -C switch. @@ -2212,8 +2224,8 @@ is exactly the same, regardless of the length of the column's entry output to dump.

-As you know by down, sqlmap is flexible. You can leave it to -automatically enumerate the whole database table or you can be very +As you may have noticed by now, sqlmap is flexible: you can leave +it to automatically dump the whole database table or you can be very precise in which characters to dump, from which columns and which range of entries.