diff --git a/doc/ChangeLog b/doc/ChangeLog index 23ed061f9..2d7d29c47 100644 --- a/doc/ChangeLog +++ b/doc/ChangeLog @@ -10,7 +10,7 @@ sqlmap (0.6.2-1) stable; urgency=low variable) is an integer and for some reason the resumed value from session file is a string or a binary file, the query is executed again and and its new output saved to the session file; - * Major improvement to correctly enumerate tables, columns and dump + * Minor improvement to correctly enumerate tables, columns and dump tables entries on Oracle and on PostgreSQL when the database name is not 'public' schema or a system database; * Minor improvement to be able to dump entries on MySQL < 5.0 when @@ -19,7 +19,7 @@ sqlmap (0.6.2-1) stable; urgency=low identify MySQL 5.1.x, MySQL 6.0.x and PostgreSQL 8.3; * More user-friendly warnin messages. - -- Bernardo Damele A. G. Sat, 1 Nov 2008 10:00:00 +0100 + -- Bernardo Damele A. G. Sun, 2 Nov 2008 19:00:00 +0000 sqlmap (0.6.1-1) stable; urgency=low @@ -41,7 +41,7 @@ sqlmap (0.6.1-1) stable; urgency=low not forcing the entries' order alphabetically anymore; * Minor bug fix to correctly handle parameters' value with % character. - -- Bernardo Damele A. G. Fri, 20 Oct 2008 10:00:00 +0100 + -- Bernardo Damele A. G. Fri, 20 Oct 2008 10:00:00 +0000 sqlmap (0.6-1) stable; urgency=low diff --git a/doc/README.html b/doc/README.html index 7819391ed..e5ab1ca0a 100644 --- a/doc/README.html +++ b/doc/README.html @@ -8,7 +8,7 @@

sqlmap user's manual

by -Bernardo Damele A. G.

version 0.6.1, 20th of October 2008 +Bernardo Damele A. G.version 0.6.2, 2nd of November 2008
This document is the user's manual to use sqlmap. @@ -295,19 +295,19 @@ It is available in various formats:

@@ -334,7 +334,7 @@ and 
 $ python sqlmap.py -h
 
-    sqlmap/0.6.1 coded by Bernardo Damele A. G. <bernardo.damele@gmail.com>
+    sqlmap/0.6.2 coded by Bernardo Damele A. G. <bernardo.damele@gmail.com>
                         and Daniele Bellucci <daniele.bellucci@gmail.com>
     
 Usage: sqlmap.py [options] {-u <URL> | -g <google dork> | -c <config file>}
@@ -535,7 +535,7 @@ $ python sqlmap.py -u http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&cat
 [hh:mm:28] [TRAFFIC OUT] HTTP request:
 GET /sqlmap/mysql/get_int.php?id=1&cat=2 HTTP/1.1
 Host: 192.168.1.121:80
-User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
+User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 Connection: close
 [...]
 [hh:mm:29] [INFO] testing MySQL
@@ -544,7 +544,7 @@ Connection: close
 GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2852%29%2C%20
 CHAR%2852%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%207994=7994&cat=2 HTTP/1.1
 Host: 192.168.1.121:80
-User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
+User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 Connection: close
 [...]
@@ -562,7 +562,7 @@ $ python sqlmap.py -u http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&cat [hh:mm:32] [TRAFFIC OUT] HTTP request: GET /sqlmap/mysql/get_int.php?id=1&cat=2 HTTP/1.1 Host: 192.168.1.121:80 -User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) +User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net) Connection: close [hh:mm:32] [TRAFFIC IN] HTTP response (OK - 200): @@ -580,7 +580,7 @@ Content-Type: text/html GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2852%29%2C%20 CHAR%2852%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%204435=4435&cat=2 HTTP/1.1 Host: 192.168.1.121:80 -User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) +User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net) Connection: close [hh:mm:33] [TRAFFIC IN] HTTP response (OK - 200): @@ -607,7 +607,7 @@ $ python sqlmap.py -u http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&cat [hh:mm:23] [TRAFFIC OUT] HTTP request: GET /sqlmap/mysql/get_int.php?id=1&cat=2 HTTP/1.1 Host: 192.168.1.121:80 -User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) +User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net) Connection: close [hh:mm:23] [TRAFFIC IN] HTTP response (OK - 200): @@ -632,7 +632,7 @@ Content-Type: text/html GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2851%29%2C%20 CHAR%2851%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%201855=1855&cat=2 HTTP/1.1 Host: 192.168.1.121:80 -User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) +User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net) Connection: close [hh:mm:24] [TRAFFIC IN] HTTP response (OK - 200): @@ -749,7 +749,7 @@ $ python sqlmap.py -u "http://192.168.1.121/sqlmap/pgsql/get_int.php?id=1&ca 
 $ python sqlmap.py -u "http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&cat=2" -v 1 \
-  -p user-agent --user-agent "sqlmap/0.6.1 (http://sqlmap.sourceforge.net)"
+  -p user-agent --user-agent "sqlmap/0.6.2 (http://sqlmap.sourceforge.net)"
 
 [hh:mm:40] [WARNING] the testable parameter 'user-agent' you provided is not into the GET
 [hh:mm:40] [INFO] testing connection to the target url
@@ -895,7 +895,7 @@ $ python sqlmap.py -u "http://192.168.1.125/sqlmap/get_str.asp?name=luther" -v 3
 [hh:mm:39] [TRAFFIC OUT] HTTP request:
 GET /sqlmap/get_str.asp?name=luther HTTP/1.1
 Host: 192.168.1.125:80
-User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
+User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 Cookie: ASPSESSIONIDSABTRCAS=HPCBGONANJBGFJFHGOKDMCGJ
 Connection: close
 
@@ -907,7 +907,7 @@ Connection: close
 GET /sqlmap/get_str.asp?name=luther HTTP/1.1
 Host: 192.168.1.125:80
 Cookie: ASPSESSIONIDSABTRCAS=469
-User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
+User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 Connection: close
 
 [hh:mm:40] [WARNING] Cookie parameter 'ASPSESSIONIDSABTRCAS' is not dynamic
@@ -955,7 +955,7 @@ $ python sqlmap.py -u "http://192.168.1.121/sqlmap/pgsql/get_int.php?id=1&ca
 GET /sqlmap/pgsql/get_int.php?id=1&cat=2 HTTP/1.1
 Host: 192.168.1.121:80
 Referer: http://www.google.com
-User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
+User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
 Connection: close
 [...]
@@ -972,7 +972,7 @@ Connection: close 

-sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
+sqlmap/0.6.2 (http://sqlmap.sourceforge.net)

@@ -1058,7 +1058,7 @@ $ python sqlmap.py -u "http://192.168.1.121/sqlmap/mysql/basic/get_int.php?id=1& GET /sqlmap/mysql/basic/get_int.php?id=1&cat=2 HTTP/1.1 Host: 192.168.1.121:80 Authorization: Basic dGVzdHVzZXI6dGVzdHBhc3M= -User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) +User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net) Connection: close [...] @@ -1075,7 +1075,7 @@ nonce="qcL9udlSBAA=f3b77da349fcfbf1a59ba37b21e291341159598f", uri="/sqlmap/mysql/digest/get_int.php?id=1&cat=2", response="e1bf3738b4bbe04e197a12fb134e13a2", algorithm="MD5", qop=auth, nc=00000001, cnonce="df1c0902c931b640" -User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) +User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net) Connection: close [...] @@ -1200,7 +1200,7 @@ $ python sqlmap.py -u "http://192.168.1.121/sqlmap/mysql/get_int_refresh.php?id= [hh:mm:50] [TRAFFIC OUT] HTTP request: GET /sqlmap/mysql/get_int_refresh.php?id=1&cat=2 HTTP/1.1 Host: 192.168.1.121:80 -User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) +User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net) Connection: close [hh:mm:50] [TRAFFIC IN] HTTP response (OK - 200): @@ -1222,7 +1222,7 @@ Content-Type: text/html [hh:mm:51] [TRAFFIC OUT] HTTP request: GET /sqlmap/mysql/get_int_refresh.php?id=1&cat=2 HTTP/1.1 Host: 192.168.1.121:80 -User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) +User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net) Connection: close [hh:mm:51] [TRAFFIC IN] HTTP response (OK - 200): @@ -1244,7 +1244,7 @@ Content-Type: text/html [hh:mm:51] [TRAFFIC OUT] HTTP request: GET /sqlmap/mysql/get_int_refresh.php?id=1&cat=2 HTTP/1.1 Host: 192.168.1.121:80 -User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) +User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net) Connection: close [hh:mm:51] [TRAFFIC IN] HTTP response (OK - 200): @@ -1556,9 +1556,9 @@ $ python sqlmap.py -u "http://192.168.1.121/sqlmap/mssql/get_int.php?id=1&ca [hh:mm:03] [INFO] performed 13 queries in 0 seconds [hh:mm:03] [INFO] query: @@VERSION [hh:mm:03] [INFO] retrieved: Microsoft SQL Server 2000 - 8.00.194 (Intel X86) - Aug 6 2000 00:57:48 - Copyright (c) 1988-2000 Microsoft Corporation - Standard Edition on Windows NT 5.0 (Build 2195: Service Pack 4) + Aug 6 2000 00:57:48 + Copyright (c) 1988-2000 Microsoft Corporation + Standard Edition on Windows NT 5.0 (Build 2195: Service Pack 4) [hh:mm:08] [INFO] performed 1308 queries in 4 seconds back-end DBMS: active fingerprint: Microsoft SQL Server 2000 @@ -2072,7 +2072,7 @@ Table: users | 1 | luther | blissett | | 2 | fluffy | bunny | | 3 | wu | ming | -| 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header | +| 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header | | 5 | NULL | nameisnull | +----+----------------------------------------------+-------------------+ @@ -2126,7 +2126,7 @@ Table: users | 1 | luther | blissett | | 2 | fluffy | bunny | | 3 | wu | ming | -| 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header | +| 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header | | 5 | | nameisnull | +----+----------------------------------------------+-------------------+ @@ -2140,7 +2140,7 @@ $ cat /software/sqlmap/output/192.168.1.121/dump/public/users.csv "1","luther","blissett" "2","fluffy","bunny" "3","wu","ming" -"4","sqlmap/0.6.1 (http://sqlmap.sourceforge.net)","user agent header" +"4","sqlmap/0.6.2 (http://sqlmap.sourceforge.net)","user agent header" "5","","nameisnull"
@@ -2170,7 +2170,7 @@ Table: users +----+----------------------------------------------+-------------------+ | 2 | fluffy | bunny | | 3 | wu | ming | -| 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header | +| 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header | +----+----------------------------------------------+-------------------+ @@ -2201,7 +2201,7 @@ Table: users | 1 | luther | blissett | | 2 | fluffy | bunny | | 3 | wu | ming | -| 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header | +| 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header | | 5 | NULL | nameisnull | +----+----------------------------------------------+-------------------+ @@ -2291,7 +2291,7 @@ Table: users +----+----------------------------------------------+-------------------+ | id | name | surname | +----+----------------------------------------------+-------------------+ -| 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header | +| 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header | | 2 | fluffy | bunny | | 1 | luther | blisset | | 3 | wu | ming | @@ -2824,9 +2824,9 @@ CHAR(100)+CHAR(106)+CHAR(72)+CHAR(75)), NULL-- AND 5204=5204 banner: --- Microsoft SQL Server 2000 - 8.00.194 (Intel X86) - Aug 6 2000 00:57:48 - Copyright (c) 1988-2000 Microsoft Corporation - Standard Edition on Windows NT 5.0 (Build 2195: Service Pack 4) + Aug 6 2000 00:57:48 + Copyright (c) 1988-2000 Microsoft Corporation + Standard Edition on Windows NT 5.0 (Build 2195: Service Pack 4) --- @@ -2854,7 +2854,7 @@ GET /sqlmap/mysql/get_int.php?id=1%20UNION%20ALL%20SELECT%20NULL%2C%20CONCAT%28C %2C%20CHAR%2832%29%29%2CCHAR%28122%2C110%2C105%2C89%2C121%2C65%29%29%2C%20NULL--%20AND%2 06043=6043&cat=2 HTTP/1.1 Host: 192.168.1.121:80 -User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) +User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net) Connection: close [hh:mm:25] [TRAFFIC IN] HTTP response (OK - 200): @@ -2996,7 +2996,7 @@ $ python sqlmap.py --update -v 4 [hh:mm:55] [TRAFFIC OUT] HTTP request: GET /doc/VERSION HTTP/1.1 Host: sqlmap.sourceforge.net -User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) +User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net) Connection: close [hh:mm:55] [TRAFFIC IN] HTTP response (OK - 200): @@ -3015,7 +3015,7 @@ X-Pad: avoid browser bug [hh:mm:56] [TRAFFIC OUT] HTTP request: GET /FAQs/SQLServerVersionDatabase/tabid/63/Default.aspx HTTP/1.1 Host: www.sqlsecurity.com -User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) +User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net) Cookie: .ASPXANONYMOUS=dvus03cqyQEkAAAANDI0M2QzZmUtOGRkOS00ZDQxLThhMTUtN2ExMWJiNWVjN2My0; language=en-US Connection: close diff --git a/doc/README.pdf b/doc/README.pdf index 1d170c94c..eacd97264 100644 Binary files a/doc/README.pdf and b/doc/README.pdf differ diff --git a/doc/README.sgml b/doc/README.sgml index 5ed1c4d62..d3049a01e 100644 --- a/doc/README.sgml +++ b/doc/README.sgml @@ -4,7 +4,7 @@ sqlmap user's manual <author>by <htmlurl url="mailto:bernardo.damele@gmail.com" name="Bernardo Damele A. G."> -<date>version 0.6.1, 20th of October 2008 +<date>version 0.6.2, 2nd of November 2008 <abstract> This document is the user's manual to use <htmlurl url="http://sqlmap.sourceforge.net" name="sqlmap">. Check the project <htmlurl url="http://sqlmap.sourceforge.net" name="homepage"> @@ -257,19 +257,19 @@ name="SourceForge File List page">. It is available in various formats: <itemize> -<item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1.tar.gz" +<item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2.tar.gz" name="Source gzip compressed"> operating system independent. -<item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1.tar.bz2" +<item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2.tar.bz2" name="Source bzip2 compressed"> operating system independent. -<item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1.zip" +<item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2.zip" name="Source zip compressed"> operating system independent. -<item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap_0.6.1-1_all.deb" +<item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap_0.6.2-1_all.deb" name="DEB binary package"> architecture independent for Debian and any other Debian derivated GNU/Linux distribution. -<item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1-1.noarch.rpm" +<item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2-1.noarch.rpm" name="RPM binary package"> architecture independent for Fedora and any other operating system that can install RPM packages. -<item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1_exe.zip" +<item><htmlurl url="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2_exe.zip" name="Portable executable for Windows"> that <bf>does not require the Python interpreter</bf> to be installed on the operating system. </itemize> @@ -297,7 +297,7 @@ and <htmlurl url="mailto:daniele.bellucci@gmail.com" name="Daniele Bellucci">. <tscreen><verb> $ python sqlmap.py -h - sqlmap/0.6.1 coded by Bernardo Damele A. G. <bernardo.damele@gmail.com> + sqlmap/0.6.2 coded by Bernardo Damele A. G. <bernardo.damele@gmail.com> and Daniele Bellucci <daniele.bellucci@gmail.com> Usage: sqlmap.py [options] {-u <URL> | -g <google dork> | -c <config file>} @@ -493,7 +493,7 @@ $ python sqlmap.py -u http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&cat [hh:mm:28] [TRAFFIC OUT] HTTP request: GET /sqlmap/mysql/get_int.php?id=1&cat=2 HTTP/1.1 Host: 192.168.1.121:80 -User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) +User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net) Connection: close [...] [hh:mm:29] [INFO] testing MySQL @@ -502,7 +502,7 @@ Connection: close GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2852%29%2C%20 CHAR%2852%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%207994=7994&cat=2 HTTP/1.1 Host: 192.168.1.121:80 -User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) +User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net) Connection: close [...] </verb></tscreen> @@ -518,7 +518,7 @@ $ python sqlmap.py -u http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&cat [hh:mm:32] [TRAFFIC OUT] HTTP request: GET /sqlmap/mysql/get_int.php?id=1&cat=2 HTTP/1.1 Host: 192.168.1.121:80 -User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) +User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net) Connection: close [hh:mm:32] [TRAFFIC IN] HTTP response (OK - 200): @@ -536,7 +536,7 @@ Content-Type: text/html GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2852%29%2C%20 CHAR%2852%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%204435=4435&cat=2 HTTP/1.1 Host: 192.168.1.121:80 -User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) +User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net) Connection: close [hh:mm:33] [TRAFFIC IN] HTTP response (OK - 200): @@ -561,7 +561,7 @@ $ python sqlmap.py -u http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&cat [hh:mm:23] [TRAFFIC OUT] HTTP request: GET /sqlmap/mysql/get_int.php?id=1&cat=2 HTTP/1.1 Host: 192.168.1.121:80 -User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) +User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net) Connection: close [hh:mm:23] [TRAFFIC IN] HTTP response (OK - 200): @@ -586,7 +586,7 @@ Content-Type: text/html GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2851%29%2C%20 CHAR%2851%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%201855=1855&cat=2 HTTP/1.1 Host: 192.168.1.121:80 -User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) +User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net) Connection: close [hh:mm:24] [TRAFFIC IN] HTTP response (OK - 200): @@ -701,7 +701,7 @@ Example on a <bf>MySQL 5.0.51</bf> target: <tscreen><verb> $ python sqlmap.py -u "http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&cat=2" -v 1 \ - -p user-agent --user-agent "sqlmap/0.6.1 (http://sqlmap.sourceforge.net)" + -p user-agent --user-agent "sqlmap/0.6.2 (http://sqlmap.sourceforge.net)" [hh:mm:40] [WARNING] the testable parameter 'user-agent' you provided is not into the GET [hh:mm:40] [INFO] testing connection to the target url @@ -846,7 +846,7 @@ $ python sqlmap.py -u "http://192.168.1.125/sqlmap/get_str.asp?name=luther" -v 3 [hh:mm:39] [TRAFFIC OUT] HTTP request: GET /sqlmap/get_str.asp?name=luther HTTP/1.1 Host: 192.168.1.125:80 -User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) +User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net) Cookie: ASPSESSIONIDSABTRCAS=HPCBGONANJBGFJFHGOKDMCGJ Connection: close @@ -858,7 +858,7 @@ Connection: close GET /sqlmap/get_str.asp?name=luther HTTP/1.1 Host: 192.168.1.125:80 Cookie: ASPSESSIONIDSABTRCAS=469 -User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) +User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net) Connection: close [hh:mm:40] [WARNING] Cookie parameter 'ASPSESSIONIDSABTRCAS' is not dynamic @@ -905,7 +905,7 @@ $ python sqlmap.py -u "http://192.168.1.121/sqlmap/pgsql/get_int.php?id=1&ca GET /sqlmap/pgsql/get_int.php?id=1&cat=2 HTTP/1.1 Host: 192.168.1.121:80 Referer: http://www.google.com -User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) +User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net) Connection: close [...] </verb></tscreen> @@ -921,7 +921,7 @@ By default sqlmap perform HTTP requests providing the following HTTP <tt>User-Agent</tt> header value: <tscreen><verb> -sqlmap/0.6.1 (http://sqlmap.sourceforge.net) +sqlmap/0.6.2 (http://sqlmap.sourceforge.net) </verb></tscreen> <p> @@ -1006,7 +1006,7 @@ $ python sqlmap.py -u "http://192.168.1.121/sqlmap/mysql/basic/get_int.php?id=1& GET /sqlmap/mysql/basic/get_int.php?id=1&cat=2 HTTP/1.1 Host: 192.168.1.121:80 Authorization: Basic dGVzdHVzZXI6dGVzdHBhc3M= -User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) +User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net) Connection: close [...] @@ -1023,7 +1023,7 @@ nonce="qcL9udlSBAA=f3b77da349fcfbf1a59ba37b21e291341159598f", uri="/sqlmap/mysql/digest/get_int.php?id=1&cat=2", response="e1bf3738b4bbe04e197a12fb134e13a2", algorithm="MD5", qop=auth, nc=00000001, cnonce="df1c0902c931b640" -User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) +User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net) Connection: close [...] </verb></tscreen> @@ -1145,7 +1145,7 @@ $ python sqlmap.py -u "http://192.168.1.121/sqlmap/mysql/get_int_refresh.php?id= [hh:mm:50] [TRAFFIC OUT] HTTP request: GET /sqlmap/mysql/get_int_refresh.php?id=1&cat=2 HTTP/1.1 Host: 192.168.1.121:80 -User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) +User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net) Connection: close [hh:mm:50] [TRAFFIC IN] HTTP response (OK - 200): @@ -1167,7 +1167,7 @@ Content-Type: text/html [hh:mm:51] [TRAFFIC OUT] HTTP request: GET /sqlmap/mysql/get_int_refresh.php?id=1&cat=2 HTTP/1.1 Host: 192.168.1.121:80 -User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) +User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net) Connection: close [hh:mm:51] [TRAFFIC IN] HTTP response (OK - 200): @@ -1189,7 +1189,7 @@ Content-Type: text/html [hh:mm:51] [TRAFFIC OUT] HTTP request: GET /sqlmap/mysql/get_int_refresh.php?id=1&cat=2 HTTP/1.1 Host: 192.168.1.121:80 -User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) +User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net) Connection: close [hh:mm:51] [TRAFFIC IN] HTTP response (OK - 200): @@ -2008,7 +2008,7 @@ Table: users | 1 | luther | blissett | | 2 | fluffy | bunny | | 3 | wu | ming | -| 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header | +| 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header | | 5 | NULL | nameisnull | +----+----------------------------------------------+-------------------+ </verb></tscreen> @@ -2060,7 +2060,7 @@ Table: users | 1 | luther | blissett | | 2 | fluffy | bunny | | 3 | wu | ming | -| 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header | +| 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header | | 5 | | nameisnull | +----+----------------------------------------------+-------------------+ @@ -2074,7 +2074,7 @@ $ cat /software/sqlmap/output/192.168.1.121/dump/public/users.csv "1","luther","blissett" "2","fluffy","bunny" "3","wu","ming" -"4","sqlmap/0.6.1 (http://sqlmap.sourceforge.net)","user agent header" +"4","sqlmap/0.6.2 (http://sqlmap.sourceforge.net)","user agent header" "5","","nameisnull" </verb></tscreen> @@ -2102,7 +2102,7 @@ Table: users +----+----------------------------------------------+-------------------+ | 2 | fluffy | bunny | | 3 | wu | ming | -| 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header | +| 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header | +----+----------------------------------------------+-------------------+ </verb></tscreen> @@ -2134,7 +2134,7 @@ Table: users | 1 | luther | blissett | | 2 | fluffy | bunny | | 3 | wu | ming | -| 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header | +| 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header | | 5 | NULL | nameisnull | +----+----------------------------------------------+-------------------+ @@ -2223,7 +2223,7 @@ Table: users +----+----------------------------------------------+-------------------+ | id | name | surname | +----+----------------------------------------------+-------------------+ -| 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header | +| 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header | | 2 | fluffy | bunny | | 1 | luther | blisset | | 3 | wu | ming | @@ -2774,7 +2774,7 @@ GET /sqlmap/mysql/get_int.php?id=1%20UNION%20ALL%20SELECT%20NULL%2C%20CONCAT%28C %2C%20CHAR%2832%29%29%2CCHAR%28122%2C110%2C105%2C89%2C121%2C65%29%29%2C%20NULL--%20AND%2 06043=6043&cat=2 HTTP/1.1 Host: 192.168.1.121:80 -User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) +User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net) Connection: close [hh:mm:25] [TRAFFIC IN] HTTP response (OK - 200): @@ -2913,7 +2913,7 @@ $ python sqlmap.py --update -v 4 [hh:mm:55] [TRAFFIC OUT] HTTP request: GET /doc/VERSION HTTP/1.1 Host: sqlmap.sourceforge.net -User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) +User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net) Connection: close [hh:mm:55] [TRAFFIC IN] HTTP response (OK - 200): @@ -2932,7 +2932,7 @@ X-Pad: avoid browser bug [hh:mm:56] [TRAFFIC OUT] HTTP request: GET /FAQs/SQLServerVersionDatabase/tabid/63/Default.aspx HTTP/1.1 Host: www.sqlsecurity.com -User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net) +User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net) Cookie: .ASPXANONYMOUS=dvus03cqyQEkAAAANDI0M2QzZmUtOGRkOS00ZDQxLThhMTUtN2ExMWJiNWVjN2My0; language=en-US Connection: close