From de980ae79f05e33b7cc158ffe23ca40aa2acd432 Mon Sep 17 00:00:00 2001
From: Bernardo Damele sqlmap user's manual
by
-Bernardo Damele A. G.
version 0.6.1, 20th of October 2008
+Bernardo Damele A. G.version 0.6.2, 2nd of November 2008
This document is the user's manual to use
sqlmap.
@@ -295,19 +295,19 @@ It is available in various formats:
$ python sqlmap.py -h
- sqlmap/0.6.1 coded by Bernardo Damele A. G. <bernardo.damele@gmail.com>
+ sqlmap/0.6.2 coded by Bernardo Damele A. G. <bernardo.damele@gmail.com>
and Daniele Bellucci <daniele.bellucci@gmail.com>
Usage: sqlmap.py [options] {-u <URL> | -g <google dork> | -c <config file>}
@@ -535,7 +535,7 @@ $ python sqlmap.py -u http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&cat
[hh:mm:28] [TRAFFIC OUT] HTTP request:
GET /sqlmap/mysql/get_int.php?id=1&cat=2 HTTP/1.1
Host: 192.168.1.121:80
-User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
+User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close
[...]
[hh:mm:29] [INFO] testing MySQL
@@ -544,7 +544,7 @@ Connection: close
GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2852%29%2C%20
CHAR%2852%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%207994=7994&cat=2 HTTP/1.1
Host: 192.168.1.121:80
-User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
+User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close
[...]
@@ -562,7 +562,7 @@ $ python sqlmap.py -u http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&cat
[hh:mm:32] [TRAFFIC OUT] HTTP request:
GET /sqlmap/mysql/get_int.php?id=1&cat=2 HTTP/1.1
Host: 192.168.1.121:80
-User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
+User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close
[hh:mm:32] [TRAFFIC IN] HTTP response (OK - 200):
@@ -580,7 +580,7 @@ Content-Type: text/html
GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2852%29%2C%20
CHAR%2852%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%204435=4435&cat=2 HTTP/1.1
Host: 192.168.1.121:80
-User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
+User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close
[hh:mm:33] [TRAFFIC IN] HTTP response (OK - 200):
@@ -607,7 +607,7 @@ $ python sqlmap.py -u http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&cat
[hh:mm:23] [TRAFFIC OUT] HTTP request:
GET /sqlmap/mysql/get_int.php?id=1&cat=2 HTTP/1.1
Host: 192.168.1.121:80
-User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
+User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close
[hh:mm:23] [TRAFFIC IN] HTTP response (OK - 200):
@@ -632,7 +632,7 @@ Content-Type: text/html
GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2851%29%2C%20
CHAR%2851%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%201855=1855&cat=2 HTTP/1.1
Host: 192.168.1.121:80
-User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
+User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close
[hh:mm:24] [TRAFFIC IN] HTTP response (OK - 200):
@@ -749,7 +749,7 @@ $ python sqlmap.py -u "http://192.168.1.121/sqlmap/pgsql/get_int.php?id=1&ca
$ python sqlmap.py -u "http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&cat=2" -v 1 \
- -p user-agent --user-agent "sqlmap/0.6.1 (http://sqlmap.sourceforge.net)"
+ -p user-agent --user-agent "sqlmap/0.6.2 (http://sqlmap.sourceforge.net)"
[hh:mm:40] [WARNING] the testable parameter 'user-agent' you provided is not into the GET
[hh:mm:40] [INFO] testing connection to the target url
@@ -895,7 +895,7 @@ $ python sqlmap.py -u "http://192.168.1.125/sqlmap/get_str.asp?name=luther" -v 3
[hh:mm:39] [TRAFFIC OUT] HTTP request:
GET /sqlmap/get_str.asp?name=luther HTTP/1.1
Host: 192.168.1.125:80
-User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
+User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Cookie: ASPSESSIONIDSABTRCAS=HPCBGONANJBGFJFHGOKDMCGJ
Connection: close
@@ -907,7 +907,7 @@ Connection: close
GET /sqlmap/get_str.asp?name=luther HTTP/1.1
Host: 192.168.1.125:80
Cookie: ASPSESSIONIDSABTRCAS=469
-User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
+User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close
[hh:mm:40] [WARNING] Cookie parameter 'ASPSESSIONIDSABTRCAS' is not dynamic
@@ -955,7 +955,7 @@ $ python sqlmap.py -u "http://192.168.1.121/sqlmap/pgsql/get_int.php?id=1&ca
GET /sqlmap/pgsql/get_int.php?id=1&cat=2 HTTP/1.1
Host: 192.168.1.121:80
Referer: http://www.google.com
-User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
+User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close
[...]
@@ -972,7 +972,7 @@ Connection: close
-sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
+sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
@@ -1058,7 +1058,7 @@ $ python sqlmap.py -u "http://192.168.1.121/sqlmap/mysql/basic/get_int.php?id=1&
GET /sqlmap/mysql/basic/get_int.php?id=1&cat=2 HTTP/1.1
Host: 192.168.1.121:80
Authorization: Basic dGVzdHVzZXI6dGVzdHBhc3M=
-User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
+User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close
[...]
@@ -1075,7 +1075,7 @@ nonce="qcL9udlSBAA=f3b77da349fcfbf1a59ba37b21e291341159598f",
uri="/sqlmap/mysql/digest/get_int.php?id=1&cat=2",
response="e1bf3738b4bbe04e197a12fb134e13a2", algorithm="MD5", qop=auth, nc=00000001,
cnonce="df1c0902c931b640"
-User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
+User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close
[...]
@@ -1200,7 +1200,7 @@ $ python sqlmap.py -u "http://192.168.1.121/sqlmap/mysql/get_int_refresh.php?id=
[hh:mm:50] [TRAFFIC OUT] HTTP request:
GET /sqlmap/mysql/get_int_refresh.php?id=1&cat=2 HTTP/1.1
Host: 192.168.1.121:80
-User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
+User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close
[hh:mm:50] [TRAFFIC IN] HTTP response (OK - 200):
@@ -1222,7 +1222,7 @@ Content-Type: text/html
[hh:mm:51] [TRAFFIC OUT] HTTP request:
GET /sqlmap/mysql/get_int_refresh.php?id=1&cat=2 HTTP/1.1
Host: 192.168.1.121:80
-User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
+User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close
[hh:mm:51] [TRAFFIC IN] HTTP response (OK - 200):
@@ -1244,7 +1244,7 @@ Content-Type: text/html
[hh:mm:51] [TRAFFIC OUT] HTTP request:
GET /sqlmap/mysql/get_int_refresh.php?id=1&cat=2 HTTP/1.1
Host: 192.168.1.121:80
-User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
+User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close
[hh:mm:51] [TRAFFIC IN] HTTP response (OK - 200):
@@ -1556,9 +1556,9 @@ $ python sqlmap.py -u "http://192.168.1.121/sqlmap/mssql/get_int.php?id=1&ca
[hh:mm:03] [INFO] performed 13 queries in 0 seconds
[hh:mm:03] [INFO] query: @@VERSION
[hh:mm:03] [INFO] retrieved: Microsoft SQL Server 2000 - 8.00.194 (Intel X86)
- Aug 6 2000 00:57:48
- Copyright (c) 1988-2000 Microsoft Corporation
- Standard Edition on Windows NT 5.0 (Build 2195: Service Pack 4)
+ Aug 6 2000 00:57:48
+ Copyright (c) 1988-2000 Microsoft Corporation
+ Standard Edition on Windows NT 5.0 (Build 2195: Service Pack 4)
[hh:mm:08] [INFO] performed 1308 queries in 4 seconds
back-end DBMS: active fingerprint: Microsoft SQL Server 2000
@@ -2072,7 +2072,7 @@ Table: users
| 1 | luther | blissett |
| 2 | fluffy | bunny |
| 3 | wu | ming |
-| 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header |
+| 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
| 5 | NULL | nameisnull |
+----+----------------------------------------------+-------------------+
@@ -2126,7 +2126,7 @@ Table: users
| 1 | luther | blissett |
| 2 | fluffy | bunny |
| 3 | wu | ming |
-| 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header |
+| 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
| 5 | | nameisnull |
+----+----------------------------------------------+-------------------+
@@ -2140,7 +2140,7 @@ $ cat /software/sqlmap/output/192.168.1.121/dump/public/users.csv
"1","luther","blissett"
"2","fluffy","bunny"
"3","wu","ming"
-"4","sqlmap/0.6.1 (http://sqlmap.sourceforge.net)","user agent header"
+"4","sqlmap/0.6.2 (http://sqlmap.sourceforge.net)","user agent header"
"5","","nameisnull"
@@ -2170,7 +2170,7 @@ Table: users
+----+----------------------------------------------+-------------------+
| 2 | fluffy | bunny |
| 3 | wu | ming |
-| 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header |
+| 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
+----+----------------------------------------------+-------------------+
@@ -2201,7 +2201,7 @@ Table: users
| 1 | luther | blissett |
| 2 | fluffy | bunny |
| 3 | wu | ming |
-| 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header |
+| 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
| 5 | NULL | nameisnull |
+----+----------------------------------------------+-------------------+
@@ -2291,7 +2291,7 @@ Table: users
+----+----------------------------------------------+-------------------+
| id | name | surname |
+----+----------------------------------------------+-------------------+
-| 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header |
+| 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
| 2 | fluffy | bunny |
| 1 | luther | blisset |
| 3 | wu | ming |
@@ -2824,9 +2824,9 @@ CHAR(100)+CHAR(106)+CHAR(72)+CHAR(75)), NULL-- AND 5204=5204
banner:
---
Microsoft SQL Server 2000 - 8.00.194 (Intel X86)
- Aug 6 2000 00:57:48
- Copyright (c) 1988-2000 Microsoft Corporation
- Standard Edition on Windows NT 5.0 (Build 2195: Service Pack 4)
+ Aug 6 2000 00:57:48
+ Copyright (c) 1988-2000 Microsoft Corporation
+ Standard Edition on Windows NT 5.0 (Build 2195: Service Pack 4)
---
@@ -2854,7 +2854,7 @@ GET /sqlmap/mysql/get_int.php?id=1%20UNION%20ALL%20SELECT%20NULL%2C%20CONCAT%28C
%2C%20CHAR%2832%29%29%2CCHAR%28122%2C110%2C105%2C89%2C121%2C65%29%29%2C%20NULL--%20AND%2
06043=6043&cat=2 HTTP/1.1
Host: 192.168.1.121:80
-User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
+User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close
[hh:mm:25] [TRAFFIC IN] HTTP response (OK - 200):
@@ -2996,7 +2996,7 @@ $ python sqlmap.py --update -v 4
[hh:mm:55] [TRAFFIC OUT] HTTP request:
GET /doc/VERSION HTTP/1.1
Host: sqlmap.sourceforge.net
-User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
+User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Connection: close
[hh:mm:55] [TRAFFIC IN] HTTP response (OK - 200):
@@ -3015,7 +3015,7 @@ X-Pad: avoid browser bug
[hh:mm:56] [TRAFFIC OUT] HTTP request:
GET /FAQs/SQLServerVersionDatabase/tabid/63/Default.aspx HTTP/1.1
Host: www.sqlsecurity.com
-User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
+User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
Cookie: .ASPXANONYMOUS=dvus03cqyQEkAAAANDI0M2QzZmUtOGRkOS00ZDQxLThhMTUtN2ExMWJiNWVjN2My0;
language=en-US
Connection: close
diff --git a/doc/README.pdf b/doc/README.pdf
index 1d170c94caebc0b6ffd2ed817c51bea97278cac0..eacd97264d3c6e750abcea42670becbd42ce28df 100644
GIT binary patch
delta 35693
zcmV)TK(W7~%n_u_5wJNFml5RyDSz!+%W~T`6y579xGObNp?DHRcd=u;>2%uEQC3M8
zumnqNBvJ;+H2(Vn1gKa9Ek#P)i7RackOuDs&bhb`z%ZIcFuEE*-=2*JKV2doVF;20
zvuJ!9aU5~V0H-(_PosBndAC@~)o?_hi0e}6A4=O#bS@S%*t5vYQ1Sdy;>JuvJBaH4KtmBbK#=)DQ=-e`Iy=&u^FNencDOuIJOI^ns
z)5n6+s2#ZB^@$VzvanwNpL|hB8{v(y$lQ18m5T&6Hf>X!?0=`2I>oOzs7A!JySjzeS7^|kj
zO_=NitV2B%;lOfSiu@pGqL!er?-1fe_G=jJ(Fhp7H^=E_yc5K{u!&!F=jZay9g>)j
z2#y-k8ILEt>c|MtIzT=HjVMDDnP?hv@7?bn6<^`w9vkMGGVJ;RDPWFwOjRo!dfqaoFrk-
zX>WD$MFwAl4zP0i(8^8ZkT)%!E2&K>Un%__GFX})6hxJT9FJT10{rm-_%o0HFXQoR
zhr7Xi?reMdv#-YSgA4#cV)C}6%^R*R#{SUbVVZyhfPav;V+!3T$D|(+wL@P2@n*a+
z`;I^YfgrRUeQd<;tc8q&O8`vMkl*AXzaa|=0Vz&fT+fT*L#BH8BoriqwZrC0PL&RJ
zV|uh%T`y^LCut%D42P*S;QMfPt!|Z8x{ox|#dJGqn6YC`%zH^=yLX!Lf1KekRY>
z?QN;_=zqn`p8STyF$NNZwiAaSqDPQ~_mY(CCdmXKN_vVNu@6aSvdktu{9q$ISw}#d
zhWCUw0Z6irfG@L|uZp)iR#{hbekAXu~rjH0OEl3E}od8x&lwcQ)818tkb>4tF>tjRK*RYF#&c<8ss
z(+#(3!e`3es!0@BFiKm-wwz!ATH!=HM@tDdr07C~nfO{(PhO$u+OBefJDZ2!Nwkpo
z5aO;>1IbB!r-}y?D}
!90>TMP8G?$xtWO}~;JE4_M$p0aokR7ko`c{83+F@H?;0%{NoiB<88V-NVwMS5o
zsuo8$i!#H-AZ%EEm0e6>squsAjtQPH!
_#YA%*A4~Lk2B`;fH$w4YhTsw=l9(82B_s!_dA+NWlwD
zLhv+|#G=eps%zQ7Zw76gkl#nY36uKxbbs5b)o<;G0_)5E+p2hgqF-->eh}OvYp;12
znPBED;@G4sV!5H9GC
c2wvvRxE@t!p6!$VQ7BS@
zg+w1KDGP&;XM1tih>0J}5dlumb;(<>6*5{6q7f>AeOLnMLjGX##GoDnk05l6*hiq&
z^Et`+D0!uQ_=ZiP*h9e-$RGrBqeTFcsigEx4op6H0~zUjP+QXd0I=ghEgpnGa!~T|
zO@~D7TOQREzK&o*TE2s
{8yXiDGqP#*KVfRYnJl
Kr`#g_n(mFQ}t=L2$y;xr*!;RY-G>;j7yt&gLSZ@-%
zqWNVvHAbFp7_rR>ey(-%G@>1&yIHel4a#E6SD{%uuKHo;U+L|)ma|*M`3-;K!PoWT
zXX;YDzvv|?^FhcnbPrG!EknanJ=Z~oH&HZ6(}}I$;)$E-+|^M#9aG*S*P7OmL!XTckWxSJ7Z#8INp4(69lsv6wi4
zh_ZQb^KzaH4T0E%J_*a6