Skip to content

Commit fe6e29f

Browse files
bdamelebdamele
committed
Minor updates to the user's manual, need still to write on new enhancements
1 parent 016118c commit fe6e29f

File tree

3 files changed

+71
-71
lines changed

3 files changed

+71
-71
lines changed

‎doc/README.html

Lines changed: 39 additions & 39 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@
88
<H1>sqlmap user's manual</H1>
99

1010
<H2>by
11-
<A HREF="mailto:bernardo.damele@gmail.com">Bernardo Damele A. G.</A></H2>version 0.6, 1st of September 2008
11+
<A HREF="mailto:bernardo.damele@gmail.com">Bernardo Damele A. G.</A></H2>version 0.6.1, 20th of October 2008
1212
<HR>
1313
<EM>This document is the user's manual to use
1414
<A HREF="http://sqlmap.sourceforge.net">sqlmap</A>.
@@ -73,7 +73,7 @@ <H2><A NAME="ss1.1">1.1</A> <A HREF="#toc1.1">Requirements</A>
7373
<A HREF="http://www.python.org">Python</A>,
7474
a dynamic object-oriented interpreted programming language.
7575
This makes the tool independent from the operating system since it only
76-
requires the Python interpreter.
76+
requires the Python interpreter version equal or above to 2.4.
7777
The interpreter is freely downloadable from its
7878
<A HREF="http://python.org/download/">official site</A>.
7979
To make it even easier, many GNU/Linux distributions come out of the box
@@ -292,19 +292,19 @@ <H2><A NAME="s3">3.</A> <A HREF="#toc3">Download and update</A></H2>
292292
<P>
293293
<UL>
294294
<LI>
295-
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.tar.gz">Source gzip compressed</A> operating system independent.</LI>
295+
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1.1.tar.gz">Source gzip compressed</A> operating system independent.</LI>
296296
<LI>
297-
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.tar.bz2">Source bzip2 compressed</A> operating system independent.</LI>
297+
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1.1.tar.bz2">Source bzip2 compressed</A> operating system independent.</LI>
298298
<LI>
299-
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.zip">Source zip compressed</A> operating system independent.</LI>
299+
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1.1.zip">Source zip compressed</A> operating system independent.</LI>
300300
<LI>
301-
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap_0.6-1_all.deb">DEB binary package</A> architecture independent for Debian and any
301+
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap_0.6.1.1-1_all.deb">DEB binary package</A> architecture independent for Debian and any
302302
other Debian derivated GNU/Linux distribution.</LI>
303303
<LI>
304-
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6-1.noarch.rpm">RPM binary package</A> architecture independent for Fedora and any
304+
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1.1-1.noarch.rpm">RPM binary package</A> architecture independent for Fedora and any
305305
other operating system that can install RPM packages.</LI>
306306
<LI>
307-
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6_exe.zip">Portable executable for Windows</A> that <B>does not require the Python
307+
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1.1_exe.zip">Portable executable for Windows</A> that <B>does not require the Python
308308
interpreter</B> to be installed on the operating system.</LI>
309309
</UL>
310310
</P>
@@ -331,7 +331,7 @@ <H2><A NAME="s5">5.</A> <A HREF="#toc5">Usage</A></H2>
331331
<PRE>
332332
$ python sqlmap.py -h
333333

334-
sqlmap/0.6 coded by Bernardo Damele A. G. &lt;bernardo.damele@gmail.com>
334+
sqlmap/0.6.1.1 coded by Bernardo Damele A. G. &lt;bernardo.damele@gmail.com>
335335
and Daniele Bellucci &lt;daniele.bellucci@gmail.com>
336336

337337
Usage: sqlmap.py [options] {-u &lt;URL> | -g &lt;google dork> | -c &lt;config file>}
@@ -528,7 +528,7 @@ <H3>Target URL and verbosity</H3>
528528
[hh:mm:28] [TRAFFIC OUT] HTTP request:
529529
GET /sqlmap/mysql/get_int.php?id=1&amp;cat=2 HTTP/1.1
530530
Host: 192.168.1.121:80
531-
User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
531+
User-agent: sqlmap/0.6.1.1 (http://sqlmap.sourceforge.net)
532532
Connection: close
533533
[...]
534534
[hh:mm:29] [INFO] testing MySQL
@@ -537,7 +537,7 @@ <H3>Target URL and verbosity</H3>
537537
GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2852%29%2C%20
538538
CHAR%2852%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%207994=7994&amp;cat=2 HTTP/1.1
539539
Host: 192.168.1.121:80
540-
User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
540+
User-agent: sqlmap/0.6.1.1 (http://sqlmap.sourceforge.net)
541541
Connection: close
542542
[...]
543543
</PRE>
@@ -555,7 +555,7 @@ <H3>Target URL and verbosity</H3>
555555
[hh:mm:32] [TRAFFIC OUT] HTTP request:
556556
GET /sqlmap/mysql/get_int.php?id=1&amp;cat=2 HTTP/1.1
557557
Host: 192.168.1.121:80
558-
User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
558+
User-agent: sqlmap/0.6.1.1 (http://sqlmap.sourceforge.net)
559559
Connection: close
560560

561561
[hh:mm:32] [TRAFFIC IN] HTTP response (OK - 200):
@@ -573,7 +573,7 @@ <H3>Target URL and verbosity</H3>
573573
GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2852%29%2C%20
574574
CHAR%2852%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%204435=4435&amp;cat=2 HTTP/1.1
575575
Host: 192.168.1.121:80
576-
User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
576+
User-agent: sqlmap/0.6.1.1 (http://sqlmap.sourceforge.net)
577577
Connection: close
578578

579579
[hh:mm:33] [TRAFFIC IN] HTTP response (OK - 200):
@@ -600,7 +600,7 @@ <H3>Target URL and verbosity</H3>
600600
[hh:mm:23] [TRAFFIC OUT] HTTP request:
601601
GET /sqlmap/mysql/get_int.php?id=1&amp;cat=2 HTTP/1.1
602602
Host: 192.168.1.121:80
603-
User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
603+
User-agent: sqlmap/0.6.1.1 (http://sqlmap.sourceforge.net)
604604
Connection: close
605605

606606
[hh:mm:23] [TRAFFIC IN] HTTP response (OK - 200):
@@ -625,7 +625,7 @@ <H3>Target URL and verbosity</H3>
625625
GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2851%29%2C%20
626626
CHAR%2851%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%201855=1855&amp;cat=2 HTTP/1.1
627627
Host: 192.168.1.121:80
628-
User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
628+
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
629629
Connection: close
630630

631631
[hh:mm:24] [TRAFFIC IN] HTTP response (OK - 200):
@@ -742,7 +742,7 @@ <H3>Testable parameter(s)</H3>
742742
<BLOCKQUOTE><CODE>
743743
<PRE>
744744
$ python sqlmap.py -u "http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&amp;cat=2" -v 1 \
745-
-p user-agent --user-agent "sqlmap/0.6 (http://sqlmap.sourceforge.net)"
745+
-p user-agent --user-agent "sqlmap/0.6.1 (http://sqlmap.sourceforge.net)"
746746

747747
[hh:mm:40] [WARNING] the testable parameter 'user-agent' you provided is not into the GET
748748
[hh:mm:40] [INFO] testing connection to the target url
@@ -888,7 +888,7 @@ <H3>HTTP <CODE>Cookie</CODE> header</H3>
888888
[hh:mm:39] [TRAFFIC OUT] HTTP request:
889889
GET /sqlmap/get_str.asp?name=luther HTTP/1.1
890890
Host: 192.168.1.125:80
891-
User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
891+
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
892892
Cookie: ASPSESSIONIDSABTRCAS=HPCBGONANJBGFJFHGOKDMCGJ
893893
Connection: close
894894

@@ -900,7 +900,7 @@ <H3>HTTP <CODE>Cookie</CODE> header</H3>
900900
GET /sqlmap/get_str.asp?name=luther HTTP/1.1
901901
Host: 192.168.1.125:80
902902
Cookie: ASPSESSIONIDSABTRCAS=469
903-
User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
903+
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
904904
Connection: close
905905

906906
[hh:mm:40] [WARNING] Cookie parameter 'ASPSESSIONIDSABTRCAS' is not dynamic
@@ -948,7 +948,7 @@ <H3>HTTP <CODE>Referer</CODE> header</H3>
948948
GET /sqlmap/pgsql/get_int.php?id=1&amp;cat=2 HTTP/1.1
949949
Host: 192.168.1.121:80
950950
Referer: http://www.google.com
951-
User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
951+
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
952952
Connection: close
953953
[...]
954954
</PRE>
@@ -965,7 +965,7 @@ <H3>HTTP <CODE>User-Agent</CODE> header</H3>
965965
<P>
966966
<BLOCKQUOTE><CODE>
967967
<PRE>
968-
sqlmap/0.6 (http://sqlmap.sourceforge.net)
968+
sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
969969
</PRE>
970970
</CODE></BLOCKQUOTE>
971971
</P>
@@ -1051,7 +1051,7 @@ <H3>HTTP <CODE>Basic</CODE> and <CODE>Digest</CODE> authentications</H3>
10511051
GET /sqlmap/mysql/basic/get_int.php?id=1&amp;cat=2 HTTP/1.1
10521052
Host: 192.168.1.121:80
10531053
Authorization: Basic dGVzdHVzZXI6dGVzdHBhc3M=
1054-
User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
1054+
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
10551055
Connection: close
10561056
[...]
10571057

@@ -1068,7 +1068,7 @@ <H3>HTTP <CODE>Basic</CODE> and <CODE>Digest</CODE> authentications</H3>
10681068
uri="/sqlmap/mysql/digest/get_int.php?id=1&amp;cat=2",
10691069
response="e1bf3738b4bbe04e197a12fb134e13a2", algorithm="MD5", qop=auth, nc=00000001,
10701070
cnonce="df1c0902c931b640"
1071-
User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
1071+
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
10721072
Connection: close
10731073
[...]
10741074
</PRE>
@@ -1193,7 +1193,7 @@ <H3>String match</H3>
11931193
[hh:mm:50] [TRAFFIC OUT] HTTP request:
11941194
GET /sqlmap/mysql/get_int_refresh.php?id=1&amp;cat=2 HTTP/1.1
11951195
Host: 192.168.1.121:80
1196-
User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
1196+
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
11971197
Connection: close
11981198

11991199
[hh:mm:50] [TRAFFIC IN] HTTP response (OK - 200):
@@ -1215,7 +1215,7 @@ <H3>String match</H3>
12151215
[hh:mm:51] [TRAFFIC OUT] HTTP request:
12161216
GET /sqlmap/mysql/get_int_refresh.php?id=1&amp;cat=2 HTTP/1.1
12171217
Host: 192.168.1.121:80
1218-
User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
1218+
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
12191219
Connection: close
12201220

12211221
[hh:mm:51] [TRAFFIC IN] HTTP response (OK - 200):
@@ -1237,7 +1237,7 @@ <H3>String match</H3>
12371237
[hh:mm:51] [TRAFFIC OUT] HTTP request:
12381238
GET /sqlmap/mysql/get_int_refresh.php?id=1&amp;cat=2 HTTP/1.1
12391239
Host: 192.168.1.121:80
1240-
User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
1240+
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
12411241
Connection: close
12421242

12431243
[hh:mm:51] [TRAFFIC IN] HTTP response (OK - 200):
@@ -1549,9 +1549,9 @@ <H3>Extensive database management system fingerprint</H3>
15491549
[hh:mm:03] [INFO] performed 13 queries in 0 seconds
15501550
[hh:mm:03] [INFO] query: @@VERSION
15511551
[hh:mm:03] [INFO] retrieved: Microsoft SQL Server 2000 - 8.00.194 (Intel X86)
1552-
Aug 6 2000 00:57:48
1553-
Copyright (c) 1988-2000 Microsoft Corporation
1554-
Standard Edition on Windows NT 5.0 (Build 2195: Service Pack 4)
1552+
Aug 6 2000 00:57:48
1553+
Copyright (c) 1988-2000 Microsoft Corporation
1554+
Standard Edition on Windows NT 5.0 (Build 2195: Service Pack 4)
15551555

15561556
[hh:mm:08] [INFO] performed 1308 queries in 4 seconds
15571557
back-end DBMS: active fingerprint: Microsoft SQL Server 2000
@@ -2064,7 +2064,7 @@ <H3>Dump database tables entries</H3>
20642064
| 1 | luther | blissett |
20652065
| 2 | fluffy | bunny |
20662066
| 3 | wu | ming |
2067-
| 4 | sqlmap/0.6 (http://sqlmap.sourceforge.net) | user agent header |
2067+
| 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header |
20682068
| 5 | NULL | nameisnull |
20692069
+----+--------------------------------------------+-------------------+
20702070
</PRE>
@@ -2118,7 +2118,7 @@ <H3>Dump database tables entries</H3>
21182118
| 1 | luther | blissett |
21192119
| 2 | fluffy | bunny |
21202120
| 3 | wu | ming |
2121-
| 4 | sqlmap/0.6 (http://sqlmap.sourceforge.net) | user agent header |
2121+
| 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header |
21222122
| 5 | | nameisnull |
21232123
+----+--------------------------------------------+-------------------+
21242124

@@ -2132,7 +2132,7 @@ <H3>Dump database tables entries</H3>
21322132
"1","luther","blissett"
21332133
"2","fluffy","bunny"
21342134
"3","wu","ming"
2135-
"4","sqlmap/0.6 (http://sqlmap.sourceforge.net)","user agent header"
2135+
"4","sqlmap/0.6.1 (http://sqlmap.sourceforge.net)","user agent header"
21362136
"5","","nameisnull"
21372137
</PRE>
21382138
</CODE></BLOCKQUOTE>
@@ -2159,7 +2159,7 @@ <H3>Dump all databases tables entries</H3>
21592159
| 1 | luther | blissett |
21602160
| 2 | fluffy | bunny |
21612161
| 3 | wu | ming |
2162-
| 4 | sqlmap/0.6 (http://sqlmap.sourceforge.net) | user agent header |
2162+
| 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header |
21632163
| 5 | NULL | nameisnull |
21642164
+----+--------------------------------------------+-------------------+
21652165

@@ -2249,7 +2249,7 @@ <H3>Dump all databases tables entries</H3>
22492249
+----+--------------------------------------------+-------------------+
22502250
| id | name | surname |
22512251
+----+--------------------------------------------+-------------------+
2252-
| 4 | sqlmap/0.6 (http://sqlmap.sourceforge.net) | user agent header |
2252+
| 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header |
22532253
| 2 | fluffy | bunny |
22542254
| 1 | luther | blisset |
22552255
| 3 | wu | ming |
@@ -2782,9 +2782,9 @@ <H3>Use the UNION SELECT query SQL injection</H3>
27822782
banner:
27832783
---
27842784
Microsoft SQL Server 2000 - 8.00.194 (Intel X86)
2785-
Aug 6 2000 00:57:48
2786-
Copyright (c) 1988-2000 Microsoft Corporation
2787-
Standard Edition on Windows NT 5.0 (Build 2195: Service Pack 4)
2785+
Aug 6 2000 00:57:48
2786+
Copyright (c) 1988-2000 Microsoft Corporation
2787+
Standard Edition on Windows NT 5.0 (Build 2195: Service Pack 4)
27882788
---
27892789
</PRE>
27902790
</CODE></BLOCKQUOTE>
@@ -2812,7 +2812,7 @@ <H3>Use the UNION SELECT query SQL injection</H3>
28122812
%2C%20CHAR%2832%29%29%2CCHAR%28122%2C110%2C105%2C89%2C121%2C65%29%29%2C%20NULL--%20AND%2
28132813
06043=6043&amp;cat=2 HTTP/1.1
28142814
Host: 192.168.1.121:80
2815-
User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
2815+
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
28162816
Connection: close
28172817

28182818
[hh:mm:25] [TRAFFIC IN] HTTP response (OK - 200):
@@ -2954,7 +2954,7 @@ <H3>Update sqlmap to the latest stable version</H3>
29542954
[hh:mm:55] [TRAFFIC OUT] HTTP request:
29552955
GET /doc/VERSION HTTP/1.1
29562956
Host: sqlmap.sourceforge.net
2957-
User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
2957+
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
29582958
Connection: close
29592959

29602960
[hh:mm:55] [TRAFFIC IN] HTTP response (OK - 200):
@@ -2973,7 +2973,7 @@ <H3>Update sqlmap to the latest stable version</H3>
29732973
[hh:mm:56] [TRAFFIC OUT] HTTP request:
29742974
GET /FAQs/SQLServerVersionDatabase/tabid/63/Default.aspx HTTP/1.1
29752975
Host: www.sqlsecurity.com
2976-
User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
2976+
User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
29772977
Cookie: .ASPXANONYMOUS=dvus03cqyQEkAAAANDI0M2QzZmUtOGRkOS00ZDQxLThhMTUtN2ExMWJiNWVjN2My0;
29782978
language=en-US
29792979
Connection: close

‎doc/README.pdf

84 Bytes
Binary file not shown.

0 commit comments

Comments
 (0)