Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit 0c5d3df

Browse files
bdamelebdamele
committed
sqlmap 0.6.3-rc1:
* Minor enhancement to be able to specify the number of seconds to wait between each HTTP request. * Minor bug fix to handle session.error and session.timeout in HTTP requests. * Updated documentation.
1 parent 544ced5 commit 0c5d3df

11 files changed

Lines changed: 139 additions & 80 deletions

File tree

‎doc/ChangeLog‎

Lines changed: 6 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,16 @@
11
sqlmap (0.6.3-1) stable; urgency=low
22

3+
* Minor enhancement to be able to specify the number of seconds to wait
4+
between each HTTP request;
5+
* Minor improvements to sqlmap Debian package files: sqlmap uploaded
6+
to official Debian project repository;
7+
* Minor bug fix to handle session.error and session.timeout in HTTP
8+
requests;
39
* Minor bug fix to correctly dump table entries when the column is
410
provided;
511

612
-- Bernardo Damele A. G. <[email protected]> Day, X YYY 2008 10:00:00 +0000
713

8-
914
sqlmap (0.6.2-1) stable; urgency=low
1015

1116
* Major bug fix to correctly dump tables entries when --stop is not
@@ -32,7 +37,6 @@ sqlmap (0.6.2-1) stable; urgency=low
3237

3338
-- Bernardo Damele A. G. <[email protected]> Sun, 2 Nov 2008 19:00:00 +0000
3439

35-
3640
sqlmap (0.6.1-1) stable; urgency=low
3741

3842
* Major bug fix to blind SQL injection bisection algorithm to handle an
@@ -54,7 +58,6 @@ sqlmap (0.6.1-1) stable; urgency=low
5458

5559
-- Bernardo Damele A. G. <[email protected]> Fri, 20 Oct 2008 10:00:00 +0000
5660

57-
5861
sqlmap (0.6-1) stable; urgency=low
5962

6063
* Complete code refactor and many bugs fixed;
@@ -120,7 +123,6 @@ sqlmap (0.6-1) stable; urgency=low
120123

121124
-- Bernardo Damele A. G. <[email protected]> Mon, 1 Sep 2008 10:00:00 +0100
122125

123-
124126
sqlmap (0.5-1) stable; urgency=low
125127

126128
* Added support for Oracle database management system
@@ -168,7 +170,6 @@ sqlmap (0.5-1) stable; urgency=low
168170

169171
-- Bernardo Damele A. G. <[email protected]> Sun, 4 Nov 2007 20:00:00 +0100
170172

171-
172173
sqlmap (0.4-1) stable; urgency=low
173174

174175
* Added DBMS fingerprint based also upon HTML error messages parsing
@@ -214,7 +215,6 @@ sqlmap (0.4-1) stable; urgency=low
214215

215216
-- Bernardo Damele A. G. <[email protected]> Fri, 15 Jun 2007 20:00:00 +0100
216217

217-
218218
sqlmap (0.3-1) stable; urgency=low
219219

220220
* Added module for MS SQL Server;
@@ -235,7 +235,6 @@ sqlmap (0.3-1) stable; urgency=low
235235

236236
-- Bernardo Damele A. G. <[email protected]> Sat, 20 Jan 2007 20:00:00 +0100
237237

238-
239238
sqlmap (0.2-1) stable; urgency=low
240239

241240
* complete refactor of entire program;

‎doc/README.html‎

Lines changed: 41 additions & 33 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@
88
<H1>sqlmap user's manual</H1>
99

1010
<H2>by
11-
<A HREF="mailto:[email protected]">Bernardo Damele A. G.</A></H2>version 0.6.2, 4th of November 2008
11+
<A HREF="mailto:[email protected]">Bernardo Damele A. G.</A></H2>version 0.6.3, DDth of November 2008
1212
<HR>
1313
<EM>This document is the user's manual to use
1414
<A HREF="http://sqlmap.sourceforge.net">sqlmap</A>.
@@ -295,19 +295,19 @@ <H2><A NAME="s3">3.</A> <A HREF="#toc3">Download and update</A></H2>
295295
<P>
296296
<UL>
297297
<LI>
298-
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2.tar.gz">Source gzip compressed</A> operating system independent.</LI>
298+
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.3.tar.gz">Source gzip compressed</A> operating system independent.</LI>
299299
<LI>
300-
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2.tar.bz2">Source bzip2 compressed</A> operating system independent.</LI>
300+
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.3.tar.bz2">Source bzip2 compressed</A> operating system independent.</LI>
301301
<LI>
302-
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2.zip">Source zip compressed</A> operating system independent.</LI>
302+
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.3.zip">Source zip compressed</A> operating system independent.</LI>
303303
<LI>
304-
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap_0.6.2-1_all.deb">DEB binary package</A> architecture independent for Debian and any
304+
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap_0.6.3-1_all.deb">DEB binary package</A> architecture independent for Debian and any
305305
other Debian derivated GNU/Linux distribution.</LI>
306306
<LI>
307-
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2-1.noarch.rpm">RPM binary package</A> architecture independent for Fedora and any
307+
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.3-1.noarch.rpm">RPM binary package</A> architecture independent for Fedora and any
308308
other operating system that can install RPM packages.</LI>
309309
<LI>
310-
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.2_exe.zip">Portable executable for Windows</A> that <B>does not require the Python
310+
<A HREF="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.3_exe.zip">Portable executable for Windows</A> that <B>does not require the Python
311311
interpreter</B> to be installed on the operating system.</LI>
312312
</UL>
313313
</P>
@@ -334,7 +334,7 @@ <H2><A NAME="s5">5.</A> <A HREF="#toc5">Usage</A></H2>
334334
<PRE>
335335
$ python sqlmap.py -h
336336

337-
sqlmap/0.6.2 coded by Bernardo Damele A. G. &lt;[email protected]>
337+
sqlmap/0.6.3 coded by Bernardo Damele A. G. &lt;[email protected]>
338338
and Daniele Bellucci &lt;[email protected]>
339339

340340
Usage: sqlmap.py [options] {-u &lt;URL> | -g &lt;google dork> | -c &lt;config file>}
@@ -535,7 +535,7 @@ <H3>Target URL and verbosity</H3>
535535
[hh:mm:28] [TRAFFIC OUT] HTTP request:
536536
GET /sqlmap/mysql/get_int.php?id=1&amp;cat=2 HTTP/1.1
537537
Host: 192.168.1.121:80
538-
User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
538+
User-agent: sqlmap/0.6.3 (http://sqlmap.sourceforge.net)
539539
Connection: close
540540
[...]
541541
[hh:mm:29] [INFO] testing MySQL
@@ -544,7 +544,7 @@ <H3>Target URL and verbosity</H3>
544544
GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2852%29%2C%20
545545
CHAR%2852%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%207994=7994&amp;cat=2 HTTP/1.1
546546
Host: 192.168.1.121:80
547-
User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
547+
User-agent: sqlmap/0.6.3 (http://sqlmap.sourceforge.net)
548548
Connection: close
549549
[...]
550550
</PRE>
@@ -562,7 +562,7 @@ <H3>Target URL and verbosity</H3>
562562
[hh:mm:32] [TRAFFIC OUT] HTTP request:
563563
GET /sqlmap/mysql/get_int.php?id=1&amp;cat=2 HTTP/1.1
564564
Host: 192.168.1.121:80
565-
User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
565+
User-agent: sqlmap/0.6.3 (http://sqlmap.sourceforge.net)
566566
Connection: close
567567

568568
[hh:mm:32] [TRAFFIC IN] HTTP response (OK - 200):
@@ -580,7 +580,7 @@ <H3>Target URL and verbosity</H3>
580580
GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2852%29%2C%20
581581
CHAR%2852%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%204435=4435&amp;cat=2 HTTP/1.1
582582
Host: 192.168.1.121:80
583-
User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
583+
User-agent: sqlmap/0.6.3 (http://sqlmap.sourceforge.net)
584584
Connection: close
585585

586586
[hh:mm:33] [TRAFFIC IN] HTTP response (OK - 200):
@@ -607,7 +607,7 @@ <H3>Target URL and verbosity</H3>
607607
[hh:mm:23] [TRAFFIC OUT] HTTP request:
608608
GET /sqlmap/mysql/get_int.php?id=1&amp;cat=2 HTTP/1.1
609609
Host: 192.168.1.121:80
610-
User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
610+
User-agent: sqlmap/0.6.3 (http://sqlmap.sourceforge.net)
611611
Connection: close
612612

613613
[hh:mm:23] [TRAFFIC IN] HTTP response (OK - 200):
@@ -632,7 +632,7 @@ <H3>Target URL and verbosity</H3>
632632
GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2851%29%2C%20
633633
CHAR%2851%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%201855=1855&amp;cat=2 HTTP/1.1
634634
Host: 192.168.1.121:80
635-
User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
635+
User-agent: sqlmap/0.6.3 (http://sqlmap.sourceforge.net)
636636
Connection: close
637637

638638
[hh:mm:24] [TRAFFIC IN] HTTP response (OK - 200):
@@ -749,7 +749,7 @@ <H3>Testable parameter(s)</H3>
749749
<BLOCKQUOTE><CODE>
750750
<PRE>
751751
$ python sqlmap.py -u "http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&amp;cat=2" -v 1 \
752-
-p user-agent --user-agent "sqlmap/0.6.2 (http://sqlmap.sourceforge.net)"
752+
-p user-agent --user-agent "sqlmap/0.6.3 (http://sqlmap.sourceforge.net)"
753753

754754
[hh:mm:40] [WARNING] the testable parameter 'user-agent' you provided is not into the GET
755755
[hh:mm:40] [INFO] testing connection to the target url
@@ -895,7 +895,7 @@ <H3>HTTP <CODE>Cookie</CODE> header</H3>
895895
[hh:mm:39] [TRAFFIC OUT] HTTP request:
896896
GET /sqlmap/get_str.asp?name=luther HTTP/1.1
897897
Host: 192.168.1.125:80
898-
User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
898+
User-agent: sqlmap/0.6.3 (http://sqlmap.sourceforge.net)
899899
Cookie: ASPSESSIONIDSABTRCAS=HPCBGONANJBGFJFHGOKDMCGJ
900900
Connection: close
901901

@@ -907,7 +907,7 @@ <H3>HTTP <CODE>Cookie</CODE> header</H3>
907907
GET /sqlmap/get_str.asp?name=luther HTTP/1.1
908908
Host: 192.168.1.125:80
909909
Cookie: ASPSESSIONIDSABTRCAS=469
910-
User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
910+
User-agent: sqlmap/0.6.3 (http://sqlmap.sourceforge.net)
911911
Connection: close
912912

913913
[hh:mm:40] [WARNING] Cookie parameter 'ASPSESSIONIDSABTRCAS' is not dynamic
@@ -955,7 +955,7 @@ <H3>HTTP <CODE>Referer</CODE> header</H3>
955955
GET /sqlmap/pgsql/get_int.php?id=1&amp;cat=2 HTTP/1.1
956956
Host: 192.168.1.121:80
957957
Referer: http://www.google.com
958-
User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
958+
User-agent: sqlmap/0.6.3 (http://sqlmap.sourceforge.net)
959959
Connection: close
960960
[...]
961961
</PRE>
@@ -972,7 +972,7 @@ <H3>HTTP <CODE>User-Agent</CODE> header</H3>
972972
<P>
973973
<BLOCKQUOTE><CODE>
974974
<PRE>
975-
sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
975+
sqlmap/0.6.3 (http://sqlmap.sourceforge.net)
976976
</PRE>
977977
</CODE></BLOCKQUOTE>
978978
</P>
@@ -1058,7 +1058,7 @@ <H3>HTTP <CODE>Basic</CODE> and <CODE>Digest</CODE> authentications</H3>
10581058
GET /sqlmap/mysql/basic/get_int.php?id=1&amp;cat=2 HTTP/1.1
10591059
Host: 192.168.1.121:80
10601060
Authorization: Basic dGVzdHVzZXI6dGVzdHBhc3M=
1061-
User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
1061+
User-agent: sqlmap/0.6.3 (http://sqlmap.sourceforge.net)
10621062
Connection: close
10631063
[...]
10641064

@@ -1075,7 +1075,7 @@ <H3>HTTP <CODE>Basic</CODE> and <CODE>Digest</CODE> authentications</H3>
10751075
uri="/sqlmap/mysql/digest/get_int.php?id=1&amp;cat=2",
10761076
response="e1bf3738b4bbe04e197a12fb134e13a2", algorithm="MD5", qop=auth, nc=00000001,
10771077
cnonce="df1c0902c931b640"
1078-
User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
1078+
User-agent: sqlmap/0.6.3 (http://sqlmap.sourceforge.net)
10791079
Connection: close
10801080
[...]
10811081
</PRE>
@@ -1164,6 +1164,14 @@ <H3>Concurrent HTTP requests</H3>
11641164
seven HTTP requests, the maximum to retrieve a query output character.</P>
11651165

11661166

1167+
<H3>Delay in seconds between each HTTP request</H3>
1168+
1169+
<P>Option: <CODE>--delay</CODE></P>
1170+
1171+
<P>It is possible to specify a number of seconds to wait between each HTTP
1172+
request. The valid value is a float, for instance 0.5.</P>
1173+
1174+
11671175
<H2><A NAME="ss5.2">5.2</A> <A HREF="#toc5.2">Injection</A>
11681176
</H2>
11691177

@@ -1200,7 +1208,7 @@ <H3>String match</H3>
12001208
[hh:mm:50] [TRAFFIC OUT] HTTP request:
12011209
GET /sqlmap/mysql/get_int_refresh.php?id=1&amp;cat=2 HTTP/1.1
12021210
Host: 192.168.1.121:80
1203-
User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
1211+
User-agent: sqlmap/0.6.3 (http://sqlmap.sourceforge.net)
12041212
Connection: close
12051213

12061214
[hh:mm:50] [TRAFFIC IN] HTTP response (OK - 200):
@@ -1222,7 +1230,7 @@ <H3>String match</H3>
12221230
[hh:mm:51] [TRAFFIC OUT] HTTP request:
12231231
GET /sqlmap/mysql/get_int_refresh.php?id=1&amp;cat=2 HTTP/1.1
12241232
Host: 192.168.1.121:80
1225-
User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
1233+
User-agent: sqlmap/0.6.3 (http://sqlmap.sourceforge.net)
12261234
Connection: close
12271235

12281236
[hh:mm:51] [TRAFFIC IN] HTTP response (OK - 200):
@@ -1244,7 +1252,7 @@ <H3>String match</H3>
12441252
[hh:mm:51] [TRAFFIC OUT] HTTP request:
12451253
GET /sqlmap/mysql/get_int_refresh.php?id=1&amp;cat=2 HTTP/1.1
12461254
Host: 192.168.1.121:80
1247-
User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
1255+
User-agent: sqlmap/0.6.3 (http://sqlmap.sourceforge.net)
12481256
Connection: close
12491257

12501258
[hh:mm:51] [TRAFFIC IN] HTTP response (OK - 200):
@@ -2072,7 +2080,7 @@ <H3>Dump database tables entries</H3>
20722080
| 1 | luther | blissett |
20732081
| 2 | fluffy | bunny |
20742082
| 3 | wu | ming |
2075-
| 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
2083+
| 4 | sqlmap/0.6.3 (http://sqlmap.sourceforge.net) | user agent header |
20762084
| 5 | NULL | nameisnull |
20772085
+----+----------------------------------------------+-------------------+
20782086
</PRE>
@@ -2126,7 +2134,7 @@ <H3>Dump database tables entries</H3>
21262134
| 1 | luther | blissett |
21272135
| 2 | fluffy | bunny |
21282136
| 3 | wu | ming |
2129-
| 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
2137+
| 4 | sqlmap/0.6.3 (http://sqlmap.sourceforge.net) | user agent header |
21302138
| 5 | | nameisnull |
21312139
+----+----------------------------------------------+-------------------+
21322140

@@ -2140,7 +2148,7 @@ <H3>Dump database tables entries</H3>
21402148
"1","luther","blissett"
21412149
"2","fluffy","bunny"
21422150
"3","wu","ming"
2143-
"4","sqlmap/0.6.2 (http://sqlmap.sourceforge.net)","user agent header"
2151+
"4","sqlmap/0.6.3 (http://sqlmap.sourceforge.net)","user agent header"
21442152
"5","","nameisnull"
21452153
</PRE>
21462154
</CODE></BLOCKQUOTE>
@@ -2170,7 +2178,7 @@ <H3>Dump database tables entries</H3>
21702178
+----+----------------------------------------------+-------------------+
21712179
| 2 | fluffy | bunny |
21722180
| 3 | wu | ming |
2173-
| 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
2181+
| 4 | sqlmap/0.6.3 (http://sqlmap.sourceforge.net) | user agent header |
21742182
+----+----------------------------------------------+-------------------+
21752183
</PRE>
21762184
</CODE></BLOCKQUOTE>
@@ -2201,7 +2209,7 @@ <H3>Dump all databases tables entries</H3>
22012209
| 1 | luther | blissett |
22022210
| 2 | fluffy | bunny |
22032211
| 3 | wu | ming |
2204-
| 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
2212+
| 4 | sqlmap/0.6.3 (http://sqlmap.sourceforge.net) | user agent header |
22052213
| 5 | NULL | nameisnull |
22062214
+----+----------------------------------------------+-------------------+
22072215

@@ -2291,7 +2299,7 @@ <H3>Dump all databases tables entries</H3>
22912299
+----+----------------------------------------------+-------------------+
22922300
| id | name | surname |
22932301
+----+----------------------------------------------+-------------------+
2294-
| 4 | sqlmap/0.6.2 (http://sqlmap.sourceforge.net) | user agent header |
2302+
| 4 | sqlmap/0.6.3 (http://sqlmap.sourceforge.net) | user agent header |
22952303
| 2 | fluffy | bunny |
22962304
| 1 | luther | blisset |
22972305
| 3 | wu | ming |
@@ -2854,7 +2862,7 @@ <H3>Use the UNION SELECT query SQL injection</H3>
28542862
%2C%20CHAR%2832%29%29%2CCHAR%28122%2C110%2C105%2C89%2C121%2C65%29%29%2C%20NULL--%20AND%2
28552863
06043=6043&amp;cat=2 HTTP/1.1
28562864
Host: 192.168.1.121:80
2857-
User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
2865+
User-agent: sqlmap/0.6.3 (http://sqlmap.sourceforge.net)
28582866
Connection: close
28592867

28602868
[hh:mm:25] [TRAFFIC IN] HTTP response (OK - 200):
@@ -2996,7 +3004,7 @@ <H3>Update sqlmap to the latest stable version</H3>
29963004
[hh:mm:55] [TRAFFIC OUT] HTTP request:
29973005
GET /doc/VERSION HTTP/1.1
29983006
Host: sqlmap.sourceforge.net
2999-
User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
3007+
User-agent: sqlmap/0.6.3 (http://sqlmap.sourceforge.net)
30003008
Connection: close
30013009

30023010
[hh:mm:55] [TRAFFIC IN] HTTP response (OK - 200):
@@ -3015,7 +3023,7 @@ <H3>Update sqlmap to the latest stable version</H3>
30153023
[hh:mm:56] [TRAFFIC OUT] HTTP request:
30163024
GET /FAQs/SQLServerVersionDatabase/tabid/63/Default.aspx HTTP/1.1
30173025
Host: www.sqlsecurity.com
3018-
User-agent: sqlmap/0.6.2 (http://sqlmap.sourceforge.net)
3026+
User-agent: sqlmap/0.6.3 (http://sqlmap.sourceforge.net)
30193027
Cookie: .ASPXANONYMOUS=dvus03cqyQEkAAAANDI0M2QzZmUtOGRkOS00ZDQxLThhMTUtN2ExMWJiNWVjN2My0;
30203028
language=en-US
30213029
Connection: close

‎doc/README.pdf‎

1.43 KB
Binary file not shown.

0 commit comments

Comments
 (0)