sqlmap --where="table_name <> 'tbllog%'" #2329

Open
nininono opened this Issue Jan 2, 2017 · 2 comments

Projects

None yet

2 participants

@nininono
nininono commented Jan 2, 2017

hi
my target have 9 database
a database named "Account"
account database have 1300 tables!
i want dump 800 tables its
my queri is:
sqlmap -u "target.com" --batch -D Account --tables --where="table_name <> 'tbllog%'"
but it is't working, because it dump all tables again... but i don't want all tables..
please help me...

@nininono
nininono commented Jan 2, 2017

i wrote script :
sqlmap -u "target.com" --batch -D Account --tables --start 20 --stop 400
but i want to know sqlmap tools can filter tables with condition "--where"??
thank you

@stamparm
Member
stamparm commented Jan 2, 2017

--where is usable only for table dumping. If sqlmap would use --where in all queries everything would simply stop working. For example, while performing table dump sqlmap has to check whether the table exists, what are its column names and types and start dumping it. If --where would be used in all queries majority of queries would just stop working as given WHERE condition will evaluate to false.

@stamparm stamparm self-assigned this Jan 2, 2017
@stamparm stamparm added the support label Jan 2, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment