@@ -2834,12 +2834,12 @@ $ python sqlmap.py -u "http://172.16.213.131/sqlmap/oracle/get_int.php?id=1" --i
28342834[...]
28352835back-end DBMS: Oracle
28362836
2837- [16:40 :57] [INFO] testing if current user is DBA
2838- [16:40 :58] [DEBUG] query: SELECT (CASE WHEN ((SELECT GRANTED_ROLE FROM DBA_ROLE_PRIVS WHERE
2837+ [hh:mm :57] [INFO] testing if current user is DBA
2838+ [hh:mm :58] [DEBUG] query: SELECT (CASE WHEN ((SELECT GRANTED_ROLE FROM DBA_ROLE_PRIVS WHERE
28392839GRANTEE=SYS.LOGIN_USER AND GRANTED_ROLE=CHR(68)||CHR(66)||CHR(65))=CHR(68)||CHR(66)||CHR(65))
28402840THEN 1 ELSE 0 END) FROM DUAL
2841- [16:40 :58] [INFO] retrieved: 1
2842- [16:40 :58] [DEBUG] performed 13 queries in 0 seconds
2841+ [hh:mm :58] [INFO] retrieved: 1
2842+ [hh:mm :58] [DEBUG] performed 13 queries in 0 seconds
28432843current user is DBA: 'True'
28442844</verb></tscreen>
28452845
@@ -3233,15 +3233,15 @@ $ python sqlmap.py -u "http://172.16.213.131/sqlmap/mysql/get_int.php?id=1" --co
32333233[...]
32343234back-end DBMS: MySQL >= 5.0.0
32353235
3236- [16:44 :20] [INFO] fetching columns for table 'users' on database 'testdb'
3237- [16:44 :20] [INFO] fetching number of columns for table 'users' on database 'testdb'
3238- [16:44 :20] [INFO] retrieved: 3
3239- [16:44 :20] [INFO] retrieved: id
3240- [16:44 :20] [INFO] retrieved: int(11)
3241- [16:44 :21] [INFO] retrieved: name
3242- [16:44 :21] [INFO] retrieved: varchar(500)
3243- [16:44 :21] [INFO] retrieved: surname
3244- [16:44 :21] [INFO] retrieved: varchar(1000)
3236+ [hh:mm :20] [INFO] fetching columns for table 'users' on database 'testdb'
3237+ [hh:mm :20] [INFO] fetching number of columns for table 'users' on database 'testdb'
3238+ [hh:mm :20] [INFO] retrieved: 3
3239+ [hh:mm :20] [INFO] retrieved: id
3240+ [hh:mm :20] [INFO] retrieved: int(11)
3241+ [hh:mm :21] [INFO] retrieved: name
3242+ [hh:mm :21] [INFO] retrieved: varchar(500)
3243+ [hh:mm :21] [INFO] retrieved: surname
3244+ [hh:mm :21] [INFO] retrieved: varchar(1000)
32453245Database: testdb
32463246Table: users
32473247[3 columns]
@@ -3311,19 +3311,19 @@ $ python sqlmap.py -u "http://172.16.213.131/sqlmap/mysql/get_int.php?id=1" --co
33113311[...]
33123312back-end DBMS: MySQL >= 5.0.0
33133313
3314- [16:47 :45] [WARNING] missing database parameter, sqlmap is going to use the current
3314+ [hh:mm :45] [WARNING] missing database parameter, sqlmap is going to use the current
33153315database to enumerate table 'users' columns
3316- [16:47 :45] [INFO] fetching current database
3317- [16:47 :45] [INFO] retrieved: testdb
3318- [16:47 :45] [INFO] fetching columns for table 'users' on database 'testdb'
3319- [16:47 :45] [INFO] fetching number of columns for table 'users' on database 'testdb'
3320- [16:47 :45] [INFO] retrieved: 3
3321- [16:47 :45] [INFO] retrieved: id
3322- [16:47 :45] [INFO] retrieved: int(11)
3323- [16:47 :46] [INFO] retrieved: name
3324- [16:47 :46] [INFO] retrieved: varchar(500)
3325- [16:47 :46] [INFO] retrieved: surname
3326- [16:47 :46] [INFO] retrieved: varchar(1000)
3316+ [hh:mm :45] [INFO] fetching current database
3317+ [hh:mm :45] [INFO] retrieved: testdb
3318+ [hh:mm :45] [INFO] fetching columns for table 'users' on database 'testdb'
3319+ [hh:mm :45] [INFO] fetching number of columns for table 'users' on database 'testdb'
3320+ [hh:mm :45] [INFO] retrieved: 3
3321+ [hh:mm :45] [INFO] retrieved: id
3322+ [hh:mm :45] [INFO] retrieved: int(11)
3323+ [hh:mm :46] [INFO] retrieved: name
3324+ [hh:mm :46] [INFO] retrieved: varchar(500)
3325+ [hh:mm :46] [INFO] retrieved: surname
3326+ [hh:mm :46] [INFO] retrieved: varchar(1000)
33273327Database: testdb
33283328Table: users
33293329[3 columns]
@@ -3348,17 +3348,17 @@ $ python sqlmap.py -u "http://172.16.213.131/sqlmap/mysql/get_int.php?id=1" --co
33483348 -T users -C name -v 1
33493349
33503350[...]
3351- [16:49 :20] [WARNING] missing database parameter, sqlmap is going to use the current
3351+ [hh:mm :20] [WARNING] missing database parameter, sqlmap is going to use the current
33523352database to enumerate table 'users' columns
3353- [16:49 :20] [INFO] fetching current database
3354- [16:49 :20] [INFO] retrieved: testdb
3355- [16:49 :20] [INFO] fetching columns like 'name' for table 'users' on database 'testdb'
3356- [16:49 :20] [INFO] fetching number of columns for table 'users' on database 'testdb'
3357- [16:49 :20] [INFO] retrieved: 2
3358- [16:49 :20] [INFO] retrieved: name
3359- [16:49 :20] [INFO] retrieved: varchar(500)
3360- [16:49 :21] [INFO] retrieved: surname
3361- [16:49 :21] [INFO] retrieved: varchar(1000)
3353+ [hh:mm :20] [INFO] fetching current database
3354+ [hh:mm :20] [INFO] retrieved: testdb
3355+ [hh:mm :20] [INFO] fetching columns like 'name' for table 'users' on database 'testdb'
3356+ [hh:mm :20] [INFO] fetching number of columns for table 'users' on database 'testdb'
3357+ [hh:mm :20] [INFO] retrieved: 2
3358+ [hh:mm :20] [INFO] retrieved: name
3359+ [hh:mm :20] [INFO] retrieved: varchar(500)
3360+ [hh:mm :21] [INFO] retrieved: surname
3361+ [hh:mm :21] [INFO] retrieved: varchar(1000)
33623362Database: testdb
33633363Table: users
33643364[2 columns]
@@ -3481,20 +3481,20 @@ do you want sqlmap to consider provided column(s):
34813481[1] as LIKE column names (default)
34823482[2] as exact column names
34833483> 1
3484- [19:18 :08] [INFO] fetching databases with tables containing columns like 'urna'
3485- [19:18 :08] [INFO] fetching number of databases with tables containing columns like
3484+ [hh:mm :08] [INFO] fetching databases with tables containing columns like 'urna'
3485+ [hh:mm :08] [INFO] fetching number of databases with tables containing columns like
34863486'urna'
3487- [19:18 :08] [INFO] retrieved: 1
3488- [19:18 :08] [INFO] retrieved: testdb
3489- [19:18 :10] [INFO] fetching tables containing columns like 'urna' in database 'testdb'
3490- [19:18 :10] [INFO] fetching number of tables containing columns like 'urna' in
3487+ [hh:mm :08] [INFO] retrieved: 1
3488+ [hh:mm :08] [INFO] retrieved: testdb
3489+ [hh:mm :10] [INFO] fetching tables containing columns like 'urna' in database 'testdb'
3490+ [hh:mm :10] [INFO] fetching number of tables containing columns like 'urna' in
34913491database 'testdb'
3492- [19:18 :10] [INFO] retrieved: 1
3493- [19:18 :10] [INFO] retrieved: users
3494- [19:18 :10] [INFO] fetching columns like 'urna' for table 'users' on database 'testdb'
3495- [19:18 :10] [INFO] fetching number of columns for table 'users' on database 'testdb'
3496- [19:18 :10] [INFO] retrieved: 1
3497- [19:18 :10] [INFO] retrieved: surname
3492+ [hh:mm :10] [INFO] retrieved: 1
3493+ [hh:mm :10] [INFO] retrieved: users
3494+ [hh:mm :10] [INFO] fetching columns like 'urna' for table 'users' on database 'testdb'
3495+ [hh:mm :10] [INFO] fetching number of columns for table 'users' on database 'testdb'
3496+ [hh:mm :10] [INFO] retrieved: 1
3497+ [hh:mm :10] [INFO] retrieved: surname
34983498Columns like 'urna' were found in the following databases:
34993499Database: testdb
35003500Table: users
@@ -4086,21 +4086,21 @@ back-end DBMS: PostgreSQL
40864086
40874087[10:hh:mm] [INFO] calling PostgreSQL shell. To quit type 'x' or 'q' and press ENTER
40884088sql> SELECT COUNT(name) FROM users
4089- [10:11 :57] [INFO] fetching SQL SELECT statement query output: 'SELECT COUNT(name) FROM users'
4090- [10:11 :57] [INPUT] can the SQL query provided return multiple entries? [Y/n] n
4091- [10:11 :59] [INFO] retrieved: 4
4089+ [hh:mm :57] [INFO] fetching SQL SELECT statement query output: 'SELECT COUNT(name) FROM users'
4090+ [hh:mm :57] [INPUT] can the SQL query provided return multiple entries? [Y/n] n
4091+ [hh:mm :59] [INFO] retrieved: 4
40924092SELECT COUNT(name) FROM users: '4'
40934093
40944094sql> INSERT INTO users (id, name, surname) VALUES (5, 'from', 'sql shell');
4095- [10:12 :35] [INFO] testing stacked queries support on parameter 'id'
4096- [10:12 :40] [INFO] the web application supports stacked queries on parameter 'id'
4097- [10:12 :40] [INFO] executing SQL data manipulation query: 'INSERT INTO users
4095+ [hh:mm :35] [INFO] testing stacked queries support on parameter 'id'
4096+ [hh:mm :40] [INFO] the web application supports stacked queries on parameter 'id'
4097+ [hh:mm :40] [INFO] executing SQL data manipulation query: 'INSERT INTO users
40984098(id, name, surname) VALUES (5, 'from', 'sql shell');'
4099- [10:12 :40] [INFO] done
4099+ [hh:mm :40] [INFO] done
41004100sql> SELECT COUNT(name) FROM users
4101- [10:12 :51] [INFO] fetching SQL SELECT statement query output: 'SELECT COUNT(name) FROM users'
4102- [10:12 :51] [INPUT] can the SQL query provided return multiple entries? [Y/n] n
4103- [10:12 :53] [INFO] retrieved: 5
4101+ [hh:mm :51] [INFO] fetching SQL SELECT statement query output: 'SELECT COUNT(name) FROM users'
4102+ [hh:mm :51] [INPUT] can the SQL query provided return multiple entries? [Y/n] n
4103+ [hh:mm :53] [INFO] retrieved: 5
41044104SELECT COUNT(name) FROM users: '5'
41054105</verb></tscreen>
41064106
0 commit comments