Skip to content

Options --start --top Can not work normally #2422

Closed

Description

@wyl091256

What's the problem (or question)?

I want to query 5 records from every table.
Run below command
python sqlmap.py -r r.txt -p pwd --dbms MySQL -D xx --dump --start=1 --stop=10 --threads=5 --technique=B
But sqlmap return 5 records from every table only 5 columns,I think it is a bug. At least it is Anti-intuition.

[16:01:27] [INFO] fetching columns for table 'user' in database 'xxxx' [16:01:27] [INFO] resumed: 25 [16:01:27] [INFO] retrieving the length of query output [16:01:27] [INFO] resumed: 7 [16:01:27] [INFO] resumed: user_id [16:01:27] [INFO] retrieving the length of query output [16:01:27] [INFO] resumed: 4 [16:01:27] [INFO] resumed: type [16:01:27] [INFO] retrieving the length of query output [16:01:27] [INFO] resumed: 5 [16:01:27] [INFO] resumed: email [16:01:27] [INFO] retrieving the length of query output [16:01:27] [INFO] resumed: 3 [16:01:27] [INFO] resumed: pwd [16:01:27] [INFO] retrieving the length of query output [16:01:27] [INFO] resumed: 4 [16:01:27] [INFO] resumed: name [16:01:27] [INFO] fetching entries for table 'user' in database 'xxxx'

Do you have an idea for a solution?

--start and --end shoud be sikp the step of columns detect.

How can we reproduce the issue?

What are the running context details?

  • Installation method (e.g. pip, apt-get, git clone or zip/tar.gz):
  • Client OS (e.g. Microsoft Windows 10)
  • Program version (python sqlmap.py --version or sqlmap --version depending on installation):
  • Target DBMS (e.g. Microsoft SQL Server):
  • Detected WAF/IDS/IPS protection (e.g. ModSecurity or unknown):
  • SQLi techniques found by sqlmap (e.g. error-based and boolean-based blind):
  • Results of manual target assessment (e.g. found that the payload query=test' AND 4113 IN ((SELECT 'foobar'))-- qKLV works):
  • Relevant console output (if any):
  • Exception traceback (if any):

Activity

  1. self-assigned this
    on Mar 1, 2017
  2. added this to the 1.2 milestone on Mar 1, 2017
  3. stamparm commented on Mar 1, 2017

    @stamparm
    Member

    This moment I've put that --start/--stop are only taken into the consideration in case of dumped table entries. Your example is the best example why this should be the case.

  4. wyl091256 commented on Mar 2, 2017

    @wyl091256
    Author

    So fast,cool.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions