You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I want to query 5 records from every table.
Run below command python sqlmap.py -r r.txt -p pwd --dbms MySQL -D xx --dump --start=1 --stop=10 --threads=5 --technique=B
But sqlmap return 5 records from every table only 5 columns,I think it is a bug. At least it is Anti-intuition.
[16:01:27] [INFO] fetching columns for table 'user' in database 'xxxx' [16:01:27] [INFO] resumed: 25 [16:01:27] [INFO] retrieving the length of query output [16:01:27] [INFO] resumed: 7 [16:01:27] [INFO] resumed: user_id [16:01:27] [INFO] retrieving the length of query output [16:01:27] [INFO] resumed: 4 [16:01:27] [INFO] resumed: type [16:01:27] [INFO] retrieving the length of query output [16:01:27] [INFO] resumed: 5 [16:01:27] [INFO] resumed: email [16:01:27] [INFO] retrieving the length of query output [16:01:27] [INFO] resumed: 3 [16:01:27] [INFO] resumed: pwd [16:01:27] [INFO] retrieving the length of query output [16:01:27] [INFO] resumed: 4 [16:01:27] [INFO] resumed: name [16:01:27] [INFO] fetching entries for table 'user' in database 'xxxx'
Do you have an idea for a solution?
--start and --end shoud be sikp the step of columns detect.
How can we reproduce the issue?
What are the running context details?
Installation method (e.g. pip, apt-get, git clone or zip/tar.gz):
Client OS (e.g. Microsoft Windows 10)
Program version (python sqlmap.py --version or sqlmap --version depending on installation):
Target DBMS (e.g. Microsoft SQL Server):
Detected WAF/IDS/IPS protection (e.g. ModSecurity or unknown):
SQLi techniques found by sqlmap (e.g. error-based and boolean-based blind):
Results of manual target assessment (e.g. found that the payload query=test' AND 4113 IN ((SELECT 'foobar'))-- qKLV works):
This moment I've put that --start/--stop are only taken into the consideration in case of dumped table entries. Your example is the best example why this should be the case.
Activity
stamparm commentedon Mar 1, 2017
This moment I've put that
--start/--stopare only taken into the consideration in case of dumped table entries. Your example is the best example why this should be the case.wyl091256 commentedon Mar 2, 2017
So fast,cool.