sqlmapproject / sqlmap

Automatic SQL injection and database takeover tool
http://sqlmap.org
Other
31.86k stars 5.66k forks source link

Mysql version >= 5 still getting problem #1119

Closed ashee69 closed 9 years ago

ashee69 commented 9 years ago

[09:34:13] [INFO] the back-end DBMS is MySQL web application technology: PHP 4.4.0, Apache 2.0.54 back-end DBMS: MySQL 5.0.11 [09:34:13] [INFO] fetching tables for database: '_' [09:34:14] [WARNING] reflective value(s) found and filtering out [09:34:14] [WARNING] something went wrong with full UNION technique (most probably because of limitation on retrieved number of entries). Falling back to partial UNION technique [09:34:15] [WARNING] the SQL query provided does not return any output [09:34:15] [WARNING] in case of continuous data retrieval problems you are advised to try a switch '--no-cast' or switch '--hex' [09:34:15] [INFO] fetching number of tables for database '_' [09:34:15] [INFO] retrieved: [09:34:18] [WARNING] multi-threading is considered unsafe in time-based data retrieval. Going to switch it off automatically [09:34:18] [WARNING] time-based comparison requires larger statistical model, please wait.........................
[09:35:44] [CRITICAL] there is considerable lagging in connection response(s). Please use as high value for option '--time-sec' as possible (e.g. 10 or more) [09:35:46] [WARNING] it is very important not to stress the network adapter during usage of time-based payloads to prevent potential errors

[09:35:51] [WARNING] unable to retrieve the number of tables for database '****' [09:35:51] [ERROR] unable to retrieve the table names for any database

please suggest me how to overcome these kind of errors. thank you.

stamparm commented 9 years ago

This is a problem/limitation of a target. Find out what's going on and report back. Use -v 6 or -t traffic.txt to inspect responses

ashee69 commented 9 years ago

sent you traffic.txt file. please suggest any remedy if possible.