sqlmapproject / sqlmap

Automatic SQL injection and database takeover tool
http://sqlmap.org
Other
31.36k stars 5.61k forks source link

G #241

Closed SQLmapTester closed 11 years ago

stamparm commented 11 years ago

1) Google takes only the page results given by --gpage=GOOGLEPAGE Use Google dork results from specified page number or a default first page. It would be futile to retrieve zillion results before testing one of those. Also, using --random-agent will mask yourself toward the Google as a regular browser and Google tends to return only 20 results per page in that case. Don't use --regular-browser and you should notice more results per page 2 and 3) You are using -g wrong. In each normal shell you should use backslash escaping of character " as it has a special meaning. So, you should use something like: -g "\"id=\" & intext:\"Warning: getimagesize()\" inurl:first|second|third"