sqlmapproject / sqlmap

Automatic SQL injection and database takeover tool
http://sqlmap.org
Other
32.04k stars 5.68k forks source link

New Idea For ( ETA ) #2777

Open AmericanY opened 6 years ago

AmericanY commented 6 years ago

First of all ( unlimited thanks for sqlmap developer for that great tool )

Today i would like to discuss my idea about ETA after reading users comments about it and do some search over the web.

For ETA progress bar for group and individual items.

The confirmed point by developer is " --eta already does that for error-based and (partial) union. In case of blind and time-based it does it for individual items "

Everyone always excited to know when he gonna finish the dump so there's my idea :)

Let's say that you are gonna dump 100 entries so if sqlmap calculated the time used to dump first and second entry so it's can give an expected time for complete dump.

let's say that sqlmap gonna check for first 10 entries dumped to the log and time used for retrieval.

So we are expecting to see something like that:

SQLMAP COUNTING THE EXPECTED TIME FOR RETRIEVAL COUNTING IN BACKGROUND which means that it's gonna check for time taken for dump first 10 entries which had been dumped and wrote to file in time. Let's say first 10 entries taken 10 minutes so the 100 entries gonna take 100 Minutes ( 1 Hour 40 Minutes ) Minus the first 10 minutes we used for dump first 10 entries so 90 entries = 1 hour 30 minutes EXPECTED WAIT TIME FOR DUMP AROUND 1 HOUR 30 MINUTES OR TO BE BY TIME 01:29:01 REMAINING OR TO BE BY PROGRESS BAR #1%

ONE MORE POINT TO BE NOTED " TIME CAN BE LESS OR MORE AND THAT'S CAN BE HANDELED BY CHECKING TIME USED TO DUMP SECOND 10 ENTRIES AND IF IT'S MORE SO SQLMAP INCREASE THE TIME AND IF IT'S LESS SO SQLMAP DECREASE THE TIME "


I DO HAVE ANOTHER IDEA GONNA SHARE IT LATER REGARDING TAMPER

shadowzoom commented 6 years ago

And i would like to eta update in real time, but sadly currently --eta is retrivieng after 100-200 enteries

Ekultek commented 6 years ago

@shadowfolder don’t you think that doing it in real time would be unreliable? It wouldn’t have anything to go off of, so it would just keep getting longer and longer depending on the data retrieved

AmericanY commented 6 years ago

@shadowfolder that’s will not be ideal if we gonna calculate the estimated time based on each entery ( In Line ) that’s gonna be vary depending length of single entry ;)

AmericanY commented 6 years ago

@Ekultek I highly agree with you ;)