sqlmapproject / sqlmap

Automatic SQL injection and database takeover tool
http://sqlmap.org
Other
31.36k stars 5.61k forks source link

Google dork only seems to pull 'webcache' results #410

Closed richeyward closed 11 years ago

richeyward commented 11 years ago

When using the following command, I recieve the following:

$ ./sqlmap.py -g "test" -v 3

    sqlmap/1.0-dev-bdf72b0 - automatic SQL injection and database takeover tool
    http://sqlmap.org
[*] starting at 17:13:53
[17:13:53] [DEBUG] cleaning up configuration parameters
[17:13:53] [DEBUG] setting the HTTP timeout
[17:13:53] [DEBUG] setting the HTTP method to GET
[17:13:53] [DEBUG] initializing Google dorking requests
[17:13:53] [INFO] first request to Google to get the session cookie
[17:13:53] [INFO] using Google result page #1
[17:13:56] [INFO] heuristics detected web page charset 'ISO-8859-2'
do you want to scan only results containing GET parameters? [Y/n]
[17:13:57] [INFO] sqlmap got 209 results for your Google dork expression, 98 of them are testable targets
[17:13:57] [DEBUG] creating HTTP requests opener object
[17:13:57] [INFO] sqlmap got a total of 98 targets
[17:13:57] [DEBUG] initializing the knowledge base
url 1:
GET http://webcache.googleusercontent.com/search?q=cache:S9XHtkEncW8J:http://www.test.com/%2Btest&num=100&hl=en&complete=0&safe=off&filter=0&ct=clnk
do you want to test this url? [Y/n/q]

I've noticed this bug for the last week or so. It's possible that the Google webpages have changed their layout.

richeyward commented 11 years ago

Verified that this commit works. Thanks.