ANTICHAT — форум по информационной безопасности, OSINT и технологиям

↑
Всем привет.
Выдало такие данные, можно ли тут что нибудь сделать?
[11:47:24] [INFO] testing connection to the target URL
[11:47:24] [WARNING] potential permission problems detected ('Access denied')
[11:47:24] [WARNING] the web server responded with an HTTP error code (403) which could interfere with the results of the tests
[11:47:24] [INFO] checking if the target is protected by some kind of WAF/IPS
[11:47:24] [INFO] heuristics detected web page charset 'ascii'
[11:47:24] [CRITICAL] heuristics detected that the target is protected by some kind of WAF/IPS
do you want sqlmap to try to detect backend WAF/IPS? [y/N] y
[11:51:05] [WARNING] dropping timeout to 10 seconds (i.e. '--timeout=10')
[11:51:06] [INFO] using WAF scripts to detect backend WAF/IPS protection
[11:51:26] [CRITICAL] WAF/IPS identified as 'CloudFlare Web Application Firewall (CloudFlare)'
are you sure that you want to continue with further target testing? [y/N] y
[11:56:24] [WARNING] please consider usage of tamper scripts (option '--tamper')
[11:56:24] [INFO] testing if the target URL content is stable
[11:56:44] [CRITICAL] connection timed out to the target URL. sqlmap is going to retry the request(s)

↑
Оставь всё как есть только теперь добавь --tamper=unionalltounion
и отпиши

↑
[13:58:06] [INFO] loading tamper module 'unionalltounion'
[13:58:07] [INFO] testing connection to the target URL
[13:58:07] [WARNING] potential permission problems detected ('Access denied')
[13:58:07] [WARNING] the web server responded with an HTTP error code (403) which could interfere with the results of the tests
[13:58:07] [INFO] testing if the target URL content is stable
[13:58:08] [WARNING] target URL content is not stable (i.e. content differs). sqlmap will base the page comparison on a sequence matcher. If no dynamic nor injectable parameters are detected, or in case of junk results, refer to user's manual paragraph 'Page comparison'
how do you want to proceed? [(C)ontinue/(s)tring/(r)egex/(q)uit]

↑
[13:58:06] [INFO] loading tamper module 'unionalltounion'
[13:58:07] [INFO] testing connection to the target URL
[13:58:07] [WARNING] potential permission problems detected ('Access denied')
[13:58:07] [WARNING] the web server responded with an HTTP error code (403) which could interfere with the results of the tests
[13:58:07] [INFO] testing if the target URL content is stable
[13:58:08] [WARNING] target URL content is not stable (i.e. content differs). sqlmap will base the page comparison on a sequence matcher. If no dynamic nor injectable parameters are detected, or in case of junk results, refer to user's manual paragraph 'Page comparison'
how do you want to proceed? [(C)ontinue/(s)tring/(r)egex/(q)uit]

↑
Приветствую, как вы пришли к решению включить именно этот тампер?

↑
Хочу сделать чтобы sqlmap автоматом вытягивал нужные мне записи из списка баз на каждом сервере.
Подскажите, можно ли указать дамп нужных мне таблиц и колонок используя регулярные выражения? Пробовал --search, но он не работает в связке с --dump.

↑
Произошел обрыв сети и дамп прекратился без сохранения результатов.
Подскажите, как из файла session.sqlite вытащить данные которые успело получить?