diff --git a/doc/README.html b/doc/README.html index 61f77b6da..c62704f70 100644 --- a/doc/README.html +++ b/doc/README.html @@ -105,9 +105,9 @@ it packaged in their formats and ready to be installed. Windows users can download and install the Python setup-ready installer for x86, AMD64 and Itanium too.
sqlmap relies on the -Metasploit Framework for some of its post-exploitation takeover +Metasploit Framework for some of its post-exploitation takeover features. You need to grab a copy of it from the -download +download page - the required version is 3.5 or higher. For the ICMP tunneling out-of-band takeover technique, sqlmap requires Impacket library too.
@@ -418,7 +418,7 @@ subversion repository. message to the user.Switch: --predict-output
This switch is used in inference algorithm for sequential statistical
-prediction of characters of value being retrieved. Based on items given in
-txt/common-outputs.txt together with the knowledge of current
-enumeration used statistical table with the most promising values is being
-built. In case that the value can be found among the common output values,
-as the process progresses, subsequent character tables are being narrowed
-more and more. If used in combination with retrieval of common DBMS
-entities, as with system table names and privileges, speed up is
-significant. Of course, you can edit the common outputs file according to
-your needs if, for instance, you notice common patterns in database table
-names or similar.
txt/common-outputs.txt combined with the knowledge of current
+enumeration used. In case that the value can be found among the common
+output values, as the process progresses, subsequent character tables are
+being narrowed more and more. If used in combination with retrieval of
+common DBMS entities, as with system table names and privileges, speed up
+is significant. Of course, you can edit the common outputs file according
+to your needs if, for instance, you notice common patterns in database
+table names or similar.
Note that this switch is not compatible with --threads
switch.
Note that the multi-threading switch does not affect any other SQL -injection technique. The maximum number of concurrent requests is set to -10 for performance and site reliability reasons.
+The maximum number of concurrent requests is set to 10 for +performance and site reliability reasons.
Note that this switch is not compatible with
--predict-output switch.
--tamper switch.
@@ -1701,12 +1701,12 @@ def tamper(payload):
You can check valid and usable tamper scripts in the tamper/
directory.
Example against a MySQL target assuming > character, spaces and
-SELECT string are banned:
Example against a MySQL target assuming that > character,
+spaces and capital SELECT string are banned:
.-$ python sqlmap.py -u "http://debiandev/sqlmap/mysql/get_int.php?id=1" --tamper \ +$ python sqlmap.py -u "http://192.168.136.131/sqlmap/mysql/get_int.php?id=1" --tamper \ tamper/between.py,tamper/randomcase.py,tamper/space2comment.py -v 3 [hh:mm:03] [DEBUG] cleaning up configuration parameters @@ -1816,7 +1816,7 @@ injected) page content with the injected wrong page content. This way the distinction will be based upon string presence or regular expression match. -In cases with lot of active (e.g. scripts, embeds, etc.) content in the +
In cases with lot of active content (e.g. scripts, embeds, etc.) in the HTTP responses' body, you can filter pages (
@@ -2987,7 +2987,7 @@ a--text-onlyswitch) just for their textual content. This way, in a good number of cases, you can automatically tune the detection engine.<DB_NAME>/<TABLE_NAME>.csvfile intoYou can then use sqlmap itself to read and query the locally created SQLite 3 file. For instance,
+sqlite:///tmp/sqlmap/output/192.168.136.131/dump/testdb.sqlite3 --tablepython sqlmap.py -d -sqlite:///tmp/sqlmap/output/debiandev/dump/testdb.sqlite3 --table.Simple wizard interface for beginner users
diff --git a/doc/README.pdf b/doc/README.pdf index 6b1d90096..f47d69ccb 100644 --- a/doc/README.pdf +++ b/doc/README.pdf @@ -1685,13 +1685,13 @@ endobj /Type /Annot /Border[0 0 0]/H/I/C[0 1 1] /Rect [161.681 146.384 261.605 157.174] -/Subtype/Link/A<> +/Subtype/Link/A<> >> endobj 619 0 obj << /Type /Annot /Border[0 0 0]/H/I/C[0 1 1] /Rect [189.412 132.755 232.629 143.546] -/Subtype/Link/A<> +/Subtype/Link/A<> >> endobj 620 0 obj << /Type /Annot @@ -1994,7 +1994,7 @@ endobj /Type /Annot /Border[0 0 0]/H/I/C[0 1 1] /Rect [342.73 70.142 390.982 80.933] -/Subtype/Link/A<> +/Subtype/Link/A<> >> endobj 664 0 obj << /Type /Annot @@ -2446,7 +2446,7 @@ endobj /Type /Annot /Border[0 0 0]/H/I/C[0 1 1] /Rect [252.653 528.323 300.905 539.113] -/Subtype/Link/A<> +/Subtype/Link/A<> >> endobj 728 0 obj << /Type /Annot @@ -2912,16 +2912,21 @@ endobj /ProcSet [ /PDF /Text ] >> endobj 791 0 obj << -/Length 2138 +/Length 2110 /Filter /FlateDecode >> stream -xÚXK—œ¶Þϯ`úƒyˆ—wñI|�Äy\»}î"ÎBên]ÓÐFÐãɯO•ªÄÐ3Œ9Þ€($Õ»ê“"oïEÞ®>\ÅðŽ¼Ø+¯¨¢0®*¯>^ýùWä5@ÿÙ‹BQ•Þ��uôD^»õÞ\ý÷êùöêé‹$öª°Ê“ÜÛîh�4¬ÒÌÛ6ÞŸ~n‚²þ[#÷jó×öç§/âl1_de ØÐÎNœr±hî kÄbM DFUƒ4¢¢µï¢¸¸X ’%‹U8J£ 0r§‚Ý >¬•a–¸©Ï6ÀOøÛM™úÊŒ› MSÖMðaðKø×› )|5này³IJ_©Žæ�øeI=M=k£iüìé-éµ×gÜÀ-Ei4 mˆRzA™„")<àà+ßö q¿2!>·(ì ‚å͇ö(OµF©;²2È~gå4ÍÃ<.œ�¾}‘Äaz猷¯_9MÆC?±'²ÿ°ë‡£îöd«¼Xå•Äi˜'l,Ù‘y¬/Þë®![ à»ÿ«zÔ=»@îArçr=†¬„ðâ8¬2� -ä‹€“˸tñ.6A'™ÿûiÔGý·´Û=ÔÖ%Y˜D•ó¢2ìnºÕ(&�HÐZ²@lw£šË@ê‰%ÿŠ–/Í#»š©ý&öw4¤qêÅ—R¦I˜‰bÖ.ŒQ?Qùϧ®iq¯RcØïóê²™ÞÌ:>c®ËT…ÀHÄ\‚~e¿€çqEq‘ -6$ ÝR¶Zº,<È‘'O-j=¶"FÍÉz`³îú¶ímZc¨Ñ¬…ǞݫA•+a…B/ó÷+ëÖ{¥Nˆ7øêSÌZ@�Oÿ ¯njÛ î»Îòª�k¿ˆá¿ã8%0y”®ø=�ÂrŽÍiÛõœ£†ŒûìÑ{ö ÷[´`|Þd„Á¤\iÍÂBÜ+¯A–‹ÄcÇ»@ˆK£ µ.Âh*Õ&øVò.—qù©lËï²-álû5ƒ=cÌf;‚ÄKm•ÖèøñUæ«Ò.àÍdúœ€é×%b•]&"|;:/¤tî½Sƒ¢òT¡köý EþHŸdlÜ›Œâ£–-ÓF(;fÔµ#�äP•`Ð3[éá]c«=ÈAÖ#ÆË€óX4Wa8 }r¸]ö–A�ƒæfÚ ì?úÏ%é™$A^BQX* }Ù¦_RÓ‡Is£\ú%Î ²Ü9fü8>ûã±ïž1!�W܃[òªœ×ö{5R 7l¢4¢êò¼ï(Ä[Õì¾£w= [žøQøS@ ”Ð2Á6á€;ªAr?‰?Y+£½Ñ&"½ç8 ŒòÚö‘8á„+½@:ö¶ŒûþÆ`ø1ûÉз�2‘.féדn¡�¢HýŸX¨ZÚÆ+æN 4æh«Dî >©ãF܈—aÀ*ïúÉŠ - ø9Wï4ò9©,}æd ·‰Ô1ôƒWF¨³åZ+ÿ€²à‹×ªÓõ"GhéÃh·;£±y+90—Gbœ•ëä0p DHÁžÌ"p�Ý F²[�ÐÖ€AÚ‰³F6ëá æ°€Rw.N€È®‡‘Ë)k"õ»y%ªã¨÷s�æ×7ô“BsÔË`”f‚,{ÁÆÜÌÊ…9 “G´ŽIV€ôY·j¯(£cÝIã™Q5´`:Ñ[Zgô¾Óˆ®kB¤6(ã’ÊüŽæÖý4ÅÞ¢>ýÄ0q Un¤‘�Ü ûÖ2øÉÕ�&!C§�¬ë~hq³ë›Ì•[fêp—Ó»'÷š Z¸³&c¢¹ŸÐ�[{ú™æNkR³a|’㨆Žñ®fj#ÁüÒábWpr…żÌß òmåÎê`;âFú[?ªK°‡#æ>ˆc͸(/ˆ©g!lø¬T몀:X<Ä4+çÌ(„ãË| ú$6§Ò´zR†/Q¡í4úƒPù/¿·�ö¼I-~K€à°(2>«Ï‚ƒü³([ÃT;È=Ÿ\ç#ŽÀ -ÂÃGPýã®ÖÁ�—Ûíï¢,2ðˆ]¤uÁWsÅ7ˆÝ}i`” -³%¼ê?Þ®-…a"¾4* ¯æ…xⱨøíí«WïÌòÃ�÷ã,‰e;IZpO‚�-+|Š õ�£Ò]<Ù^¹Ürx¢Ý4µ@úäót±