CODEWITHSUNDEEP
mysqlsqlsql-injectionsqlmap
Omen
Omen

Reputation: 85

SQLMap realy slow on local network

i'am currently trying to use SQLMap on an apparently easy injection on a local web server :

SELECT * from table WHERE `col` LIKE 'VULN_HERE';

I'am using the following command :

sqlmap -u http://localhost/?i=1 --dbms mysql --level 5 --risk 3 -p i --dbs -v 2 --technique 'T'

When running this command, sqlmap identify the injection correctly but is blocking at :

[14:36:43] [INFO] checking if the injection point on GET parameter 'i' is a false positive

What is wrong ?

Upvotes: 0

Views: 1418

Answers (2)

Ritobroto Mukherjee
Ritobroto Mukherjee

Reputation: 111

Hi check your syntax and have a look:

SQLmap
You need your URL to be within quotes always or the command prompt will take i=1 outside the URL and as a different parameter.
Hope it'll solve your issues.

Upvotes: 0

KAD
KAD

Reputation: 11122

I think your URL shall be quoted :

sqlmap -u "http://localhost/?i=1" ....

Upvotes: 2

Related Questions