Web - Server

Friday 22 September 2017, 06:54  #1
Web - Server - SQL injection numeric
MaxMaxime
  • 2 posts

I can successfully get an injection into the DB, get common columns for table users however I cannot seem to retrieve any data using SQLmap. Here is the relevant output:

[... spoil detected ...]

How can I successfully exploit this? I dont need to dump the entire db as I only want the passwords column in the users table and can’t seem to force sqlmap to enumerate the contents.

Sunday 25 February 2018, 18:14  #2
Web - Server - SQL injection numeric
Anonymous

Same problem for me I am not able to retrieve columns from tables. I searched a lot in Internet but I am not able to find the problem. Has somebody a solution for the problem?

Friday 14 September 2018, 14:37  #3
Web - Server - SQL injection numeric
bramp
  • 4 posts

I had a really hard time with this one. Apparently SQLMap doesn’t help you with this?