{"action":"created","issue":{"url":"https://api.github.com/repos/sqlmapproject/sqlmap/issues/1973","repository_url":"https://api.github.com/repos/sqlmapproject/sqlmap","labels_url":"https://api.github.com/repos/sqlmapproject/sqlmap/issues/1973/labels{/name}","comments_url":"https://api.github.com/repos/sqlmapproject/sqlmap/issues/1973/comments","events_url":"https://api.github.com/repos/sqlmapproject/sqlmap/issues/1973/events","html_url":"https://github.com/sqlmapproject/sqlmap/issues/1973","id":161409613,"number":1973,"title":"AND/OR time-based blind and invalid characters","user":{"login":"iwantaturboman","id":16474655,"avatar_url":"https://avatars.githubusercontent.com/u/16474655?v=3","gravatar_id":"","url":"https://api.github.com/users/iwantaturboman","html_url":"https://github.com/iwantaturboman","followers_url":"https://api.github.com/users/iwantaturboman/followers","following_url":"https://api.github.com/users/iwantaturboman/following{/other_user}","gists_url":"https://api.github.com/users/iwantaturboman/gists{/gist_id}","starred_url":"https://api.github.com/users/iwantaturboman/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/iwantaturboman/subscriptions","organizations_url":"https://api.github.com/users/iwantaturboman/orgs","repos_url":"https://api.github.com/users/iwantaturboman/repos","events_url":"https://api.github.com/users/iwantaturboman/events{/privacy}","received_events_url":"https://api.github.com/users/iwantaturboman/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":6,"created_at":"2016-06-21T11:13:37Z","updated_at":"2016-09-26T09:20:36Z","closed_at":null,"body":"Hi all,\r\nas i said in a previous threads, it's very frustrating to retrieve \"invalid characters\" during a \"AND/OR time-based blind\" injection. Last week, i spent 12 hours to retrieve 80 tables from a database and -of course- some of them had errors.\r\nExample : \r\n`sqlmap.py -u http://www.target.com/page.php?id=1 -D database01 --tables --no-cast`\r\n\r\n```\r\n80 tables found : \r\nAdministr%et%on\r\nBlog\r\nConfiguration\r\nCoupon\r\n(...)\r\nTopics\r\n```\r\n\r\nInstead of `--fresh-queries`, i try this : \r\n`sqlmap.py -u \"http://www.target.com/page.php?id=1*\" --sql-shell`\r\nand then : \r\n`sql-shell> SELECT column_name FROM information_schema.columns WHERE table_schema=\"database01\" and column_name LIKE 'Admin%';`\r\nsqlmap answers : \r\n`1 table found : Administration`\r\nSo all is ok.\r\n\r\nMy question is that there is any way to tells sqlmap to replace \"Administr%et%on\" wrong-table name (found via `--tables` command) by the right one \"Administration\" (found via `--sql-shell` command) ?\r\n\r\nThanks to all,"},"comment":{"url":"https://api.github.com/repos/sqlmapproject/sqlmap/issues/comments/249520519","html_url":"https://github.com/sqlmapproject/sqlmap/issues/1973#issuecomment-249520519","issue_url":"https://api.github.com/repos/sqlmapproject/sqlmap/issues/1973","id":249520519,"user":{"login":"stamparm","id":921555,"avatar_url":"https://avatars.githubusercontent.com/u/921555?v=3","gravatar_id":"","url":"https://api.github.com/users/stamparm","html_url":"https://github.com/stamparm","followers_url":"https://api.github.com/users/stamparm/followers","following_url":"https://api.github.com/users/stamparm/following{/other_user}","gists_url":"https://api.github.com/users/stamparm/gists{/gist_id}","starred_url":"https://api.github.com/users/stamparm/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/stamparm/subscriptions","organizations_url":"https://api.github.com/users/stamparm/orgs","repos_url":"https://api.github.com/users/stamparm/repos","events_url":"https://api.github.com/users/stamparm/events{/privacy}","received_events_url":"https://api.github.com/users/stamparm/received_events","type":"User","site_admin":false},"created_at":"2016-09-26T09:20:36Z","updated_at":"2016-09-26T09:20:36Z","body":"@wireghoul please, don't reference attempts from other parties. Everything include currently inside the sqlmap is the state of the art in world of time-based SQL injections made by us. If you don't like it you: A) stop using it and make your own SQLi tool, B) raise the `--time-sec` or C) let us do our job.\r\n\r\nI am sick and tired of battling with users that don't know the basics about the Shannon's information theory and the information system entropy. You have a huge source of entropy in one side (network latency) and you have demanding users who just have requirements like `vital ... to ensure character accuracy`. When I tell them to raise the `--time-sec` all jump to their feet because they don't want to battle the entropy with the correct weapon (introducing the user controlled factor - in this place deliberate delay). Nooooo, they want gazzilion of verifications in no time, while nobody is aware that those same verifications after a while become a source of new entropy (if you have N requests per character and you introduce new M requests for validation, each of those validation requests can potentially invalidate EVERYTHING done till now).\r\n\r\nAnyway, please let me handle all this. I have a trick or two in my sleeves and none of things mentioned by third parties are included."}}
{"actor":{"display_login":"stamparm"}}