-
-
Notifications
You must be signed in to change notification settings - Fork 5.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
SQLMAP Slows down after many lines dumped #5071
Comments
can you rerun with |
you've hidden parts of the payload. is there |
No sir, is just the table name inside the CAST(table AS CHAR) and the db.table after FROM (FROM db.table LIMIT X,1) |
then it is strange. sqlmap should not slow down in such cases. also, it seems that the target is doing connection timeouts (not the sqlmap internal problem) for some strange reason. i would ask you to rerun with |
After many dumped lines, sqlmap slows down over time and gets slower and slower. Is not internet connection problems because I tested it from different targets/connections/PC's. If you make --flush-session and you restart the dump it goes very fast again but after ~200k lines, it slows down again. (working with 10 threads and checked and DOS is not happening)
To reproduce you can make a vuln website in a VPS and make a link vulnerable to test it. I'm testing right now with my 2M database and is happening something like this:
Running sqlmap 1.6.4 and tested in Windows 10 and Kali Linux. Different networks and different hard
All the taregets are running MYSQL >= 5 and the SQLi detected is UNION BASED, NO WAF/IPS.
Thanks in advance.
The text was updated successfully, but these errors were encountered: