+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+----- Forum: SQL Injection Attacks (https://hackforums.net/forumdisplay.php?fid=103)
+----- Thread: SQLMAP: How can I retrieve tabels for Mysql 4 (< Mysql 5)? (/showthread.php?tid=6082494)
SQLMAP: How can I retrieve tabels for Mysql 4 (< Mysql 5)? - gjariolg1657 - May 28, 2020
I am pentesting sql injection using sqlmap.
I can get db name, but I can't retrieve tables in that db.
The dbms and db name are correct.
////////////////////////////////////////
back-end DBMS: MySQL 4
[WARNING] information_schema not available, back-end DBMS is MySQL < 5.0
////////////////////////////////////////
How can I solve this?
RE: SQLMAP: How can I retrieve tabels for Mysql 4 (< Mysql 5)? - pizza500 - May 28, 2020
you cant ... sqlmap ony "guess" the table names from a predefined list
RE: SQLMAP: How can I retrieve tabels for Mysql 4 (< Mysql 5)? - Peter Hansen - Jun 2, 2020
tamper scripts, maybe there is a waf involved
RE: SQLMAP: How can I retrieve tabels for Mysql 4 (< Mysql 5)? - frank3nstien - Jun 2, 2020
Could be a WAF, Try using Url encoding --tamper charencode which might will work to bypass WAF
Which work in backend like this :
SELECT FIELD FROM TABLE to %53%45%4C%45%43%54%20%46%49%45%4C%44%20%46%52%4F%4D%20%54%41%42%4C%45