Skip to content

-C COL issue #4248

@yudalosw

Description

@yudalosw

Target is MySQL >= 5.0.0 BTU exploitable.
Fetching with --dump after -T table_name works fine.
Fetching only specific columns from table_name result in a fail.
I am using option -C column1,column2,column3,column4,column5,column6,column7,column8 --dump

[INFO] fetching entries of column(s) 'column1, column2, column3, column4, column5, column6'

Notice the accents U+60 around column1?
If I remove column1 from the specified columns to be dumped, there is no more accents at any of the columns names.
However it still fails with the same error:

[WARNING] something went wrong with full UNION technique (could be because of limitation on retrieved number of entries). Falling back to partial UNION technique
[WARNING] the SQL query provided does not return any output

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions