Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Os-bof not permitted when the subquery follows = , <= > >= #691

Closed
zeusfnx opened this issue May 14, 2014 · 3 comments
Closed

Os-bof not permitted when the subquery follows = , <= > >= #691

zeusfnx opened this issue May 14, 2014 · 3 comments

Comments

@zeusfnx
Copy link

zeusfnx commented May 14, 2014

I try connect back via os-bof but occurred one error. In my traffic result this
[Microsoft][ODBC SQL Server Driver][SQL Server]Subquery returned more than 1 value. This is not permitted when the subquery follows =, !=, <, <= , >, >= or when the subquery is used as an expression.

@stamparm
Copy link
Member

Can you please give a full query used by sqlmap (causing that error)? Or maybe give a traffic file for it?

@zeusfnx
Copy link
Author

zeusfnx commented May 14, 2014

sqlmap --url "http://[REDACTED]/[REDACTED].asp?[REDACTED]=10" --random-agent --keep-alive --threads=10 --eta -v4 --os-bof --tamper"charencode"

traffic http://pastebin.com/M7zGzb5K

stamparm added a commit that referenced this issue May 15, 2014
@stamparm
Copy link
Member

p.s. problem was "triggered" with --os-bof (thus, it doesn't mean that --os-bof will work in your case because of this patch)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants