sqlmapproject / sqlmapproject/sqlmap

--sql-file Inquiry

未关闭
#4,708 4 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看

还没有人认领这个 Issue。

主要语言
Python
星标
38.5k
派生
6.4k
平均合并
3 天 3 小时
30 天内合并 PR
1

描述

Hello,

I'm trying to use the following argument --sql-file

    --sql-file=SQLFILE  Execute SQL statements from given file(s)

According to the documentation it's will run sql statement(s) from file.

  1. i noticed that the file should be saved with EXT .sql in order to detect it.
  2. the file should inserted with it's PATH --sql-file="PATH/sqlfile.sql" otherwise sqlmap will look for it into /sqlmap/data/procs/mysql/sqlfile.sql.
  3. Now my issue is: i already specified the PATH to the file but sqlmap unable to run the statement !
[19:53:01] [INFO] executing SQL statements from given file(s)
[19:53:01] [ERROR] unresolved variables 'm, m' in SQL file '/path_to_file/sqlfile'

is the sql statement need to be formatted ? as i inserted it as single line such as SELECT A, B FROM DB.TABLE

Thanks in advance as well.

贡献指南

打开贡献指南

从这里开始

  1. 先读完整个 Issue,再读项目的贡献指南。
  2. 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
  3. Fork 仓库,在一个分支上完成修改。
  4. 提交 Pull Request,并在描述里引用这个 Issue 编号。

调研方向

Start at the --sql-file command-line entry point and reproduce the reported invocation with the shown SQL statement and error. Check how the supplied path and SQL file contents are parsed; done means a valid file executes without the unresolved-variables error, or the expected format is documented.

由索引模型根据 Issue 内容生成。

评估

技术栈
python, sql
领域
cli, databases, security
Issue 类型
缺陷
难度
3/5
预计耗时
1-2 天
活跃度
停滞
描述清晰度
需要澄清
新手友好度
25/100

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。