Skip to content

--sql-file Inquiry #4708

Open
Open

Description

@AmericanY

Hello,

I'm trying to use the following argument --sql-file

    --sql-file=SQLFILE  Execute SQL statements from given file(s)

According to the documentation it's will run sql statement(s) from file.

  1. i noticed that the file should be saved with EXT .sql in order to detect it.
  2. the file should inserted with it's PATH --sql-file="PATH/sqlfile.sql" otherwise sqlmap will look for it into /sqlmap/data/procs/mysql/sqlfile.sql.
  3. Now my issue is: i already specified the PATH to the file but sqlmap unable to run the statement !
[19:53:01] [INFO] executing SQL statements from given file(s)
[19:53:01] [ERROR] unresolved variables 'm, m' in SQL file '/path_to_file/sqlfile'

is the sql statement need to be formatted ? as i inserted it as single line such as SELECT A, B FROM DB.TABLE

Thanks in advance as well.

Activity

  1. AmericanY commented on Jun 11, 2021

    @AmericanY
    Author

    I walked through the code

    msg = "do you want to provide the substitution values? [y/N] "
    but i didn't get how the scenario done here! can someone show me an example of that ?

    cc @stamparm

  2. AmericanY commented on Jun 11, 2021

    @AmericanY
    Author

    also i do have another question, is there a way where i can save my dump to a file directly ?

    Note: am not about --output=

    Example, if i used sql-query= or sql-shell and used sql statement, i would like to save the output only. currently am viewing the output from sqlmap output log

  3. kevin659591 commented on Apr 20, 2022

    @kevin659591
  4. sharifulgeo commented on Dec 3, 2022

    @sharifulgeo
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions