sqlmap icon indicating copy to clipboard operation
sqlmap copied to clipboard

SQLMAP Slows down after many lines dumped

Open Yorchbs opened this issue 2 years ago • 6 comments

After many dumped lines, sqlmap slows down over time and gets slower and slower. Is not internet connection problems because I tested it from different targets/connections/PC's. If you make --flush-session and you restart the dump it goes very fast again but after ~200k lines, it slows down again. (working with 10 threads and checked and DOS is not happening)

To reproduce you can make a vuln website in a VPS and make a link vulnerable to test it. I'm testing right now with my 2M database and is happening something like this:

Captura de pantalla (109)_LI

Running sqlmap 1.6.4 and tested in Windows 10 and Kali Linux. Different networks and different hard

All the taregets are running MYSQL >= 5 and the SQLi detected is UNION BASED, NO WAF/IPS.

Thanks in advance.

Yorchbs avatar Apr 18 '22 13:04 Yorchbs

can you rerun with -v 3 and show some payloads being sent? you've skipped the issue template, so, we are playing a guessing game here

stamparm avatar Apr 21 '22 13:04 stamparm

can you rerun with -v 3 and show some payloads being sent? you've skipped the issue template, so, we are playing a guessing game here

Here are the Payloads being sent, are the normal and they should work well because manually they work well cap

Yorchbs avatar Apr 22 '22 11:04 Yorchbs

you've hidden parts of the payload. is there ORDER BY inside?

stamparm avatar Apr 29 '22 15:04 stamparm

No sir, is just the table name inside the CAST(table AS CHAR) and the db.table after FROM (FROM db.table LIMIT X,1)

Yorchbs avatar Apr 29 '22 17:04 Yorchbs

then it is strange. sqlmap should not slow down in such cases. also, it seems that the target is doing connection timeouts (not the sqlmap internal problem) for some strange reason. i would ask you to rerun with -v 3 and use those PAYLOADs inside the browser. maybe some useful error pops out

stamparm avatar May 13 '22 16:05 stamparm

image

this means that the site ^^ is slowing down, not the sqlmap

stamparm avatar May 13 '22 16:05 stamparm