Skip to content

Instantly share code, notes, and snippets.

@cclements
Created January 21, 2018 22:06
Show Gist options
  • Save cclements/5d39c071e8f3f603c33309312d0918c6 to your computer and use it in GitHub Desktop.
Save cclements/5d39c071e8f3f603c33309312d0918c6 to your computer and use it in GitHub Desktop.
DOMAIN\HOSTNAME error 2
python2 sqlmap.py -d 'mssql://someuser:somepass@192.168.1.100:1433/TargetDB' --dump -v6
___
__H__
___ ___[.]_____ ___ ___ {1.2.1.14#dev}
|_ -| . [)] | .'| . |
|___|_ [.]_|_|_|__,| _|
|_|V |_| http://sqlmap.org
[!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program
[*] starting at 15:54:47
[15:54:47] [DEBUG] cleaning up configuration parameters
[15:54:47] [INFO] connection to mssql server 192.168.1.100:1433 established
[15:54:47] [INFO] testing Microsoft SQL Server
[15:54:47] [INFO] confirming Microsoft SQL Server
[15:54:47] [PAYLOAD] SELECT (CASE WHEN (HOST_NAME()=HOST_NAME()) THEN '1' ELSE '0' END)
[15:54:47] [INFO] resumed: [[u'1']]...
[15:54:47] [PAYLOAD] SELECT (CASE WHEN (XACT_STATE()=XACT_STATE()) THEN '1' ELSE '0' END)
[15:54:47] [INFO] resumed: [[u'1']]...
[15:54:47] [PAYLOAD] SELECT (CASE WHEN (SYSDATETIME()=SYSDATETIME()) THEN '1' ELSE '0' END)
[15:54:47] [INFO] resumed: [[u'1']]...
[15:54:47] [PAYLOAD] SELECT (CASE WHEN (CONCAT(NULL,NULL)=CONCAT(NULL,NULL)) THEN '1' ELSE '0' END)
[15:54:47] [INFO] resumed: [[u'1']]...
[15:54:47] [PAYLOAD] SELECT (CASE WHEN (CHARINDEX('12.0.2000',@@version)>0) THEN '1' ELSE '0' END)
[15:54:47] [INFO] resumed: [[u'0']]...
[15:54:47] [PAYLOAD] SELECT (CASE WHEN (ISJSON(NULL) IS NULL) THEN '1' ELSE '0' END)
[15:54:47] [DEBUG] (remote) (195, "'ISJSON' is not a recognized built-in function name.DB-Lib error message 20018, severity 15:\nGeneral SQL Server error: Check messages from the SQL Server\n")
[15:54:47] [INFO] the back-end DBMS is Microsoft SQL Server
back-end DBMS: Microsoft SQL Server 2012
[15:54:47] [WARNING] missing database parameter. sqlmap is going to use the current database to enumerate table(s) entries
[15:54:47] [INFO] fetching current database
[15:54:47] [PAYLOAD] SELECT DB_NAME()
[15:54:47] [INFO] resumed: [[u'TargetDB']]...
[15:54:47] [INFO] fetching tables for database: TargetDB
[15:54:47] [PAYLOAD] SELECT TargetDB..sysusers.name+'.'+TargetDB..sysobjects.name FROM TargetDB..sysobjects INNER JOIN TargetDB..sysusers ON TargetDB..sysobjects.uid = TargetDB..sysusers.uid WHERE TargetDB..sysobjects.xtype IN ('u','v')
[15:54:48] [PAYLOAD] SELECT table_schema+'.'+table_name FROM information_schema.tables WHERE table_catalog='TargetDB'
[15:54:48] [INFO] resumed: [[u'DOMAIN\\HOSTNAME.hash_types'], [u'DOMAIN\\HOSTNAME.login_types'], [u'DOMAIN\\HOSTNAME.logins'], [u'DOMAIN\\HOSTNAME.users'], [u'DOMAIN\\HOSTNAME.policy_lookup'], [u'DOMAIN\\HOSTNAME.login_lookup'], [u'DOMAIN\\HOSTNAME.standard_login_types'], [u'DOMAIN\\HOSTNAME.quote_lookup'], [u'DOMAIN\\HOSTNAME.cool_down']]...
[15:54:48] [INFO] fetching columns for table 'DOMAIN\\HOSTNAME.cool_down' in database 'TargetDB'
[15:54:48] [PAYLOAD] SELECT TargetDB..syscolumns.name,TYPE_NAME(TargetDB..syscolumns.xtype) FROM TargetDB..syscolumns,TargetDB..sysobjects WHERE TargetDB..syscolumns.id=TargetDB..sysobjects.id AND TargetDB..sysobjects.name='cool_down'
[15:54:48] [INFO] resumed: [[u'id', u'int'], [u'username', u'varchar'], [u'ip_address', u'varchar'], [u'expires', u'datetime']]...
[15:54:48] [INFO] fetching entries for table 'DOMAIN\\HOSTNAME.cool_down' in database 'TargetDB'
[15:54:48] [PAYLOAD] SELECT LTRIM(STR(COUNT(*))) FROM TargetDB.[DOMAIN\\HOSTNAME].cool_down
[15:54:48] [WARNING] (remote) (208, "Invalid object name 'TargetDB.DOMAIN\\\\HOSTNAME.cool_down'.DB-Lib error message 20018, severity 16:\nGeneral SQL Server error: Check messages from the SQL Server\n")
[15:54:48] [WARNING] in case of continuous data retrieval problems you are advised to try a switch '--no-cast' or switch '--hex'
[15:54:48] [PAYLOAD] SELECT LTRIM(STR(COUNT(*))) FROM TargetDB.[DOMAIN\\HOSTNAME].cool_down
[15:54:48] [WARNING] (remote) (208, "Invalid object name 'TargetDB.DOMAIN\\\\HOSTNAME.cool_down'.DB-Lib error message 20018, severity 16:\nGeneral SQL Server error: Check messages from the SQL Server\n")
[15:54:48] [PAYLOAD] SELECT LTRIM(STR(COUNT(*))) FROM TargetDB.[DOMAIN\\HOSTNAME].cool_down
[15:54:48] [WARNING] (remote) (208, "Invalid object name 'TargetDB.DOMAIN\\\\HOSTNAME.cool_down'.DB-Lib error message 20018, severity 16:\nGeneral SQL Server error: Check messages from the SQL Server\n")
[15:54:48] [WARNING] unable to retrieve the entries for table 'DOMAIN\\HOSTNAME.cool_down' in database 'TargetDB'
[15:54:48] [INFO] fetching columns for table 'DOMAIN\\HOSTNAME.hash_types' in database 'TargetDB'
[15:54:48] [PAYLOAD] SELECT TargetDB..syscolumns.name,TYPE_NAME(TargetDB..syscolumns.xtype) FROM TargetDB..syscolumns,TargetDB..sysobjects WHERE TargetDB..syscolumns.id=TargetDB..sysobjects.id AND TargetDB..sysobjects.name='hash_types'
[15:54:48] [INFO] resumed: [[u'id', u'int'], [u'value', u'varchar'], [u'description', u'varchar']]...
[15:54:48] [INFO] fetching entries for table 'DOMAIN\\HOSTNAME.hash_types' in database 'TargetDB'
[15:54:48] [PAYLOAD] SELECT LTRIM(STR(COUNT(*))) FROM TargetDB.[DOMAIN\\HOSTNAME].hash_types
[15:54:48] [WARNING] (remote) (208, "Invalid object name 'TargetDB.DOMAIN\\\\HOSTNAME.hash_types'.DB-Lib error message 20018, severity 16:\nGeneral SQL Server error: Check messages from the SQL Server\n")
[15:54:48] [PAYLOAD] SELECT LTRIM(STR(COUNT(*))) FROM TargetDB.[DOMAIN\\HOSTNAME].hash_types
[15:54:48] [WARNING] (remote) (208, "Invalid object name 'TargetDB.DOMAIN\\\\HOSTNAME.hash_types'.DB-Lib error message 20018, severity 16:\nGeneral SQL Server error: Check messages from the SQL Server\n")
[15:54:48] [PAYLOAD] SELECT LTRIM(STR(COUNT(*))) FROM TargetDB.[DOMAIN\\HOSTNAME].hash_types
[15:54:48] [WARNING] (remote) (208, "Invalid object name 'TargetDB.DOMAIN\\\\HOSTNAME.hash_types'.DB-Lib error message 20018, severity 16:\nGeneral SQL Server error: Check messages from the SQL Server\n")
[15:54:48] [WARNING] unable to retrieve the entries for table 'DOMAIN\\HOSTNAME.hash_types' in database 'TargetDB'
[15:54:48] [INFO] fetching columns for table 'DOMAIN\\HOSTNAME.login_lookup' in database 'TargetDB'
[15:54:48] [PAYLOAD] SELECT TargetDB..syscolumns.name,TYPE_NAME(TargetDB..syscolumns.xtype) FROM TargetDB..syscolumns,TargetDB..sysobjects WHERE TargetDB..syscolumns.id=TargetDB..sysobjects.id AND TargetDB..sysobjects.name='login_lookup'
[15:54:48] [INFO] resumed: [[u'id', u'int'], [u'account', u'varchar'], [u'user_id', u'int'], [u'account_type', u'int'], [u'active', u'tinyint']]...
[15:54:48] [INFO] fetching entries for table 'DOMAIN\\HOSTNAME.login_lookup' in database 'TargetDB'
[15:54:48] [PAYLOAD] SELECT LTRIM(STR(COUNT(*))) FROM TargetDB.[DOMAIN\\HOSTNAME].login_lookup
[15:54:48] [WARNING] (remote) (208, "Invalid object name 'TargetDB.DOMAIN\\\\HOSTNAME.login_lookup'.DB-Lib error message 20018, severity 16:\nGeneral SQL Server error: Check messages from the SQL Server\n")
[15:54:48] [PAYLOAD] SELECT LTRIM(STR(COUNT(*))) FROM TargetDB.[DOMAIN\\HOSTNAME].login_lookup
[15:54:48] [WARNING] (remote) (208, "Invalid object name 'TargetDB.DOMAIN\\\\HOSTNAME.login_lookup'.DB-Lib error message 20018, severity 16:\nGeneral SQL Server error: Check messages from the SQL Server\n")
[15:54:48] [PAYLOAD] SELECT LTRIM(STR(COUNT(*))) FROM TargetDB.[DOMAIN\\HOSTNAME].login_lookup
[15:54:48] [WARNING] (remote) (208, "Invalid object name 'TargetDB.DOMAIN\\\\HOSTNAME.login_lookup'.DB-Lib error message 20018, severity 16:\nGeneral SQL Server error: Check messages from the SQL Server\n")
[15:54:48] [WARNING] unable to retrieve the entries for table 'DOMAIN\\HOSTNAME.login_lookup' in database 'TargetDB'
[15:54:48] [INFO] fetching columns for table 'DOMAIN\\HOSTNAME.login_types' in database 'TargetDB'
[15:54:48] [PAYLOAD] SELECT TargetDB..syscolumns.name,TYPE_NAME(TargetDB..syscolumns.xtype) FROM TargetDB..syscolumns,TargetDB..sysobjects WHERE TargetDB..syscolumns.id=TargetDB..sysobjects.id AND TargetDB..sysobjects.name='login_types'
[15:54:48] [INFO] resumed: [[u'id', u'int'], [u'value', u'varchar'], [u'description', u'varchar']]...
[15:54:48] [INFO] fetching entries for table 'DOMAIN\\HOSTNAME.login_types' in database 'TargetDB'
[15:54:48] [PAYLOAD] SELECT LTRIM(STR(COUNT(*))) FROM TargetDB.[DOMAIN\\HOSTNAME].login_types
[15:54:48] [WARNING] (remote) (208, "Invalid object name 'TargetDB.DOMAIN\\\\HOSTNAME.login_types'.DB-Lib error message 20018, severity 16:\nGeneral SQL Server error: Check messages from the SQL Server\n")
[15:54:48] [PAYLOAD] SELECT LTRIM(STR(COUNT(*))) FROM TargetDB.[DOMAIN\\HOSTNAME].login_types
[15:54:48] [WARNING] (remote) (208, "Invalid object name 'TargetDB.DOMAIN\\\\HOSTNAME.login_types'.DB-Lib error message 20018, severity 16:\nGeneral SQL Server error: Check messages from the SQL Server\n")
[15:54:48] [PAYLOAD] SELECT LTRIM(STR(COUNT(*))) FROM TargetDB.[DOMAIN\\HOSTNAME].login_types
[15:54:48] [WARNING] (remote) (208, "Invalid object name 'TargetDB.DOMAIN\\\\HOSTNAME.login_types'.DB-Lib error message 20018, severity 16:\nGeneral SQL Server error: Check messages from the SQL Server\n")
[15:54:48] [WARNING] unable to retrieve the entries for table 'DOMAIN\\HOSTNAME.login_types' in database 'TargetDB'
[15:54:48] [INFO] fetching columns for table 'DOMAIN\\HOSTNAME.logins' in database 'TargetDB'
[15:54:48] [PAYLOAD] SELECT TargetDB..syscolumns.name,TYPE_NAME(TargetDB..syscolumns.xtype) FROM TargetDB..syscolumns,TargetDB..sysobjects WHERE TargetDB..syscolumns.id=TargetDB..sysobjects.id AND TargetDB..sysobjects.name='logins'
[15:54:48] [INFO] resumed: [[u'id', u'int'], [u'user_id', u'int'], [u'login_type_id', u'int'], [u'hash_type_id', u'int'], [u'token', u'varchar'], [u'update_required', u'tinyint'], [u'create_date', u'datetime'], [u'modify_date', u'datetime']]...
[15:54:48] [INFO] fetching entries for table 'DOMAIN\\HOSTNAME.logins' in database 'TargetDB'
[15:54:48] [PAYLOAD] SELECT LTRIM(STR(COUNT(*))) FROM TargetDB.[DOMAIN\\HOSTNAME].logins
[15:54:49] [WARNING] (remote) (208, "Invalid object name 'TargetDB.DOMAIN\\\\HOSTNAME.logins'.DB-Lib error message 20018, severity 16:\nGeneral SQL Server error: Check messages from the SQL Server\n")
[15:54:49] [PAYLOAD] SELECT LTRIM(STR(COUNT(*))) FROM TargetDB.[DOMAIN\\HOSTNAME].logins
[15:54:49] [WARNING] (remote) (208, "Invalid object name 'TargetDB.DOMAIN\\\\HOSTNAME.logins'.DB-Lib error message 20018, severity 16:\nGeneral SQL Server error: Check messages from the SQL Server\n")
[15:54:49] [PAYLOAD] SELECT LTRIM(STR(COUNT(*))) FROM TargetDB.[DOMAIN\\HOSTNAME].logins
[15:54:49] [WARNING] (remote) (208, "Invalid object name 'TargetDB.DOMAIN\\\\HOSTNAME.logins'.DB-Lib error message 20018, severity 16:\nGeneral SQL Server error: Check messages from the SQL Server\n")
[15:54:49] [WARNING] unable to retrieve the entries for table 'DOMAIN\\HOSTNAME.logins' in database 'TargetDB'
[15:54:49] [INFO] fetching columns for table 'DOMAIN\\HOSTNAME.policy_lookup' in database 'TargetDB'
[15:54:49] [PAYLOAD] SELECT TargetDB..syscolumns.name,TYPE_NAME(TargetDB..syscolumns.xtype) FROM TargetDB..syscolumns,TargetDB..sysobjects WHERE TargetDB..syscolumns.id=TargetDB..sysobjects.id AND TargetDB..sysobjects.name='policy_lookup'
[15:54:49] [INFO] resumed: [[u'policy', u'varchar'], [u'user_id', u'int']]...
[15:54:49] [INFO] fetching entries for table 'DOMAIN\\HOSTNAME.policy_lookup' in database 'TargetDB'
[15:54:49] [PAYLOAD] SELECT LTRIM(STR(COUNT(*))) FROM TargetDB.[DOMAIN\\HOSTNAME].policy_lookup
[15:54:49] [WARNING] (remote) (208, "Invalid object name 'TargetDB.DOMAIN\\\\HOSTNAME.policy_lookup'.DB-Lib error message 20018, severity 16:\nGeneral SQL Server error: Check messages from the SQL Server\n")
[15:54:49] [PAYLOAD] SELECT LTRIM(STR(COUNT(*))) FROM TargetDB.[DOMAIN\\HOSTNAME].policy_lookup
[15:54:49] [WARNING] (remote) (208, "Invalid object name 'TargetDB.DOMAIN\\\\HOSTNAME.policy_lookup'.DB-Lib error message 20018, severity 16:\nGeneral SQL Server error: Check messages from the SQL Server\n")
[15:54:49] [PAYLOAD] SELECT LTRIM(STR(COUNT(*))) FROM TargetDB.[DOMAIN\\HOSTNAME].policy_lookup
[15:54:49] [WARNING] (remote) (208, "Invalid object name 'TargetDB.DOMAIN\\\\HOSTNAME.policy_lookup'.DB-Lib error message 20018, severity 16:\nGeneral SQL Server error: Check messages from the SQL Server\n")
[15:54:49] [WARNING] unable to retrieve the entries for table 'DOMAIN\\HOSTNAME.policy_lookup' in database 'TargetDB'
[15:54:49] [INFO] fetching columns for table 'DOMAIN\\HOSTNAME.quote_lookup' in database 'TargetDB'
[15:54:49] [PAYLOAD] SELECT TargetDB..syscolumns.name,TYPE_NAME(TargetDB..syscolumns.xtype) FROM TargetDB..syscolumns,TargetDB..sysobjects WHERE TargetDB..syscolumns.id=TargetDB..sysobjects.id AND TargetDB..sysobjects.name='quote_lookup'
[15:54:49] [INFO] resumed: [[u'quote', u'varchar'], [u'user_id', u'int']]...
[15:54:49] [INFO] fetching entries for table 'DOMAIN\\HOSTNAME.quote_lookup' in database 'TargetDB'
[15:54:49] [PAYLOAD] SELECT LTRIM(STR(COUNT(*))) FROM TargetDB.[DOMAIN\\HOSTNAME].quote_lookup
[15:54:49] [WARNING] (remote) (208, "Invalid object name 'TargetDB.DOMAIN\\\\HOSTNAME.quote_lookup'.DB-Lib error message 20018, severity 16:\nGeneral SQL Server error: Check messages from the SQL Server\n")
[15:54:49] [PAYLOAD] SELECT LTRIM(STR(COUNT(*))) FROM TargetDB.[DOMAIN\\HOSTNAME].quote_lookup
[15:54:49] [WARNING] (remote) (208, "Invalid object name 'TargetDB.DOMAIN\\\\HOSTNAME.quote_lookup'.DB-Lib error message 20018, severity 16:\nGeneral SQL Server error: Check messages from the SQL Server\n")
[15:54:49] [PAYLOAD] SELECT LTRIM(STR(COUNT(*))) FROM TargetDB.[DOMAIN\\HOSTNAME].quote_lookup
[15:54:49] [WARNING] (remote) (208, "Invalid object name 'TargetDB.DOMAIN\\\\HOSTNAME.quote_lookup'.DB-Lib error message 20018, severity 16:\nGeneral SQL Server error: Check messages from the SQL Server\n")
[15:54:49] [WARNING] unable to retrieve the entries for table 'DOMAIN\\HOSTNAME.quote_lookup' in database 'TargetDB'
[15:54:49] [INFO] fetching columns for table 'DOMAIN\\HOSTNAME.standard_login_types' in database 'TargetDB'
[15:54:49] [PAYLOAD] SELECT TargetDB..syscolumns.name,TYPE_NAME(TargetDB..syscolumns.xtype) FROM TargetDB..syscolumns,TargetDB..sysobjects WHERE TargetDB..syscolumns.id=TargetDB..sysobjects.id AND TargetDB..sysobjects.name='standard_login_types'
[15:54:49] [INFO] resumed: [[u'id', u'int'], [u'value', u'varchar'], [u'description', u'varchar']]...
[15:54:49] [INFO] fetching entries for table 'DOMAIN\\HOSTNAME.standard_login_types' in database 'TargetDB'
[15:54:49] [PAYLOAD] SELECT LTRIM(STR(COUNT(*))) FROM TargetDB.[DOMAIN\\HOSTNAME].standard_login_types
[15:54:49] [WARNING] (remote) (208, "Invalid object name 'TargetDB.DOMAIN\\\\HOSTNAME.standard_login_types'.DB-Lib error message 20018, severity 16:\nGeneral SQL Server error: Check messages from the SQL Server\n")
[15:54:49] [PAYLOAD] SELECT LTRIM(STR(COUNT(*))) FROM TargetDB.[DOMAIN\\HOSTNAME].standard_login_types
[15:54:49] [WARNING] (remote) (208, "Invalid object name 'TargetDB.DOMAIN\\\\HOSTNAME.standard_login_types'.DB-Lib error message 20018, severity 16:\nGeneral SQL Server error: Check messages from the SQL Server\n")
[15:54:49] [PAYLOAD] SELECT LTRIM(STR(COUNT(*))) FROM TargetDB.[DOMAIN\\HOSTNAME].standard_login_types
[15:54:49] [WARNING] (remote) (208, "Invalid object name 'TargetDB.DOMAIN\\\\HOSTNAME.standard_login_types'.DB-Lib error message 20018, severity 16:\nGeneral SQL Server error: Check messages from the SQL Server\n")
[15:54:49] [WARNING] unable to retrieve the entries for table 'DOMAIN\\HOSTNAME.standard_login_types' in database 'TargetDB'
[15:54:49] [INFO] fetching columns for table 'DOMAIN\\HOSTNAME.users' in database 'TargetDB'
[15:54:49] [PAYLOAD] SELECT TargetDB..syscolumns.name,TYPE_NAME(TargetDB..syscolumns.xtype) FROM TargetDB..syscolumns,TargetDB..sysobjects WHERE TargetDB..syscolumns.id=TargetDB..sysobjects.id AND TargetDB..sysobjects.name='users'
[15:54:49] [INFO] resumed: [[u'id', u'int'], [u'person_id', u'int'], [u'email', u'varchar'], [u'email_verified', u'tinyint'], [u'active', u'tinyint'], [u'last_login', u'date'], [u'create_date', u'datetime'], [u'modify_date', u'datetime']]...
[15:54:49] [INFO] fetching entries for table 'DOMAIN\\HOSTNAME.users' in database 'TargetDB'
[15:54:49] [PAYLOAD] SELECT LTRIM(STR(COUNT(*))) FROM TargetDB.[DOMAIN\\HOSTNAME].users
[15:54:50] [WARNING] (remote) (208, "Invalid object name 'TargetDB.DOMAIN\\\\HOSTNAME.users'.DB-Lib error message 20018, severity 16:\nGeneral SQL Server error: Check messages from the SQL Server\n")
[15:54:50] [PAYLOAD] SELECT LTRIM(STR(COUNT(*))) FROM TargetDB.[DOMAIN\\HOSTNAME].users
[15:54:50] [WARNING] (remote) (208, "Invalid object name 'TargetDB.DOMAIN\\\\HOSTNAME.users'.DB-Lib error message 20018, severity 16:\nGeneral SQL Server error: Check messages from the SQL Server\n")
[15:54:50] [PAYLOAD] SELECT LTRIM(STR(COUNT(*))) FROM TargetDB.[DOMAIN\\HOSTNAME].users
[15:54:50] [WARNING] (remote) (208, "Invalid object name 'TargetDB.DOMAIN\\\\HOSTNAME.users'.DB-Lib error message 20018, severity 16:\nGeneral SQL Server error: Check messages from the SQL Server\n")
[15:54:50] [WARNING] unable to retrieve the entries for table 'DOMAIN\\HOSTNAME.users' in database 'TargetDB'
[15:54:50] [INFO] connection to mssql server 192.168.1.100:1433 closed
[*] shutting down at 15:54:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment