{"action":"opened","issue":{"url":"https://api.github.com/repos/sqlmapproject/sqlmap/issues/1604","labels_url":"https://api.github.com/repos/sqlmapproject/sqlmap/issues/1604/labels{/name}","comments_url":"https://api.github.com/repos/sqlmapproject/sqlmap/issues/1604/comments","events_url":"https://api.github.com/repos/sqlmapproject/sqlmap/issues/1604/events","html_url":"https://github.com/sqlmapproject/sqlmap/issues/1604","id":121519703,"number":1604,"title":"Time-based extremely slow SQLI ( tweak needed ? )","user":{"login":"ultr7as","id":9898241,"avatar_url":"https://avatars.githubusercontent.com/u/9898241?v=3","gravatar_id":"","url":"https://api.github.com/users/ultr7as","html_url":"https://github.com/ultr7as","followers_url":"https://api.github.com/users/ultr7as/followers","following_url":"https://api.github.com/users/ultr7as/following{/other_user}","gists_url":"https://api.github.com/users/ultr7as/gists{/gist_id}","starred_url":"https://api.github.com/users/ultr7as/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ultr7as/subscriptions","organizations_url":"https://api.github.com/users/ultr7as/orgs","repos_url":"https://api.github.com/users/ultr7as/repos","events_url":"https://api.github.com/users/ultr7as/events{/privacy}","received_events_url":"https://api.github.com/users/ultr7as/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-12-10T16:04:02Z","updated_at":"2015-12-10T16:04:02Z","closed_at":null,"body":"Hello dear community , I have a question for you. \r\nI'm trying to pentest a web application I work for and I am facing a significant issue . \r\nSince injection is based on http header I am using the following command . \r\n~sqlmap -r '/root/Desktop/headers.txt' --dbs \r\nwhich ends up finding the tables by 1 letter per ~24 seconds . \r\nHowever the issue is that even if I try the --time-sec or -o commands it looks like sqlmap overrides it by viewing the following message . \r\n~[01:48:27] [WARNING] time-based comparison requires larger statistical model, please wait..............................\r\n~[01:48:38] [WARNING] it is very important not to stress the network adapter during usage of time-based payloads to prevent potential errors \r\n~24\r\n\r\n24 is the seconds that take between I get each letter for the databases name , so is there any way of getting it lower ? I mean , It takes like half an hour to enumerate 4 databases . \r\nP.S : Tried a very older version of sqlmap in case of version compatibility but still nothing I still get the 24 number ( which is obviously seconds I guess ) .\r\nLooking forward for a reply , thanks in advance ! \r\n"}}