Sqlmap: Blind-based charset dump

[Annihilat0r]

Time-based dump algorithm is pretty good now. But for dumping on a sha-1 hash it takes 600 sec for me. Is it possible to add custom charset for dumping? For example --custom-charset='1234567890abcdef'. This will be useful also for duping integer values.

[stamparm]

Initial support done:

$ python sqlmap.py -hh | grep charset
    --charset=CHARSET   Blind SQL injection charset (e.g. "0123456789abcdef")

More work to be done (to make less requests)

[stamparm]

A) Regular run (242 queries): $ python sqlmap.py -u "..." --sql-query="SELECT '3858f62230ac3c915f300c664312c63f'" -v 3

B) Using --charset feature (168 queries): $ python sqlmap.py -u "..." --sql-query="SELECT '3858f62230ac3c915f300c664312c63f'" --charset="0123456789abcdef" -v 3

30% less queries :)