Skip to content

A bug that has existed since v1.8.12 #5933

Description

@tanhx

Describe the bug
When you use "sqli-labs/Less-1/index.php" to export the "username, password", the password field is incorrect.

To Reproduce

  1. Run 'python sqlmap.py -u "http://192.168.xx.xx/sqli-labs/Less-1/index.php?id=1" --dbms="mysql" --batch -D "security" -T "users" -C "username,password" --dump'
  2. See error
    +----------+----------+
    | username | password |
    +----------+----------+
    | Dumb | 1 |
    | Angelina | 1 |
    | Dummy | 1 |
    | secure | 1 |
    | stupid | 1 |
    | superman | 1 |
    | batman | 1 |
    | admin | 1234 |
    | admin1 | 1 |
    | admin2 | 1 |
    | admin3 | 1 |
    | dhakkan | 1 |
    | admin4 | 1 |
    +----------+----------+

Expected behavior
+----------+------------+
| username | password |
+----------+------------+
| Dumb | Dumb |
| Angelina | I-kill-you |
| Dummy | p@ssword |
| secure | crappy |
| stupid | stupidity |
| superman | genious |
| batman | mob!le |
| admin | admin |
| admin1 | admin1 |
| admin2 | admin2 |
| admin3 | admin3 |
| dhakkan | dumbo |
| admin4 | admin4 |
+----------+------------+

Screenshots
If applicable, add screenshots to help explain your problem.

Running environment:

  • sqlmap version [Since version 1.8.12]
  • Installation method [git]
  • Operating system: [Microsoft Windows 10 x64]
  • Python version [3.13.5]

Target details:

  • DBMS [mysql 5.7.27]
  • SQLi techniques found by sqlmap [UNION query]
  • WAF/IPS [if any]
  • Relevant console output [if any]
  • Exception traceback [if any]

Additional context
Add any other context about the problem here.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions