question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

"Start Scan" button in SQLMAP Scanner Tab is not visible

See original GitHub issue

Hi Josh,

First of all thank you for writing this awesome burp extension, it comes real handy in identifying parameters vulnerable to sql injection using SQLMap. However, I have been facing this issue where I don’t see “Start Scan” button in SQLMAP Scanner Tab. I reached out to Burp Support and they were able to see the “Start Scan” button somehow.

I have tried the following things:

  1. Changing Display UI to Metal, OS x and Nimbus.
  2. Using it with updated Oracle Java installed.
  3. Using it on Burp pro and Burp Free
  4. Using it on Mac OS x and Kali Linux (Both Free and Pro Version)
  5. Re-Installing SQLipy Extension
  6. Re-installing Jython

but nothing seems to be working, I am using Burp (Paid and Free) and Jython latest version.

There are no errors generated only the following output:

Calling: /usr/bin/python /usr/share/sqlmap/sqlmapapi.py -s -H 127.0.0.1 -p 8888

[06:36:49] [INFO] Running REST-JSON API server at '127.0.0.1:8888'..
[06:36:49] [INFO] Admin ID: 683e40ffbf9de08abf671fe0baec0532
[06:36:49] [DEBUG] IPC database: /tmp/sqlmapipc-sHXl8u
[06:36:49] [DEBUG] REST-JSON API server connected to IPC database

What do you think could be causing this issue?

Let us know your thoughts on this.

-Ishan

Issue Analytics

  • State:closed
  • Created 7 years ago
  • Comments:6 (3 by maintainers)

github_iconTop GitHub Comments

1reaction
codewatchorgcommented, Aug 29, 2016

Dmitry,

You just download the script file, then when you start Burp go to the “Extender->Extensions” tab and hit the “Add” button. In the “Extension Details” you change the type to Python, hit the “Select file” button and navigate to where you downloaded the script, and then click the “Next” button.

Thanks, Josh

From: Dmitry Dementyev [mailto:notifications@github.com] Sent: Monday, August 29, 2016 4:31 AM To: codewatchorg/sqlipy sqlipy@noreply.github.com Cc: Josh Bery josh.berry@codewatch.org; Mention mention@noreply.github.com Subject: Re: [codewatchorg/sqlipy] “Start Scan” button in SQLMAP Scanner Tab is not visible (#10)

How can i install sqlipy in burp manually from git without bapp store?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/codewatchorg/sqlipy/issues/10#issuecomment-243077732 , or mute the thread https://github.com/notifications/unsubscribe-auth/AHkg8YgQD6nX4irm6uaKtFMz5C3bSgaZks5qkqa5gaJpZM4JdkXF . https://github.com/notifications/beacon/AHkg8S5eQQhA86OKhaPhH3ymC5f-_OU9ks5qkqa5gaJpZM4JdkXF.gif

1reaction
fengdingbocommented, Aug 11, 2016

trying find in SQLiPy.py “self._jButtonStartScan.setBounds(346, 1047, 103, 29)” change “self._jButtonStartScan.setBounds(346, 10, 103, 29)”

Read more comments on GitHub >

github_iconTop Results From Across the Web

SQLiPy plugin, no start button for sqlmap tab
0 Issue: When trying to use the SQLmap plugin for Burpsuite with the above installations the "start" button doesn't appear in the SQLmap...
Read more >
Important SQLMap commands - Infosec Resources
The batch command is used for non-interactive sessions. When we are trying to scan something, SQLMap may ask us to provide input during...
Read more >
SQLiPy: A SQLMap Plugin for Burp | CodeWatch
Then you are ready to begin injection testing after clicking the “Start Scan” button. Progress and informational messages on scans and other ...
Read more >
Beginner's Guide to SQL Injection, Sqlmap + Owasp-zap
If you scanned a site with a sql injection vuln you should see flags like this in alerts tab. Owasp-zap Flags.
Read more >
SQLmap POST request injection - HackerTarget.com
Using SQLmap version 0.9 to perform POST based injections is simple ... not be injectable [13:26:55] [INFO] testing sql injection on POST ...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found