Re: [sqlmap-users] SQLMap Bug

[Andres R. <and...@gm...>]

Bernardo,

On Mon, Nov 10, 2008 at 9:11 PM, Bernardo Damele A. G.
<ber...@gm...> wrote:
> Hi Marc-Andre',
>
> Marc-André Laverdière wrote:
>> ...
>> I'm having the following problem on a vanilla install on my Ubuntu 8.10 box:
>>
>> sqlmap -u="http://localhost:8180/securibench-micro/"
>>
>>     sqlmap/0.6.2 coded by Bernardo Damele A. G. <ber...@gm...>
>>                         and Daniele Bellucci <dan...@gm...>
>>
>> [*] starting at: 15:09:51
>>
>> [15:09:51] [ERROR] unhandled exception in sqlmap/0.6.2, please copy the
>> command line and the following text and send by e-mail to
>> ber...@gm.... I will fix it as soon as possible:
>> sqlmap version: 0.6.2
>> Python version: 2.5.2
>> Operating system: linux2
>> Traceback (most recent call last):
>>   File "/usr/bin/sqlmap", line 74, in main
>>     start()
>>   File "/usr/share/sqlmap/lib/controller/controller.py", line 125, in start
>>     initTargetEnv()
>>   File "/usr/share/sqlmap/lib/core/target.py", line 200, in initTargetEnv
>>     parseTargetUrl()
>>   File "/usr/share/sqlmap/lib/core/common.py", line 502, in parseTargetUrl
>>     conf.port = int(__hostnamePort[1])
>> ValueError: invalid literal for int() with base 10: ''
>
> The syntax is -u "http://localhost:8180/securibench-micro/" or
> --url="http://localhost:8180/securibench-micro/".
>
> Refer to the user's manual and sqlmap.py -h next time.

I agree that this is the classical "RTFM", but sqlmap shouldn't show a
traceback in this case. The correct behaviour here should have been
something like:

print 'The port you selected (value: %s) is invalid' % __hostnamePort[1]

Also, you should change

[ERROR] unhandled exception in sqlmap/0.6.2, please copy the command
line and the following text and send by e-mail to
ber...@gm...

with this:

[ERROR] unhandled exception in sqlmap/0.6.2, please copy the command
line and the following text and send by e-mail to
sql...@li...


> Cheers,
> --
> Bernardo Damele A. G.
>
> E-mail / Jabber: bernardo.damele (at) gmail.com
> Mobiles: +39-3493821385 (IT), +44-(0)7788962949 (UK)
> PGP Key ID: 0x05F5A30F
>
> -------------------------------------------------------------------------
> This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
> Build the coolest Linux based applications with Moblin SDK & win great prizes
> Grand prize is a trip for two to an Open Source event anywhere in the world
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>



-- 
Andres Riancho
http://w3af.sourceforge.net/
Web Application Attack and Audit Framework