Re: [sqlmap-users] SQLMap Bug

[Andres R. <and...@gm...>]

Marc,

On Wed, Nov 12, 2008 at 2:36 AM, Marc-André Laverdière
<mar...@at...> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi guys!
>
> Sorry for causing a thread without me wanting to.
> As a sidenote, its just basic usability to distinguish between a system
> failure (stack trace) and an improper set of usage parameters. I'm 100%
> with Andres on this.

+1

> I wouldn't have sent you a bug report if the output said "RFTM" instead
> of telling me to send you a bug report...

+1

> I think the time taken to change that will be lesser than the time
> you'll spend dealing with RFTM cases...

+1, +1 ,+1, +1 ;)

> Daniele Bellucci wrote:
>> I agree with Bernardo, users shall read documentation before using the
>> tool .. and if the find something wrong they can ask questions. But
>> it's important they read the documentation before posting strange
>> questione to any mailinglist (eg: pen-test) but this!
>>
>> D.
>>
>>
>>
>>
>> On Tue, Nov 11, 2008 at 3:08 PM, Bernardo Damele A. G.
>> <ber...@gm...> wrote:
>>> Hi Andres,
>>>
>>> On Tue, Nov 11, 2008 at 14:00, Andres Riancho <and...@gm...> wrote:
>>>> ...
>>>> I agree that this is the classical "RTFM", but sqlmap shouldn't show a
>>>> traceback in this case. The correct behaviour here should have been
>>>> something like:
>>>>
>>>> print 'The port you selected (value: %s) is invalid' % __hostnamePort[1]
>>> I am using optparse to parse command line parameters, it's handled
>>> automatically. Giving -u="http://..." takes '=http' as target url
>>> which is clearly wrong. Nothing I can/want to fix/change here.
>>>
>>>> ...
>>>> [ERROR] unhandled exception in sqlmap/0.6.2, please copy the command
>>>> line and the following text and send by e-mail to
>>>> sql...@li...
>>> Done!
>>>
>>> Cheers,
>>> --
>>> Bernardo Damele A. G.
>>>
>>> E-mail / Jabber: bernardo.damele (at) gmail.com
>>> Mobiles: +39-3493821385 (IT), +44-(0)7788962949 (UK)
>>> PGP Key ID: 0x05F5A30F
>>>
>>> -------------------------------------------------------------------------
>>> This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
>>> Build the coolest Linux based applications with Moblin SDK & win great prizes
>>> Grand prize is a trip for two to an Open Source event anywhere in the world
>>> http://moblin-contest.org/redirect.php?banner_id=100&url=/
>>> _______________________________________________
>>> sqlmap-users mailing list
>>> sql...@li...
>>> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>>>
>
>
> - --
> Marc-André Laverdière
> Software Security Researcher
> Innovation Labs, Tata Consultancy Services
> Hyderabad, India
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iEYEARECAAYFAkkaXWEACgkQ1pcTV+tDOi4+5QCdFw2nDM4E91oJNtobhtlTT+Xl
> DjcAnjL4XjQaSzER4bO5q4Q3h3p7T7eC
> =pTR/
> -----END PGP SIGNATURE-----
>



-- 
Andres Riancho
http://w3af.sourceforge.net/
Web Application Attack and Audit Framework