Re: [sqlmap-users] sqlmap crash

[Bernardo D. A. G. <ber...@gm...>]

Hi,

from the output message and the traceback it looks like sqlmap was
identifying the back-end DBMS as MSSQL then when confirming that, it
failed because the 25th character of @@version is not 0 (as of 2000),
5 (as of 2005) or 8 (as of 2008) as expected.
I just fixed this issue and now the traceback should have gone. Could
you please update your SVN working copy and run it again? If you have
the chance, run it with --banner and --fingerprint options and send me
the output please just to assure it's MSSQL and not Sybase.

Cheers,
Bernardo


On Mon, Dec 1, 2008 at 19:47,  <ccl...@fl...> wrote:
> ...
> [13:44:48] [INFO] testing Microsoft SQL Server
> [13:44:48] [INFO] query: LTRIM(STR(LEN(7)))
> [13:44:48] [INFO] retrieved: 1
> [13:44:51] [INFO] performed 13 queries in 3 seconds
> [13:44:51] [INFO] query: SELECT SUBSTRING((@@VERSION), 25, 1)
> [13:44:51] [INFO] retrieved:
> [13:44:53] [INFO] performed 6 queries in 1 seconds
> [13:44:53] [ERROR] unhandled exception in sqlmap/0.6.3-rc2, please copy
> the command line and the following text and send by e-mail to
> sql...@li.... The developers will fix it as soon as
> possible:
> sqlmap version: 0.6.3-rc2
> Python version: 2.5.2
> Operating system: linux2
> Traceback (most recent call last):
>  File "./sqlmap.py", line 74, in main
>    start()
>  File "/root/sqlmap/lib/controller/controller.py", line 267, in start
>    action()
>  File "/root/sqlmap/lib/controller/action.py", line 70, in action
>    print "%s\n" % conf.dbmsHandler.getFingerprint()
>  File "/root/sqlmap/plugins/dbms/mssqlserver.py", line 141, in
> getFingerprint
>    value += actVer
> TypeError: cannot concatenate 'str' and 'NoneType' objects
>
> [*] shutting down at: 13:44:53


-- 
Bernardo Damele A. G.

E-mail / Jabber: bernardo.damele (at) gmail.com
Mobiles: +39-3493821385 (IT), +44-(0)7788962949 (UK)
PGP Key ID: 0x05F5A30F