[sqlmap-users] bugs

[<ja...@ev...>]

Hi,

Newest SVN. Python is rather old on this box, I'd be willing to upgrade 
and retry if this error isnt reproduceable.

[17:44:45] [WARNING] the functionality requested might not work because 
the session user is not a database administrator
[17:44:45] [INFO] checking if xp_cmdshell extended procedure is available, 
wait..
xp_cmdshell extended procedure does not seem to be available. Do you want 
sqlmap to try to re-enable it? [Y/n] y
[17:45:05] [ERROR] unhandled exception in sqlmap/0.8-dev1, please copy the 
command line and the following text and send by e-mail to 
sql...@li.... The developer will fix it as soon as 
possible:
sqlmap version: 0.8-dev1
Python version: 2.4.4
Operating system: linux2
Traceback (most recent call last):
   File "./sqlhax", line 84, in main
     start()
   File "/nfs/sqlmap/lib/controller/controller.py", line 263, 
in start
     action()
   File "/nfs/sqlmap/lib/controller/action.py", line 140, in 
action
     conf.dbmsHandler.osShell()
   File "/nfs/sqlmap/plugins/generic/takeover.py", line 300, 
in osShell
     self.initEnv()
   File "/nfs/sqlmap/lib/takeover/abstraction.py", line 168, 
in initEnv
     self.xpCmdshellInit(mandatory)
   File "/nfs/sqlmap/lib/takeover/xp_cmdshell.py", line 181, 
in xpCmdshellInit
     self.__xpCmdshellConfigure(1)
   File "/nfs/sqlmap/lib/takeover/xp_cmdshell.py", line 106, 
in __xpCmdshellConfigure
     if kb.dbmsVersion[0] in ( "2005", "2008" ):
IndexError: list index out of range

Also, for anyone on the list who is actually interested check out this 
cheat sheet, its pretty awesome.

http://pentestmonkey.net/blog/mysql-sql-injection-cheat-sheet/

Cheers,
James