Re: [sqlmap-users] List of things

[Bernardo D. A. G. <ber...@gm...>]

Hi Kasper,

On Mon, Mar 15, 2010 at 18:17, Kasper Føns <th...@ma...> wrote:
> ...
> [SUGGESTION / BUG]
> ...
> I guess that the server returned 404, which of course can be valid since
> p is properly a "page" parameter.
> So, we can drop this url, but don't stop the whole google dorks progress.

Fixed and committed.

> [SUGGESTION]
> Another suggestion was being able to give some input, while sqlmap is
> trying a server, that makes sqlmap go to the next.
> Sometimes servers are just slow, unresposive or have so many cookie
> parameters that you just want to go on.
> It might be by pressing 's' for skip, just something.

We have it already in the TODO list, it will probably come for version 1.0.

> [BUG]
> Infinite connection redirection:
> ...

This will be fixed soon.

> [BUG]
> Unknown bug...
> [19:08:30] [INFO] testing if the url is stable, wait a few seconds
> [19:08:36] [WARNING] connection timed out to the target url or proxy,
> skipping to next url
> [19:08:36] [WARNING] url is not stable, sqlmap will base the page
> comparison on a sequence matcher, if no dynamic nor injectable
> parameters are detected, refer
> to user's manual paragraph 'Page comparison' and provide a string or
> regular expression to match on
> [19:08:36] [INFO] testing if User-Agent parameter 'User-Agent' is dynamic
> [19:08:37] [ERROR] unhandled exception in sqlmap/0.9-dev, please copy
> the comman
> d line and the following text and send by e-mail to
> sql...@li...urcefor
> ge.net. The developer will fix it as soon as possible:
> sqlmap version: 0.9-dev
> Python version: 2.6.4
> Operating system: win32
> Traceback (most recent call last):
>   File "C:\Users\foens\Desktop\sqlmap\sqlmap.py", line 77, in main
>     start()
>   File "C:\Users\foens\Desktop\sqlmap\lib\controller\controller.py",
> line 194, i
> n start
>     elif not checkDynParam(place, parameter, value):
>   File "C:\Users\foens\Desktop\sqlmap\lib\controller\checks.py", line
> 260, in ch
> eckDynParam
>     dynResult1 = Request.queryPage(payload, place)
>   File "C:\Users\foens\Desktop\sqlmap\lib\request\connect.py", line
> 296, in quer
> yPage
>     return comparison(page, headers, getSeqMatcher)
>   File "C:\Users\foens\Desktop\sqlmap\lib\request\comparison.py", line
> 72, in co
> mparison
>     ratio = round(conf.seqMatcher.ratio(), 3)
>   File "C:\Python26\lib\difflib.py", line 660, in ratio
>     self.get_matching_blocks(), 0)
>   File "C:\Python26\lib\difflib.py", line 482, in get_matching_blocks
>     la, lb = len(self.a), len(self.b)
> TypeError: object of type 'NoneType' has no len()

Can you please provide us with further details? What's the command
line you used? Can you also provide us (privately if you prefer) the
full output with -v5?

> [BUG]
> Also, it seems that there has been introduced a bug in lastest svn in
> regards to url redirection (as it is mentioned in the logs):
> ...

Indeed, it has. This will also be fixed soon.


-- 
Bernardo Damele A. G.

E-mail / Jabber: bernardo.damele (at) gmail.com
Mobile: +447788962949 (UK 07788962949)
PGP Key ID: 0x05F5A30F