Re: [sqlmap-users] Bug

SourceForge Headquarters 225 Broadway Suite 1600 San Diego, CA 92101 +1 (858) 422-6466

...
[12:57:17] [INFO] read from file
'/home/skys/sqlmap-dev/output/www.vulnsite.com/session': lancamento
[12:57:17] [INFO] retrieving the length of query output
[12:57:17] [INFO] retrieved:
[12:57:18] [INFO] retrieved:
[12:57:19] [INFO] read from file
'/home/skys/sqlmap-dev/output/www.vulnsite.com/session': esgotado
[12:57:19] [INFO] retrieving the length of query output
[12:57:19] [INFO] retrieved: 6
[12:57:20] [INFO] retrieved: bpchar
[12:57:20] [INFO] read from file
'/home/skys/sqlmap-dev/output/www.vulnsite.com/session':
preco_promocional
[12:57:20] [INFO] retrieving the length of query output
[12:57:20] [INFO] retrieved:
[12:57:21] [INFO] retrieved:
[12:57:22] [INFO] read from file
'/home/skys/sqlmap-dev/output/www.vulnsite.com/session': edicao
[12:57:22] [INFO] retrieving the length of query output
[12:57:22] [INFO] retrieved: 7
[12:57:24] [INFO] retrieved: varchar
[12:57:24] [INFO] read from file
'/home/skys/sqlmap-dev/output/www.vulnsite.com/session': isbn
[12:57:24] [INFO] retrieving the length of query output
[12:57:24] [INFO] retrieved: 7
[12:57:25] [INFO] retrieved: varchar
[12:57:25] [INFO] read from file
'/home/skys/sqlmap-dev/output/www.vulnsite.com/session': dt_cadastro
[12:57:25] [INFO] retrieving the length of query output
[12:57:25] [INFO] retrieved:
[12:57:25] [INFO] retrieved:
[12:57:27] [INFO] read from file
'/home/skys/sqlmap-dev/output/www.vulnsite.com/session': editora
[12:57:27] [INFO] retrieving the length of query output
[12:57:27] [INFO] retrieved: 7
[12:57:28] [INFO] retrieved: varchar
Database: public
Table: livro
[15 columns]
+-------------------+---------+
| Column            | Type    |
+-------------------+---------+
| ano               | int4    |
| autor             | varchar |
| dt_cadastro       |         |
| edicao            | varchar |
| editora           | varchar |
| esgotado          | bpchar  |
| id_area           | int4    |
| id_livro          | int4    |
| isbn              | varchar |
| lancamento        |         |
| paginas           | int4    |
| preco             | float4  |
| preco_promocional |         |
| release           | text    |
| titulo            | varchar |
+-------------------+---------+

$ svn info
Path: .
URL: https://svn.sqlmap.org/sqlmap/trunk/sqlmap
Repository Root: https://svn.sqlmap.org/sqlmap
Repository UUID: 7eb2e9d7-d917-0410-b3c8-b11144ad09fb
Revision: 1763
Node Kind: directory
Schedule: normal
Last Changed Author: inquisb
Last Changed Rev: 1763
Last Changed Date: 2010-06-10 12:34:28 -0300 (Thu, 10 Jun 2010)

This is ok now (despite for some reason, it failed to retrieve the
column type "dt_cadastro", "lancamento", and "preco_promocional")

Thanks for solving this in so short notice.

On Thu, Jun 10, 2010 at 12:01 PM, Miroslav Stampar
<mir...@gm...> wrote:
> We've made some modifications regarding your bug report. Could you
> please try to run it again with the latest repository version?
>
> Thanks
>
> On Thu, Jun 10, 2010 at 4:24 PM, David Guimaraes <sk...@gm...> wrote:
>> $ ./sqlmap -c arquivo.conf --threads 10 -D editora -T livro --columns
>>
>> [11:22:01] [INFO] retrieving the length of query output
>> [11:22:01] [INFO] retrieved: 10
>> [11:22:03] [INFO] retrieved: lancamento
>> [11:22:03] [INFO] retrieving the length of query output
>> [11:22:03] [INFO] retrieved:
>> [11:22:17] [ERROR] unhandled exception in sqlmap/0.9-dev, please copy
>> the command line and the following text and send by e-mail to
>> sql...@li.... The developer will fix it as soon
>> as possible:
>> sqlmap version: 0.9-dev
>> Python version: 2.5.2
>> Operating system: posix
>> Traceback (most recent call last):
>>  File "./sqlmap.py", line 89, in main
>>    start()
>>  File "/home/skys/sqlmap-dev/lib/controller/controller.py", line 268, in start
>>    action()
>>  File "/home/skys/sqlmap-dev/lib/controller/action.py", line 114, in action
>>    conf.dumper.dbTableColumns(conf.dbmsHandler.getColumns())
>>  File "/home/skys/sqlmap-dev/plugins/generic/enumeration.py", line
>> 955, in getColumns
>>    colType = inject.getValue(query, inband=False)
>>  File "/home/skys/sqlmap-dev/lib/request/inject.py", line 374, in getValue
>>    value = __goInferenceProxy(expression, fromUser, expected, batch,
>> resumeValue, unpack, charsetType, firstChar, lastChar)
>>  File "/home/skys/sqlmap-dev/lib/request/inject.py", line 304, in
>> __goInferenceProxy
>>    outputs = __goInferenceFields(expression, expressionFields,
>> expressionFieldsList, payload, expected, resumeValue=resumeValue,
>> charsetType=charsetType, firstChar=firstChar, lastChar=lastChar)
>>  File "/home/skys/sqlmap-dev/lib/request/inject.py", line 92, in
>> __goInferenceFields
>>    output = __goInference(payload, expressionReplaced, charsetType,
>> firstChar, lastChar)
>>  File "/home/skys/sqlmap-dev/lib/request/inject.py", line 51, in __goInference
>>    _, length, _ = queryOutputLength(expression, payload)
>>  File "/home/skys/sqlmap-dev/lib/utils/resume.py", line 91, in
>> queryOutputLength
>>    count, length = bisection(payload, lengthExprUnescaped, charsetType=2)
>>  File "/home/skys/sqlmap-dev/lib/techniques/blind/inference.py", line
>> 431, in bisection
>>    val = getChar(index, asciiTbl)
>>  File "/home/skys/sqlmap-dev/lib/techniques/blind/inference.py", line
>> 210, in getChar
>>    charTbl = xrange(maxChar + 1, (maxChar + 1) << 8)
>> OverflowError: long int too large to convert to int
>>
>> [*] shutting down at: 11:22:17
>>
>> $ svn info
>> Path: .
>> URL: https://svn.sqlmap.org/sqlmap/trunk/sqlmap
>> Repository Root: https://svn.sqlmap.org/sqlmap
>> Repository UUID: 7eb2e9d7-d917-0410-b3c8-b11144ad09fb
>> Revision: 1759
>> Node Kind: directory
>> Schedule: normal
>> Last Changed Author: inquisb
>> Last Changed Rev: 1759
>> Last Changed Date: 2010-06-10 11:15:32 -0300 (Thu, 10 Jun 2010)
>>
>>
>> --
>> David Gomes Guimarães
>>
>> ------------------------------------------------------------------------------
>> ThinkGeek and WIRED's GeekDad team up for the Ultimate
>> GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the
>> lucky parental unit.  See the prize list and enter to win:
>> http://p.sf.net/sfu/thinkgeek-promo
>> _______________________________________________
>> sqlmap-users mailing list
>> sql...@li...
>> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>>
>
>
>
> --
> Miroslav Stampar
>
> E-mail / Jabber: miroslav.stampar (at) gmail.com
> Mobile: +385921010204 (HR 0921010204)
> PGP Key ID: 0xB5397B1B
>

-- 
David Gomes Guimarães