Re: [sqlmap-users] Unknown Encoding
Brought to you by:
inquisb
From: Bernardo D. A. G. <ber...@gm...> - 2010-06-30 13:23:30
|
Miroslav fixed this bug and committed the patch. It's in svn. Thanks for reporting. Bernardo On Wed, Jun 30, 2010 at 11:31, mitchell <mit...@tu...> wrote: > Hello, > First, good job on the SOAP-based requests improvement! I am really looking > forward to test this feature in a test. > I was using sqlmap against the site of a customer with a Cyrillic encoding > the other day, and it produced the following error: > ------------------------------------------------ > # ./sqlmap.py -u 'http://url.com/script.php?id=1' > sqlmap/0.9-dev - automatic SQL injection and database takeover tool > http://sqlmap.sourceforge.net > [*] starting at: 06:19:48 > [06:19:48] [INFO] using > '/pentest/database/sqlmap/output/www.url.com/session' as session file > [06:19:48] [INFO] testing connection to the target url > [06:19:49] [ERROR] unhandled exception in sqlmap/0.9-dev, please copy the > command line and the following text and send by e-mail to > sql...@li.... The developer will fix it as soon as > possible: > sqlmap version: 0.9-dev > Python version: 2.6.5 > Operating system: posix > Traceback (most recent call last): > File "./sqlmap.py", line 89, in main > start() > File "/pentest/database/sqlmap/lib/controller/controller.py", line 154, in > start > if not checkConnection() or not checkString() or not checkRegexp(): > File "/pentest/database/sqlmap/lib/controller/checks.py", line 395, in > checkConnection > page, _ = Request.getPage() > File "/pentest/database/sqlmap/lib/request/connect.py", line 192, in > getPage > page = decodePage(page, responseHeaders.get("Content-Encoding"), > responseHeaders.get("Content-Type")) > File "/pentest/database/sqlmap/lib/request/basic.py", line 107, in > decodePage > page = unicode(page, contentType.split('charset=')[-1]) #don't use > getUnicode here. it needs to stay as is. > LookupError: unknown encoding: cp-1251 > [*] shutting down at: 06:19:49 > =========== > # svn info > Path: . > URL: https://svn.sqlmap.org/sqlmap/trunk/sqlmap > Repository Root: https://svn.sqlmap.org/sqlmap > Repository UUID: 7eb2e9d7-d917-0410-b3c8-b11144ad09fb > Revision: 1775 > Node Kind: directory > Schedule: normal > Last Changed Author: inquisb > Last Changed Rev: 1775 > Last Changed Date: 2010-06-25 16:24:43 +0300 (Fri, 25 Jun 2010) > ------------------------------------------------ > I can recreate the error with the last update of sqlmap, as of several > minutes ago. > It seems that sqlmap is getting the encoding of the page from the HTTP > response, which in this case is > <meta http-equiv="Content-Type" content="text/html; charset=windows-1251"> > The encoding in python is 'cp1251', hence the lookup error. > Maybe sqlmap can keep a dictionary of "encoding translations", so that it > can translate encodings when there is dash in the encoding returned in the > response? > Cheers! > # mitchell > ------------------------------------------------------------------------------ > This SF.net email is sponsored by Sprint > What will you do first with EVO, the first 4G phone? > Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first > _______________________________________________ > sqlmap-users mailing list > sql...@li... > https://lists.sourceforge.net/lists/listinfo/sqlmap-users > > -- Bernardo Damele A. G. E-mail / Jabber: bernardo.damele (at) gmail.com Mobile: +447788962949 (UK 07788962949) PGP Key ID: 0x05F5A30F |