Re: [sqlmap-users] New Error

[Miroslav S. <mir...@gm...>]

hi.

this is a complex Python bug. i've recently found a patch for this kind of
behavior, but it seems that the patch only solves the problem with single
threaded mode (for those who knows python, line 29 in basicauthhandler.py
with "if req is not self.retried_req" is problematic for multi threaded
mode).

kr

On Wed, Jan 5, 2011 at 10:19 AM, <nig...@em...> wrote:

> Hi,
>
> the Injection works great for Hours and then this. The only thing i have
> changed is the start parameter.
>
> sqlmap -u "http://xxxxxxx-xxx/show_thumb_main2.php?id=282334&type=gallery"
> -a C:\pentest\sqlmap.0.9\txt\user-agents.txt  --threads=3 --auth-type=basic
> --auth-cred=xxxx:xxxxx -p id --suffix=282334 --level 5 --risk 3 --dump -D
> xxxx -T xxxxxx --start=47951
>
>   File "C:\pentest\sqlmap.0.9\lib\request\basicauthhandler.py", line 33, in
> http_error_auth_reqed
>     self, auth_header, host, req, headers)
>   File "C:\Python26\lib\urllib2.py", line 833, in http_error_auth_reqed
>     return self.retry_http_basic_auth(host, req, realm)
>   File "C:\Python26\lib\urllib2.py", line 843, in retry_http_basic_auth
>     return self.parent.open(req, timeout=req.timeout)
>   File "C:\Python26\lib\urllib2.py", line 397, in open
>     response = meth(req, response)
>   File "C:\Python26\lib\urllib2.py", line 510, in http_response
>     'http', request, response, code, msg, hdrs)
>   File "C:\Python26\lib\urllib2.py", line 429, in error
>     result = self._call_chain(*args)
>   File "C:\Python26\lib\urllib2.py", line 369, in _call_chain
>     result = func(*args)
>   File "C:\Python26\lib\urllib2.py", line 855, in http_error_401
>     url, req, headers)
>   File "C:\pentest\sqlmap.0.9\lib\request\basicauthhandler.py", line 33, in
> http_error_auth_reqed
>     self, auth_header, host, req, headers)
>   File "C:\Python26\lib\urllib2.py", line 833, in http_error_auth_reqed
>     return self.retry_http_basic_auth(host, req, realm)
>   File "C:\Python26\lib\urllib2.py", line 843, in retry_http_basic_auth
>     return self.parent.open(req, timeout=req.timeout)
>   File "C:\Python26\lib\urllib2.py", line 391, in open
>     response = self._open(req, data)
>   File "C:\Python26\lib\urllib2.py", line 409, in _open
>     '_open', req)
>   File "C:\Python26\lib\urllib2.py", line 369, in _call_chain
>     result = func(*args)
>   File "C:\Python26\lib\urllib2.py", line 1161, in http_open
>     return self.do_open(httplib.HTTPConnection, req)
>   File "C:\Python26\lib\urllib2.py", line 1107, in do_open
>     h = http_class(host, timeout=req.timeout) # will parse host:port
> RuntimeError: maximum recursion depth exceeded
>
> [*] shutting down at: 10:12:52
>
>
> ------------------------------------------------------------------------------
> Learn how Oracle Real Application Clusters (RAC) One Node allows customers
> to consolidate database storage, standardize their database environment,
> and,
> should the need arise, upgrade to a full multi-node Oracle RAC database
> without downtime or disruption
> http://p.sf.net/sfu/oracle-sfdevnl
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>


-- 
Miroslav Stampar

E-mail / Jabber: miroslav.stampar (at) gmail.com
Mobile: +385921010204 (HR 0921010204)
PGP Key ID: 0xB5397B1B
Location: Zagreb, Croatia