Re: [sqlmap-users] error while fetching columns for table on sqlit database

[Miroslav S. <mir...@gm...>]

Hi Ahmed.

I am very interested into this bug as it's first SQLite related.

Could you please update to the latest revision and try it again. Which
techniques were used for data retrieval (probably blind or union)?

Now, as this bug is hard to detect (because that error message from
're' is not so informative) it would be great help if you could just
put inside the common.py:

print type(value)
print value

before:
for match in re.finditer(getCompiledRegex(r"(\w+) ([A-Z]+)[,\r\n]"), value):

KR

On Wed, Jan 19, 2011 at 8:13 PM, Ahmed Shawky <ah...@is...> wrote:
> ./sqlmap.py -u "http://site" --columns -T tbl_name -D SQLite_masterdb
>
> sqlmap version: 0.9-dev (r3034)
> Python version: 2.6.4
> Operating system: posix
> Traceback (most recent call last):
>   File "./sqlmap.py", line 83, in main
>     start()
>   File "/pentest/database/sqlmap/lib/controller/controller.py", line 414, in
> start
>     action()
>   File "/pentest/database/sqlmap/lib/controller/action.py", line 96, in
> action
>     conf.dumper.dbTableColumns(conf.dbmsHandler.getColumns())
>   File "/pentest/database/sqlmap/plugins/generic/enumeration.py", line 997,
> in getColumns
>     parseSqliteTableSchema(value)
>   File "/pentest/database/sqlmap/lib/core/common.py", line 1941, in
> parseSqliteTableSchema
>     for match in re.finditer(getCompiledRegex(r"(\w+) ([A-Z]+)[,\r\n]"),
> value):
>   File "/usr/lib/python2.6/re.py", line 186, in finditer
>     return _compile(pattern, flags).finditer(string)
> TypeError: expected string or buffer
>
>
> --
>
> Ahmed Shawky El-Antry
> Pen-tester, Programmer and System administrator
> lnxg33k owner "http://lnxg33k.wordpress.com"
> Isecur1ty team "http://www.isecur1ty.org"
> Twitter @lnxg33k
>
> ------------------------------------------------------------------------------
> Protect Your Site and Customers from Malware Attacks
> Learn about various malware tactics and how to avoid them. Understand
> malware threats, the impact they can have on your business, and how you
> can protect your company and customers by using code signing.
> http://p.sf.net/sfu/oracle-sfdevnl
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>



-- 
Miroslav Stampar

E-mail / Jabber: miroslav.stampar (at) gmail.com
Mobile: +385921010204 (HR 0921010204)
PGP Key ID: 0xB5397B1B
Location: Zagreb, Croatia