Re: [sqlmap-users] unhandled exception: ValueError: unknown url type (r3077)

[Miroslav S. <mir...@gm...>]

hi buawig.

thank you for your report.

we've done some basic checking to prevent this kind of behavior in the
latest commit.

kr

On Sun, Jan 23, 2011 at 2:15 PM,  <bu...@gm...> wrote:
> Hi,
>
> don't know if this should be called a bug or just user stupidity but I
> report it anyway.
> The following occurred after providing 'use insecure' as new url
> (redirect question)
> because I thought I was already on the sql-shell> prompt
>
>
> sqlmap version: 0.9-dev (r3077)
> Python version: 2.6.4
> Operating system: posix
> Traceback (most recent call last):
>  File "./sqlmap.py", line 83, in main
>    start()
>  File "sqlmap-dev/lib/controller/controller.py", line 414, in start
>    action()
>  File "sqlmap-dev/lib/controller/action.py", line 115, in action
>    conf.dbmsHandler.sqlShell()
>  File "sqlmap-dev/plugins/generic/enumeration.py", line 1999, in sqlShell
>    output = self.sqlQuery(query)
>  File "sqlmap-dev/plugins/generic/enumeration.py", line 1945, in sqlQuery
>    output = inject.getValue(query, fromUser=True)
>  File "sqlmap-dev/lib/request/inject.py", line 463, in getValue
>    value = __goInferenceProxy(query, fromUser, expected, batch,
> resumeValue, unpack, charsetType, firstChar, lastChar)
>  File "sqlmap-dev/lib/request/inject.py", line 315, in __goInferenceProxy
>    outputs = __goInferenceFields(expression, expressionFields,
> expressionFieldsList, payload, expected, resumeValue=resumeValue,
> charsetType=charsetType, firstChar=firstChar, lastChar=lastChar)
>  File "sqlmap-dev/lib/request/inject.py", line 99, in __goInferenceFields
>    output = __goInference(payload, expressionReplaced, charsetType,
> firstChar, lastChar)
>  File "sqlmap-dev/lib/request/inject.py", line 64, in __goInference
>    count, value = bisection(payload, expression, length, charsetType,
> firstChar, lastChar)
>  File "sqlmap-dev/lib/techniques/blind/inference.py", line 483, in
> bisection
>    val = getChar(index, asciiTbl)
>  File "sqlmap-dev/lib/techniques/blind/inference.py", line 189, in getChar
>    result = Request.queryPage(forgedPayload,
> timeBasedCompare=timeBasedCompare, raise404=False)
>  File "sqlmap-dev/lib/request/connect.py", line 431, in queryPage
>    Connect.queryPage(content=True)
>  File "sqlmap-dev/lib/request/connect.py", line 457, in queryPage
>    page, headers = Connect.getPage(url=uri, get=get, post=post,
> cookie=cookie, ua=ua, silent=silent, method=method,
> auxHeaders=auxHeaders, response=response, raise404=raise404,
> ignoreTimeout=timeBasedCompare)
>  File "sqlmap-dev/lib/request/connect.py", line 195, in getPage
>    conn = urllib2.urlopen(req)
>  File "/usr/lib64/python2.6/urllib2.py", line 124, in urlopen
>    return _opener.open(url, data, timeout)
>  File "/usr/lib64/python2.6/urllib2.py", line 381, in open
>    protocol = req.get_type()
>  File "/usr/lib64/python2.6/urllib2.py", line 242, in get_type
>    raise ValueError, "unknown url type: %s" % self.__original
> ValueError: unknown url type: use%20insecure
>
> ------------------------------------------------------------------------------
> Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)!
> Finally, a world-class log management solution at an even better price-free!
> Download using promo code Free_Logger_4_Dev2Dev. Offer expires
> February 28th, so secure your free ArcSight Logger TODAY!
> http://p.sf.net/sfu/arcsight-sfd2d
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>



-- 
Miroslav Stampar

E-mail / Jabber: miroslav.stampar (at) gmail.com
Mobile: +385921010204 (HR 0921010204)
PGP Key ID: 0xB5397B1B
Location: Zagreb, Croatia