Re: [sqlmap-users] --crawl

SourceForge Headquarters 225 Broadway Suite 1600 San Diego, CA 92101 +1 (858) 422-6466

Hi Miroslav, i still believe there is a problem with unicode chars,

root@fr:~/sqlmap# ./sqlmap.py -u "http://www.XXdomainXX" --crawl

    sqlmap/1.0-dev (r4143) - automatic SQL injection and database takeover
tool
    http://sqlmap.sourceforge.net

[!] legal disclaimer: usage of sqlmap for attacking targets without prior
mutual consent is illegal. It is the end user's responsibility to obey all
applicable local, state and federal laws. Authors assume no liability and
are not responsible for any misuse or damage caused by this program

[*] starting at 22:14:48

[22:14:48] [INFO] setting crawling options
please enter maximum depth [Enter for 1 (default)] 3
[22:14:51] [INFO] starting crawler
[22:14:51] [INFO] searching for links with depth 1
[22:14:53] [INFO] searching for links with depth 2

[22:14:59] [CRITICAL] unhandled exception in sqlmap/1.0-dev (r4143), retry
your run with the latest development version from the Subversion repository.
If the exception persists, please send by e-mail to
sql...@li... the following text and any information
required to reproduce the bug. The developers will try to reproduce the bug,
fix it accordingly and get back to you.
sqlmap version: 1.0-dev (r4143)
Python version: 2.6.5
Operating system: posix
Command line: ./sqlmap.py -u http://www.XXdomainXX --crawl
Technique: None
Back-end DBMS: None (identified)
Traceback (most recent call last):
  File "./sqlmap.py", line 77, in main
    init(cmdLineOptions)
  File "/root/sqlmap/lib/core/option.py", line 1827, in init
    __setCrawler()
  File "/root/sqlmap/lib/core/option.py", line 407, in __setCrawler
    crawler.getTargetUrls(depth)
  File "/root/sqlmap/lib/utils/crawler.py", line 96, in getTargetUrls
    runThreads(numThreads, crawlThread)
  File "/root/sqlmap/lib/core/threads.py", line 97, in runThreads
    threadFunction()
  File "/root/sqlmap/lib/utils/crawler.py", line 59, in crawlThread
    soup = BeautifulSoup(content)
  File "/root/sqlmap/extra/beautifulsoup/beautifulsoup.py", line 1522, in
__init__
    BeautifulStoneSoup.__init__(self, *args, **kwargs)
  File "/root/sqlmap/extra/beautifulsoup/beautifulsoup.py", line 1147, in
__init__
    self._feed(isHTML=isHTML)
  File "/root/sqlmap/extra/beautifulsoup/beautifulsoup.py", line 1189, in
_feed
    SGMLParser.feed(self, markup)
  File "/usr/lib/python2.6/sgmllib.py", line 104, in feed
    self.goahead(0)
  File "/usr/lib/python2.6/sgmllib.py", line 143, in goahead
    k = self.parse_endtag(i)
  File "/usr/lib/python2.6/sgmllib.py", line 320, in parse_endtag
    self.finish_endtag(tag)
  File "/usr/lib/python2.6/sgmllib.py", line 358, in finish_endtag
    method = getattr(self, 'end_' + tag)
UnicodeEncodeError: 'ascii' codec can't encode character u'\xae' in position
4: ordinal not in range(128)

[*] shutting down at 22:14:59

Thanks again for your fast resolutions i believe sqlmap is unique on this.

Regards,
Nicolas

On Mon, Jun 20, 2011 at 4:20 PM, Miroslav Stampar <
mir...@gm...> wrote:

> hi Nicolas.
>
> it should be fixed in the latest commit.
>
> kr
>
> On Mon, Jun 20, 2011 at 2:29 PM, Nicolas Krassas <kr...@de...>
> wrote:
> > Greetings,
> >
> >   I encountered the problem below whilst trying to check the new feature
> > "crawl". Also in a different website sqlmap with crawl option enabled and
> no
> > other tuning parameters successfully DOS apache service to a load of
> 100++.
> >
> > root@fr:~/sqlmap# ./sqlmap.py -u "http://www.XXdomainXX.com" --crawl
> >
> >     sqlmap/1.0-dev (r4137) - automatic SQL injection and database
> takeover
> > tool
> >     http://sqlmap.sourceforge.net
> >
> > [!] legal disclaimer: usage of sqlmap for attacking targets without prior
> > mutual consent is illegal. It is the end user's responsibility to obey
> all
> > applicable local, state and federal laws. Authors assume no liability and
> > are not responsible for any misuse or damage caused by this program
> >
> > [*] starting at 15:24:16
> >
> > [15:24:16] [INFO] setting crawling options
> > please enter maximum depth [Enter for 1 (default)] 3
> > [15:24:23] [INFO] starting crawler
> >
> > [15:24:58] [CRITICAL] unhandled exception in sqlmap/1.0-dev (r4137),
> retry
> > your run with the latest development version from the Subversion
> repository.
> > If the exception persists, please send by e-mail to
> > sql...@li... the following text and any
> information
> > required to reproduce the bug. The developers will try to reproduce the
> bug,
> > fix it accordingly and get back to you.
> > sqlmap version: 1.0-dev (r4137)
> > Python version: 2.6.5
> > Operating system: posix
> > Command line: ./sqlmap.py -u http://www.XXdomainXX.com --crawl
> > Technique: None
> > Back-end DBMS: None (identified)
> > Traceback (most recent call last):
> >   File "./sqlmap.py", line 77, in main
> >     init(cmdLineOptions)
> >   File "/root/sqlmap/lib/core/option.py", line 1823, in init
> >     __setCrawler()
> >   File "/root/sqlmap/lib/core/option.py", line 407, in __setCrawler
> >     crawler.getTargetUrls(depth)
> >   File "/root/sqlmap/lib/utils/crawler.py", line 78, in getTargetUrls
> >     runThreads(numThreads, crawlThread)
> >   File "/root/sqlmap/lib/core/threads.py", line 97, in runThreads
> >     threadFunction()
> >   File "/root/sqlmap/lib/utils/crawler.py", line 57, in crawlThread
> >     soup = BeautifulSoup(content)
> >   File "/root/sqlmap/extra/beautifulsoup/beautifulsoup.py", line 1519, in
> > __init__
> >     BeautifulStoneSoup.__init__(self, *args, **kwargs)
> >   File "/root/sqlmap/extra/beautifulsoup/beautifulsoup.py", line 1144, in
> > __init__
> >     self._feed(isHTML=isHTML)
> >   File "/root/sqlmap/extra/beautifulsoup/beautifulsoup.py", line 1186, in
> > _feed
> >     SGMLParser.feed(self, markup)
> >   File "/usr/lib/python2.6/sgmllib.py", line 104, in feed
> >     self.goahead(0)
> >   File "/usr/lib/python2.6/sgmllib.py", line 143, in goahead
> >     k = self.parse_endtag(i)
> >   File "/usr/lib/python2.6/sgmllib.py", line 320, in parse_endtag
> >     self.finish_endtag(tag)
> >   File "/usr/lib/python2.6/sgmllib.py", line 358, in finish_endtag
> >     method = getattr(self, 'end_' + tag)
> > UnicodeEncodeError: 'ascii' codec can't encode characters in position
> 4-5:
> > ordinal not in range(128)
> >
> > [*] shutting down at 15:24:58
> >
> > Regards,
> > Nicolas
> >
> >
> ------------------------------------------------------------------------------
> > EditLive Enterprise is the world's most technically advanced content
> > authoring tool. Experience the power of Track Changes, Inline Image
> > Editing and ensure content is compliant with Accessibility Checking.
> > http://p.sf.net/sfu/ephox-dev2dev
> > _______________________________________________
> > sqlmap-users mailing list
> > sql...@li...
> > https://lists.sourceforge.net/lists/listinfo/sqlmap-users
> >
> >
>
>
>
> --
> Miroslav Stampar
>
> E-mail: miroslav.stampar (at) gmail.com
> PGP Key ID: 0xB5397B1B
>