Re: [sqlmap-users] sqlmap encode/decode/unicode bug

[Miroslav S. <mir...@gm...>]

Hi Alexander.

Thank you for your report. This should be hopefully fixed with the latest
commit (r4642).

Kind regards,
Miroslav Stampar

On Thu, Dec 29, 2011 at 2:10 AM, Alexander Rigbo <al...@ri...> wrote:

> Hello,
>
> I got this error recently:
>
> sqlmap version: 1.0-dev (r4638)
> Python version: 2.6.6
> Operating system: posix
> Command line: ./sqlmap.py -u
> ******************************************************* --columns
> Technique: UNION
> Back-end DBMS: MySQL (fingerprinted)
> Traceback (most recent call last):
>  File "/home/alex/sqlmap-dev/_sqlmap.py", line 83, in main
>    start()
>  File "/home/alex/sqlmap-dev/lib/controller/controller.py", line 588,
> in start
>    action()
>  File "/home/alex/sqlmap-dev/lib/controller/action.py", line 100, in
> action
>    conf.dumper.dbTableColumns(conf.dbmsHandler.getColumns())
>  File "/home/alex/sqlmap-dev/plugins/generic/enumeration.py", line
> 1138, in getColumns
>    value = inject.getValue(query, blind=False)
>  File "/home/alex/sqlmap-dev/lib/request/inject.py", line 433, in
> getValue
>    value = __goInband(query, expected, unique, resumeValue, unpack,
> dump)
>  File "/home/alex/sqlmap-dev/lib/request/inject.py", line 381, in
> __goInband
>    output = unionUse(expression, unpack=unpack, dump=dump)
>  File "/home/alex/sqlmap-dev/lib/techniques/union/use.py", line 239, in
> unionUse
>    output = __oneShotUnionUse(countedExpression, unpack)
>  File "/home/alex/sqlmap-dev/lib/techniques/union/use.py", line 59, in
> __oneShotUnionUse
>    injExpression = unescaper.unescape(agent.concatQuery(expression,
> unpack))
>  File "/home/alex/sqlmap-dev/lib/core/unescaper.py", line 28, in
> unescape
>    return self[identifiedDbms](expression, quote=quote)
>  File "/home/alex/sqlmap-dev/plugins/dbms/mysql/syntax.py", line 25, in
> unescape
>    unescaped = unescaped.replace(item, "0x%s" %
> binascii.hexlify(item.strip("'")))
> UnicodeEncodeError: 'ascii' codec can't encode character u'\xe4' in
> position 1: ordinal not in range(128)
>
> I would assume that the problem is that the table whose columns it was
> trying to fetch contains an 'ä' (&auml; in html).
>
> This is the last line before the error dump:
>
> [01:43:06] [INFO] fetching columns for table '`källa`' on database
> ''
>
> The ä is an 'ä' in unicode written to the screen using ISO8859-1.
>
> Hope you have enough info, otherwise I'd be happy to supply you with
> more :-)
>
> Best regards,
> Alexander
>
>
>
> ------------------------------------------------------------------------------
> Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don't need a complex
> infrastructure or vast IT resources to deliver seamless, secure access to
> virtual desktops. With this all-in-one solution, easily deploy virtual
> desktops for less than the cost of PCs and save 60% on VDI infrastructure
> costs. Try it free! http://p.sf.net/sfu/Citrix-VDIinabox
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>



-- 
Miroslav Stampar
http://about.me/stamparm