Re: [sqlmap-users] Exploit Referrer

[Miguel L. <the...@gm...>]

Failed at the first step... the update. Thanks
I have now updated and tried to pass the config file but it gives an error even with the default one.

./sqlmap.py -c sqlmap.conf -b

    sqlmap/1.0-dev (r4647) - automatic SQL injection and database takeover tool
    http://www.sqlmap.org

[*] starting at: 14:12:47


[14:12:47] [CRITICAL] unhandled exception in sqlmap/1.0-dev (r4647), retry your run with the latest development version from the Subversion repository. If the exception persists, please send by e-mail to sql...@li... the following text and any information required to reproduce the bug. The developers will try to reproduce the bug, fix it accordingly and get back to you.
sqlmap version: 1.0-dev (r4647)
Python version: 2.6.5
Operating system: posix
Command line: ./sqlmap.py -c sqlmap.conf
Technique: None
Back-end DBMS: None (identified)
Traceback (most recent call last):
  File "./sqlmap.py", line 74, in main
    init(cmdLineOptions)
  File "/root/.local/share/Trash/files/sqlmap/lib/core/option.py", line 1884, in init
    __mergeOptions(inputOptions, overrideOptions)
  File "/root/.local/share/Trash/files/sqlmap/lib/core/option.py", line 1664, in __mergeOptions
    configFileParser(inputOptions.configFile)
  File "/root/.local/share/Trash/files/sqlmap/lib/parse/configfile.py", line 101, in configFileParser
    configFileProxy(family, option, boolean, integer)
  File "/root/.local/share/Trash/files/sqlmap/lib/parse/configfile.py", line 37, in configFileProxy
    value = config.getint(section, option)
  File "/usr/lib/python2.6/ConfigParser.py", line 340, in getint
    return self._get(section, int, option)
  File "/usr/lib/python2.6/ConfigParser.py", line 337, in _get
    return conv(self.get(section, option))
ValueError: invalid literal for int() with base 10: ''

[*] shutting down at: 14:12:47



A 2012/01/03, às 17:17, Miroslav Stampar escreveu:

> Hi Miguel.
> 
> Please update to the latest revision (r4644) and use: -p referer
> 
> Kind regards,
> Miroslav Stampar
> 
> On Tue, Jan 3, 2012 at 3:35 PM, Miguel Lopes <the...@gm...> wrote:
> Hi list,
> I have a client with a SQLi on the referrer is it possible to exploit it with sqlmap without changing the source? or i do have to change some code?
> 
> Thanks in advance,
> Miguel Lopes
> ------------------------------------------------------------------------------
> Write once. Port to many.
> Get the SDK and tools to simplify cross-platform app development. Create
> new or port existing apps to sell to consumers worldwide. Explore the
> Intel AppUpSM program developer opportunity. appdeveloper.intel.com/join
> http://p.sf.net/sfu/intel-appdev
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
> 
> 
> 
> -- 
> Miroslav Stampar
> http://about.me/stamparm