Re: [sqlmap-users] Exploit Referrer

[Miroslav S. <mir...@gm...>]

Hi Miguel.

Thank you for your report. Find it fixed with the latest commit (r4648).

Kind regards,
Miroslav Stampar

On Wed, Jan 4, 2012 at 3:23 PM, Miguel Lopes <the...@gm...> wrote:

> Failed at the first step... the update. Thanks
> I have now updated and tried to pass the config file but it gives an error
> even with the default one.
>
> ./sqlmap.py -c sqlmap.conf -b
>
>     sqlmap/1.0-dev (r4647) - automatic SQL injection and database takeover
> tool
>     http://www.sqlmap.org
>
> [*] starting at: 14:12:47
>
>
> [14:12:47] [CRITICAL] unhandled exception in sqlmap/1.0-dev (r4647), retry
> your run with the latest development version from the Subversion
> repository. If the exception persists, please send by e-mail to
> sql...@li... the following text and any information
> required to reproduce the bug. The developers will try to reproduce the
> bug, fix it accordingly and get back to you.
> sqlmap version: 1.0-dev (r4647)
> Python version: 2.6.5
> Operating system: posix
> Command line: ./sqlmap.py -c sqlmap.conf
> Technique: None
> Back-end DBMS: None (identified)
> Traceback (most recent call last):
>   File "./sqlmap.py", line 74, in main
>     init(cmdLineOptions)
>   File "/root/.local/share/Trash/files/sqlmap/lib/core/option.py", line
> 1884, in init
>     __mergeOptions(inputOptions, overrideOptions)
>   File "/root/.local/share/Trash/files/sqlmap/lib/core/option.py", line
> 1664, in __mergeOptions
>     configFileParser(inputOptions.configFile)
>   File "/root/.local/share/Trash/files/sqlmap/lib/parse/configfile.py",
> line 101, in configFileParser
>     configFileProxy(family, option, boolean, integer)
>   File "/root/.local/share/Trash/files/sqlmap/lib/parse/configfile.py",
> line 37, in configFileProxy
>     value = config.getint(section, option)
>   File "/usr/lib/python2.6/ConfigParser.py", line 340, in getint
>     return self._get(section, int, option)
>   File "/usr/lib/python2.6/ConfigParser.py", line 337, in _get
>     return conv(self.get(section, option))
> ValueError: invalid literal for int() with base 10: ''
>
> [*] shutting down at: 14:12:47
>
>
>
> A 2012/01/03, às 17:17, Miroslav Stampar escreveu:
>
> Hi Miguel.
>
> Please update to the latest revision (r4644) and use: -p referer
>
> Kind regards,
> Miroslav Stampar
>
> On Tue, Jan 3, 2012 at 3:35 PM, Miguel Lopes <the...@gm...>wrote:
>
>> Hi list,
>> I have a client with a SQLi on the referrer is it possible to exploit it
>> with sqlmap without changing the source? or i do have to change some code?
>>
>> Thanks in advance,
>> Miguel Lopes
>>
>> ------------------------------------------------------------------------------
>> Write once. Port to many.
>> Get the SDK and tools to simplify cross-platform app development. Create
>> new or port existing apps to sell to consumers worldwide. Explore the
>> Intel AppUpSM program developer opportunity. appdeveloper.intel.com/join
>> http://p.sf.net/sfu/intel-appdev
>> _______________________________________________
>> sqlmap-users mailing list
>> sql...@li...
>> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>>
>
>
>
> --
> Miroslav Stampar
> http://about.me/stamparm
>
>
>


-- 
Miroslav Stampar
http://about.me/stamparm