Re: [sqlmap-users] Two problems with sqlmap

[Miroslav S. <mir...@gm...>]

Hi Duarte.

I'll need more information. For starter, does this BigArray issue start all
of a sudden or during the whole sqlmap run?

Also, it's kind of strange to see "AttributeError("'NoneType' object has no
attribute 'remove'",) in <bound method BigArray.__del__" because only
remove method used there is a one from standard system module "os" which
for sure exists.

Could you please send some console output that happens prior to the
"Exception AttributeError: AttributeError("'NoneType'"?

For heuristic problem it would be great if you could provide either a
traffic file (--flush-session -t traffic.txt) or url itself.

Kind regards,
Miroslav Stampar

On Sun, Aug 26, 2012 at 11:33 AM, Duarte Silva
<dua...@se...>wrote:

> Hi all,
>
> when sqlmap is dumping a sample of table data I get this:
>
> > Exception AttributeError: AttributeError("'NoneType' object has no
> attribute
> > 'remove'",) in <bound method BigArray.__del__ of ...[' ', ' ', ' ', ' ',
> '
> > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> '
> > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> '
> > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> '
> > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> '
> > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> '
> > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> '
> > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> '
> > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> '',
> > ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', '
> ', '
> > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> '
> > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> '
> > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> '
> > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> '
> > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> '
> > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> '
> > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> '
> > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> '
> > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> '
> > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> '
> > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> '
> > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> '
> > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> '
> > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ']> ignored
>
> This tends to happen with big dumps, that error shows for each column
> extracted from the table.
>
> The other problem is that sqlmap heuristics aren't able to identify the
> database correctly. The webpage shows the following error
>
> > Warning: mysql_fetch_array(): supplied argument is not a valid MySQL
> result
> > resource in /home/(...) on line 17
>
> > Warning: mysql_fetch_array(): supplied argument is not a valid MySQL
> result
> > resource in /home/(...) on line 70
>
> Sqlmap writes unknown DBMS in the heuristics message. I have sqlmap
> updated up
> to commit 2af1313010c539adb179cbe4bca988c1213cee13.
>
> Regards,
> Duarte Silva
>
> ------------------------------------------------------------------------------
> Live Security Virtual Conference
> Exclusive live event will cover all the ways today's security and
> threat landscape has changed and how IT managers can respond. Discussions
> will include endpoint security, mobile security and the latest in malware
> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>


-- 
Miroslav Stampar
http://about.me/stamparm