Re: [sqlmap-users] Two problems with sqlmap

[Duarte S. <dua...@se...>]

Hello Miroslav,

> I'll need more information. For starter, does this BigArray issue start all
> of a sudden or during the whole sqlmap run?

At the end of dumping the data, sqlmap outputs a subset of the dumped data, 
after that, the error appears. It happens with a ~8000 rows table.

> Also, it's kind of strange to see "AttributeError("'NoneType' object has no
> attribute 'remove'",) in <bound method BigArray.__del__" because only
> remove method used there is a one from standard system module "os" which
> for sure exists.

sqlmap does not crash with this error, it simply outputs it. I'm not sure but 
maybe it has something to do with the garbadge collection (?).

> Could you please send some console output that happens prior to the
> "Exception AttributeError: AttributeError("'NoneType'"?

Will do so off list.

> For heuristic problem it would be great if you could provide either a
> traffic file (--flush-session -t traffic.txt) or url itself.

Same as above :P

Regards,
Duarte Silva

On Wednesday 29 August 2012 01:41:35 Miroslav Stampar wrote:
> Hi Duarte.
> 
> I'll need more information. For starter, does this BigArray issue start all
> of a sudden or during the whole sqlmap run?
> 
> Also, it's kind of strange to see "AttributeError("'NoneType' object has no
> attribute 'remove'",) in <bound method BigArray.__del__" because only
> remove method used there is a one from standard system module "os" which
> for sure exists.
> 
> Could you please send some console output that happens prior to the
> "Exception AttributeError: AttributeError("'NoneType'"?
> 
> For heuristic problem it would be great if you could provide either a
> traffic file (--flush-session -t traffic.txt) or url itself.
> 
> Kind regards,
> Miroslav Stampar
> 
> On Sun, Aug 26, 2012 at 11:33 AM, Duarte Silva
> 
> <dua...@se...>wrote:
> > Hi all,
> > 
> > when sqlmap is dumping a sample of table data I get this:
> > > Exception AttributeError: AttributeError("'NoneType' object has no
> > 
> > attribute
> > 
> > > 'remove'",) in <bound method BigArray.__del__ of ...[' ', ' ', ' ', ' ',
> > 
> > '
> > 
> > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> > 
> > '
> > 
> > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> > 
> > '
> > 
> > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> > 
> > '
> > 
> > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> > 
> > '
> > 
> > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> > 
> > '
> > 
> > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> > 
> > '
> > 
> > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> > 
> > '
> > 
> > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> > 
> > '',
> > 
> > > ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', '
> > 
> > ', '
> > 
> > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> > 
> > '
> > 
> > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> > 
> > '
> > 
> > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> > 
> > '
> > 
> > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> > 
> > '
> > 
> > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> > 
> > '
> > 
> > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> > 
> > '
> > 
> > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> > 
> > '
> > 
> > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> > 
> > '
> > 
> > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> > 
> > '
> > 
> > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> > 
> > '
> > 
> > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> > 
> > '
> > 
> > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> > 
> > '
> > 
> > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> > 
> > '
> > 
> > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ']> ignored
> > 
> > This tends to happen with big dumps, that error shows for each column
> > extracted from the table.
> > 
> > The other problem is that sqlmap heuristics aren't able to identify the
> > database correctly. The webpage shows the following error
> > 
> > > Warning: mysql_fetch_array(): supplied argument is not a valid MySQL
> > 
> > result
> > 
> > > resource in /home/(...) on line 17
> > > 
> > > Warning: mysql_fetch_array(): supplied argument is not a valid MySQL
> > 
> > result
> > 
> > > resource in /home/(...) on line 70
> > 
> > Sqlmap writes unknown DBMS in the heuristics message. I have sqlmap
> > updated up
> > to commit 2af1313010c539adb179cbe4bca988c1213cee13.
> > 
> > Regards,
> > Duarte Silva
> > 
> > --------------------------------------------------------------------------
> > ---- Live Security Virtual Conference
> > Exclusive live event will cover all the ways today's security and
> > threat landscape has changed and how IT managers can respond. Discussions
> > will include endpoint security, mobile security and the latest in malware
> > threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
> > _______________________________________________
> > sqlmap-users mailing list
> > sql...@li...
> > https://lists.sourceforge.net/lists/listinfo/sqlmap-users