Re: [sqlmap-users] Two problems with sqlmap

[Miroslav S. <mir...@gm...>]

Hi Duarte.

You've helped a lot with given details. Find those bugs fixed [1][2] with
the latest commit(s).

Kind regards,
Miroslav Stampar

[1] https://github.com/sqlmapproject/sqlmap/issues/166
[2] https://github.com/sqlmapproject/sqlmap/issues/167

On Wed, Aug 29, 2012 at 4:49 PM, Duarte Silva
<dua...@se...>wrote:

> Hello Miroslav,
>
> > I'll need more information. For starter, does this BigArray issue start
> all
> > of a sudden or during the whole sqlmap run?
>
> At the end of dumping the data, sqlmap outputs a subset of the dumped data,
> after that, the error appears. It happens with a ~8000 rows table.
>
> > Also, it's kind of strange to see "AttributeError("'NoneType' object has
> no
> > attribute 'remove'",) in <bound method BigArray.__del__" because only
> > remove method used there is a one from standard system module "os" which
> > for sure exists.
>
> sqlmap does not crash with this error, it simply outputs it. I'm not sure
> but
> maybe it has something to do with the garbadge collection (?).
>
> > Could you please send some console output that happens prior to the
> > "Exception AttributeError: AttributeError("'NoneType'"?
>
> Will do so off list.
>
> > For heuristic problem it would be great if you could provide either a
> > traffic file (--flush-session -t traffic.txt) or url itself.
>
> Same as above :P
>
> Regards,
> Duarte Silva
>
> On Wednesday 29 August 2012 01:41:35 Miroslav Stampar wrote:
> > Hi Duarte.
> >
> > I'll need more information. For starter, does this BigArray issue start
> all
> > of a sudden or during the whole sqlmap run?
> >
> > Also, it's kind of strange to see "AttributeError("'NoneType' object has
> no
> > attribute 'remove'",) in <bound method BigArray.__del__" because only
> > remove method used there is a one from standard system module "os" which
> > for sure exists.
> >
> > Could you please send some console output that happens prior to the
> > "Exception AttributeError: AttributeError("'NoneType'"?
> >
> > For heuristic problem it would be great if you could provide either a
> > traffic file (--flush-session -t traffic.txt) or url itself.
> >
> > Kind regards,
> > Miroslav Stampar
> >
> > On Sun, Aug 26, 2012 at 11:33 AM, Duarte Silva
> >
> > <dua...@se...>wrote:
> > > Hi all,
> > >
> > > when sqlmap is dumping a sample of table data I get this:
> > > > Exception AttributeError: AttributeError("'NoneType' object has no
> > >
> > > attribute
> > >
> > > > 'remove'",) in <bound method BigArray.__del__ of ...[' ', ' ', ' ',
> ' ',
> > >
> > > '
> > >
> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> ' ',
> > >
> > > '
> > >
> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> ' ',
> > >
> > > '
> > >
> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> ' ',
> > >
> > > '
> > >
> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> ' ',
> > >
> > > '
> > >
> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> ' ',
> > >
> > > '
> > >
> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> ' ',
> > >
> > > '
> > >
> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> ' ',
> > >
> > > '
> > >
> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> ' ',
> > >
> > > '',
> > >
> > > > ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', '
> ', '
> > >
> > > ', '
> > >
> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> ' ',
> > >
> > > '
> > >
> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> ' ',
> > >
> > > '
> > >
> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> ' ',
> > >
> > > '
> > >
> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> ' ',
> > >
> > > '
> > >
> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> ' ',
> > >
> > > '
> > >
> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> ' ',
> > >
> > > '
> > >
> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> ' ',
> > >
> > > '
> > >
> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> ' ',
> > >
> > > '
> > >
> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> ' ',
> > >
> > > '
> > >
> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> ' ',
> > >
> > > '
> > >
> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> ' ',
> > >
> > > '
> > >
> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> ' ',
> > >
> > > '
> > >
> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
> ' ',
> > >
> > > '
> > >
> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ']> ignored
> > >
> > > This tends to happen with big dumps, that error shows for each column
> > > extracted from the table.
> > >
> > > The other problem is that sqlmap heuristics aren't able to identify the
> > > database correctly. The webpage shows the following error
> > >
> > > > Warning: mysql_fetch_array(): supplied argument is not a valid MySQL
> > >
> > > result
> > >
> > > > resource in /home/(...) on line 17
> > > >
> > > > Warning: mysql_fetch_array(): supplied argument is not a valid MySQL
> > >
> > > result
> > >
> > > > resource in /home/(...) on line 70
> > >
> > > Sqlmap writes unknown DBMS in the heuristics message. I have sqlmap
> > > updated up
> > > to commit 2af1313010c539adb179cbe4bca988c1213cee13.
> > >
> > > Regards,
> > > Duarte Silva
> > >
> > >
> --------------------------------------------------------------------------
> > > ---- Live Security Virtual Conference
> > > Exclusive live event will cover all the ways today's security and
> > > threat landscape has changed and how IT managers can respond.
> Discussions
> > > will include endpoint security, mobile security and the latest in
> malware
> > > threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
> > > _______________________________________________
> > > sqlmap-users mailing list
> > > sql...@li...
> > > https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>



-- 
Miroslav Stampar
http://about.me/stamparm