Re: [sqlmap-users] Two problems with sqlmap

[Duarte S. <dua...@se...>]

No problem Miroslav.

Regards,
Duarte Silva
 On Aug 29, 2012 8:31 PM, "Miroslav Stampar" <mir...@gm...>
wrote:

> Hi Duarte.
>
> You've helped a lot with given details. Find those bugs fixed [1][2] with
> the latest commit(s).
>
> Kind regards,
> Miroslav Stampar
>
> [1] https://github.com/sqlmapproject/sqlmap/issues/166
> [2] https://github.com/sqlmapproject/sqlmap/issues/167
>
> On Wed, Aug 29, 2012 at 4:49 PM, Duarte Silva <dua...@se...
> > wrote:
>
>> Hello Miroslav,
>>
>> > I'll need more information. For starter, does this BigArray issue start
>> all
>> > of a sudden or during the whole sqlmap run?
>>
>> At the end of dumping the data, sqlmap outputs a subset of the dumped
>> data,
>> after that, the error appears. It happens with a ~8000 rows table.
>>
>> > Also, it's kind of strange to see "AttributeError("'NoneType' object
>> has no
>> > attribute 'remove'",) in <bound method BigArray.__del__" because only
>> > remove method used there is a one from standard system module "os" which
>> > for sure exists.
>>
>> sqlmap does not crash with this error, it simply outputs it. I'm not sure
>> but
>> maybe it has something to do with the garbadge collection (?).
>>
>> > Could you please send some console output that happens prior to the
>> > "Exception AttributeError: AttributeError("'NoneType'"?
>>
>> Will do so off list.
>>
>> > For heuristic problem it would be great if you could provide either a
>> > traffic file (--flush-session -t traffic.txt) or url itself.
>>
>> Same as above :P
>>
>> Regards,
>> Duarte Silva
>>
>> On Wednesday 29 August 2012 01:41:35 Miroslav Stampar wrote:
>> > Hi Duarte.
>> >
>> > I'll need more information. For starter, does this BigArray issue start
>> all
>> > of a sudden or during the whole sqlmap run?
>> >
>> > Also, it's kind of strange to see "AttributeError("'NoneType' object
>> has no
>> > attribute 'remove'",) in <bound method BigArray.__del__" because only
>> > remove method used there is a one from standard system module "os" which
>> > for sure exists.
>> >
>> > Could you please send some console output that happens prior to the
>> > "Exception AttributeError: AttributeError("'NoneType'"?
>> >
>> > For heuristic problem it would be great if you could provide either a
>> > traffic file (--flush-session -t traffic.txt) or url itself.
>> >
>> > Kind regards,
>> > Miroslav Stampar
>> >
>> > On Sun, Aug 26, 2012 at 11:33 AM, Duarte Silva
>> >
>> > <dua...@se...>wrote:
>> > > Hi all,
>> > >
>> > > when sqlmap is dumping a sample of table data I get this:
>> > > > Exception AttributeError: AttributeError("'NoneType' object has no
>> > >
>> > > attribute
>> > >
>> > > > 'remove'",) in <bound method BigArray.__del__ of ...[' ', ' ', ' ',
>> ' ',
>> > >
>> > > '
>> > >
>> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
>> ' ',
>> > >
>> > > '
>> > >
>> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
>> ' ',
>> > >
>> > > '
>> > >
>> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
>> ' ',
>> > >
>> > > '
>> > >
>> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
>> ' ',
>> > >
>> > > '
>> > >
>> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
>> ' ',
>> > >
>> > > '
>> > >
>> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
>> ' ',
>> > >
>> > > '
>> > >
>> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
>> ' ',
>> > >
>> > > '
>> > >
>> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
>> ' ',
>> > >
>> > > '',
>> > >
>> > > > ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', '
>> ', '
>> > >
>> > > ', '
>> > >
>> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
>> ' ',
>> > >
>> > > '
>> > >
>> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
>> ' ',
>> > >
>> > > '
>> > >
>> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
>> ' ',
>> > >
>> > > '
>> > >
>> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
>> ' ',
>> > >
>> > > '
>> > >
>> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
>> ' ',
>> > >
>> > > '
>> > >
>> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
>> ' ',
>> > >
>> > > '
>> > >
>> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
>> ' ',
>> > >
>> > > '
>> > >
>> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
>> ' ',
>> > >
>> > > '
>> > >
>> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
>> ' ',
>> > >
>> > > '
>> > >
>> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
>> ' ',
>> > >
>> > > '
>> > >
>> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
>> ' ',
>> > >
>> > > '
>> > >
>> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
>> ' ',
>> > >
>> > > '
>> > >
>> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ',
>> ' ',
>> > >
>> > > '
>> > >
>> > > > ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ', ' ']> ignored
>> > >
>> > > This tends to happen with big dumps, that error shows for each column
>> > > extracted from the table.
>> > >
>> > > The other problem is that sqlmap heuristics aren't able to identify
>> the
>> > > database correctly. The webpage shows the following error
>> > >
>> > > > Warning: mysql_fetch_array(): supplied argument is not a valid MySQL
>> > >
>> > > result
>> > >
>> > > > resource in /home/(...) on line 17
>> > > >
>> > > > Warning: mysql_fetch_array(): supplied argument is not a valid MySQL
>> > >
>> > > result
>> > >
>> > > > resource in /home/(...) on line 70
>> > >
>> > > Sqlmap writes unknown DBMS in the heuristics message. I have sqlmap
>> > > updated up
>> > > to commit 2af1313010c539adb179cbe4bca988c1213cee13.
>> > >
>> > > Regards,
>> > > Duarte Silva
>> > >
>> > >
>> --------------------------------------------------------------------------
>> > > ---- Live Security Virtual Conference
>> > > Exclusive live event will cover all the ways today's security and
>> > > threat landscape has changed and how IT managers can respond.
>> Discussions
>> > > will include endpoint security, mobile security and the latest in
>> malware
>> > > threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
>> > > _______________________________________________
>> > > sqlmap-users mailing list
>> > > sql...@li...
>> > > https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>>
>
>
>
> --
> Miroslav Stampar
> http://about.me/stamparm
>