[sqlmap-users] wrong file size checking with os-shell
Brought to you by:
inquisb
From: Robin W. <ro...@di...> - 2012-09-14 12:40:27
|
Looks like you've updated the shell sent over with os-shell but not updated the size that the script checks to see if it exists. Robin [13:08:22] [WARNING] unable to retrieve the web server document root please provide the web server document root [/var/www/]: /var/www/html/upload/ [13:08:29] [WARNING] unable to retrieve any web server path please provide any additional web server full path to try to upload the agent [Enter for None]: [13:08:30] [WARNING] unable to upload the file stager on '/var/www/html/upload' [13:08:30] [INFO] trying to upload the file stager via UNION technique do you want confirmation that the file '/var/www/html/upload/tmpuivks.php' has been successfully written on the back-end DBMS file system? [Y/n] [13:08:33] [INFO] the file has been successfully written and its size is 6969 bytes, but the size differs from the local file '/tmp/tmpo2EvI1' (703 bytes) [13:08:33] [WARNING] expect junk characters inside the file as a leftover from UNION query [13:08:33] [WARNING] HTTP error codes detected during testing: 404 (Not Found) - 2 times [13:08:33] [INFO] fetched data logged to text files under '/home/robin/tools/web/sqlmap/output/192.168.50.22' |