Re: [sqlmap-users] not working after updating

[Andreas C. (MegaHz) <me...@me...>]

It seems that i was missing something.

it got fixed after i run:

sudo port install file

thanks

-- Andreas


On Dec 19, 2012, at 3:11 PM, Bernardo Damele A. G. <ber...@gm...> wrote:

> It should be fixed now.
> Can you please retry?
> 
> Bernardo
> 
> 
> 
> On 19 December 2012 12:05, Andreas Constantinides (MegaHz) <me...@me...> wrote:
> 
> Hello,
> 
> check at this:
> 
> sqlmap was working:
> 
> sast-iMac:sqlmap-dev sast$ sudo ./sqlmap.py -u "http://www.tfwekjsa.com/kjd7sadh.cfm?a_id=11&tt=graphic&page=1&text=mpeg4&filter_searchResults=300007&SEARCH_TP=AND&FIELDNAMES=PRODUCTMAINCATEGORY%2CTEXT&a_name=search_1&customrpp=10" --proxy=socks5://localhost:9050 -v 1 --threads 10 --tables -D dassad33_kjd7sadh --random-agent
> 
>     sqlmap/1.0-dev-d4a061d - automatic SQL injection and database takeover tool
>     http://sqlmap.org
> 
> [!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program
> 
> [*] starting at 14:00:14
> 
> [14:00:14] [INFO] fetched random HTTP User-Agent header from file '/Volumes/EXTRA SPACE/tools/sqlmap-dev/txt/user-agents.txt': Mozilla/5.0 (Windows; U; Windows NT 6.1; fr; rv:1.9.2.13) Gecko/20101203 AskTbCDS/3.9.1.14019 Firefox/3.6.13
> [14:00:15] [INFO] resuming back-end DBMS 'microsoft sql server' 
> [14:00:15] [INFO] testing connection to the target url
> sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
> ---
> Place: GET
> Parameter: filter_searchResults
>     Type: boolean-based blind
>     Title: AND boolean-based blind - WHERE or HAVING clause
>     Payload: a_id=11&tt=graphic&page=1&text=mpeg4&filter_searchResults=300007) AND 4775=4775 AND (4447=4447&SEARCH_TP=AND&FIELDNAMES=PRODUCTMAINCATEGORY,TEXT&a_name=search_1&customrpp=10
> ---
> [14:00:19] [INFO] the back-end DBMS is Microsoft SQL Server
> web server operating system: Windows 2003
> web application technology: ColdFusion, Microsoft IIS 6.0
> back-end DBMS: Microsoft SQL Server 2005
> 
> 
> I updated:
> 
> 
> sast-iMac:sqlmap-dev sast$ 
> sast-iMac:sqlmap-dev sast$ sudo ./sqlmap.py --update
> 
>     sqlmap/1.0-dev-d4a061d - automatic SQL injection and database takeover tool
>     http://sqlmap.org
> 
> [!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program
> 
> [*] starting at 14:00:34
> 
> [14:00:34] [INFO] updating sqlmap to the latest development version from the GitHub repository
> [14:00:34] [INFO] update in progress .......
> [14:00:41] [INFO] updated to the latest revision '54752a9'
> 
> [*] shutting down at 14:00:41
> 
> 
> and now with the same command i get errors:
> 
> 
> sast-iMac:sqlmap-dev sast$ sudo ./sqlmap.py -u "http://www.tfwekjsa.com/kjd7sadh.cfm?a_id=11&tt=graphic&page=1&text=mpeg4&filter_searchResults=300007&SEARCH_TP=AND&FIELDNAMES=PRODUCTMAINCATEGORY%2CTEXT&a_name=search_1&customrpp=10" --proxy=socks5://localhost:9050 -v 1 --threads 10 --tables -D dassad33_kjd7sadh --random-agent
> Traceback (most recent call last):
>   File "./sqlmap.py", line 15, in <module>
>     from _sqlmap import main
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/_sqlmap.py", line 21, in <module>
>     from lib.controller.controller import start
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/controller.py", line 11, in <module>
>     from lib.controller.action import action
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/action.py", line 8, in <module>
>     from lib.controller.handler import setHandler
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/handler.py", line 8, in <module>
>     from lib.core.common import Backend
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/core/common.py", line 133, in <module>
>     from thirdparty.magic import magic
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/thirdparty/magic/magic.py", line 132, in <module>
>     raise ImportError('failed to find libmagic.  Check your installation')
> ImportError: failed to find libmagic.  Check your installation
> sast-iMac:sqlmap-dev sast$ sudo ./sqlmap.py -u "http://www.tfwekjsa.com/kjd7sadh.cfm?a_id=11&tt=graphic&page=1&text=mpeg4&filter_searchResults=300007&SEARCH_TP=AND&FIELDNAMES=PRODUCTMAINCATEGORY%2CTEXT&a_name=search_1&customrpp=10" --proxy=socks5://localhost:9050 -v 1 --threads 10 --tables -D dassad33_kjd7sadh --random-agent
> Traceback (most recent call last):
>   File "./sqlmap.py", line 15, in <module>
>     from _sqlmap import main
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/_sqlmap.py", line 21, in <module>
>     from lib.controller.controller import start
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/controller.py", line 11, in <module>
>     from lib.controller.action import action
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/action.py", line 8, in <module>
>     from lib.controller.handler import setHandler
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/handler.py", line 8, in <module>
>     from lib.core.common import Backend
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/core/common.py", line 133, in <module>
>     from thirdparty.magic import magic
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/thirdparty/magic/magic.py", line 132, in <module>
>     raise ImportError('failed to find libmagic.  Check your installation')
> ImportError: failed to find libmagic.  Check your installation
> sast-iMac:sqlmap-dev sast$ 
> 
> 
> any ideas?
> 
> thanks
> 
> ------------------------------------------------------------------------------
> LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial
> Remotely access PCs and mobile devices and provide instant support
> Improve your efficiency, and focus on delivering more value-add services
> Discover what IT Professionals Know. Rescue delivers
> http://p.sf.net/sfu/logmein_12329d2d
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
> 
> 
> 
> 
> -- 
> Bernardo Damele A. G.
> 
> E-mail / Jabber: bernardo.damele (at) gmail.com
> Mobile: +447788962949 (UK 07788962949)