Re: [sqlmap-users] Sqlmap terminated when try to execute system command via sqli

[Miroslav S. <mir...@gm...>]

Hi.

That file should be there (in regular installations).

Is there a possibility that you are running a sqlmap from one place and
that you have a sqlmap installed from official repository at the other
place? Simple said, that directory "/usr/share/sqlmap/udf/mysql..." looks
like it's a part of the official sqlmap (0.9) package while you are running
a v1.0-dev. This could be fixed by removing a sqlmap from PYTHONPATH.

Kind regards,
Miroslav Stampar


On Wed, Nov 27, 2013 at 5:45 AM, Trần Thoại <tra...@gm...> wrote:

> please help me
>
> [11:40:19] [CRITICAL] unhandled exception in sqlmap/1.0-dev, retry your
> run with the latest development version from the GitHub repository. If the
> exception persists, please send by e-mail to '
> sql...@li...' or open a new issue at '
> https://github.com/sqlmapproject/sqlmap/issues/new' with the following
> text and any information required to reproduce the bug. The developers will
> try to reproduce the bug, fix it accordingly and get back to you.
> sqlmap version: 1.0-dev
> Python version: 2.7.3
> Operating system: posix
> Command line: ./sqlmap -u
> ********************************************************************************************
> --os-cmd=ls --threads 10
> Technique: STACKED
> Back-end DBMS: MySQL (fingerprinted)
> Traceback (most recent call last):
>   File "./sqlmap", line 95, in main
>     start()
>   File "/usr/share/sqlmap/lib/controller/controller.py", line 582, in start
>     action()
>   File "/usr/share/sqlmap/lib/controller/action.py", line 157, in action
>     conf.dbmsHandler.osCmd()
>   File "/usr/share/sqlmap/plugins/generic/takeover.py", line 57, in osCmd
>     self.initEnv(web=web)
>   File "/usr/share/sqlmap/lib/takeover/abstraction.py", line 198, in
> initEnv
>     success = self.udfInjectSys()
>   File "/usr/share/sqlmap/lib/takeover/udf.py", line 184, in udfInjectSys
>     return self.udfInjectCore(self.sysUdfs)
>   File "/usr/share/sqlmap/lib/takeover/udf.py", line 149, in udfInjectCore
>     written = self.writeFile(self.udfLocalFile, self.udfRemoteFile,
> "binary", forceCheck=True)
>   File "/usr/share/sqlmap/plugins/generic/filesystem.py", line 270, in
> writeFile
>     written = self.stackedWriteFile(localFile, remoteFile, fileType,
> forceCheck)
>   File "/usr/share/sqlmap/plugins/dbms/mysql/filesystem.py", line 117, in
> stackedWriteFile
>     fcEncodedList = self.fileEncode(wFile, "hex", False)
>   File "/usr/share/sqlmap/plugins/generic/filesystem.py", line 114, in
> fileEncode
>     with open(fileName, "rb") as f:
> IOError: [Errno 2] No such file or directory:
> u'/usr/share/sqlmap/udf/mysql/linux/32/lib_mysqludf_sys.so'
>
>
>
> ------------------------------------------------------------------------------
> Rapidly troubleshoot problems before they affect your business. Most IT
> organizations don't have a clear picture of how application performance
> affects their revenue. With AppDynamics, you get 100% visibility into your
> Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics
> Pro!
> http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>


-- 
Miroslav Stampar
http://about.me/stamparm