sqlmap-users — sqlmap users mailing list

[sqlmap-users] feature request: disable pagerank check via config

[Kirill M. <l0...@l0...>]

--- sqlmap-dev/lib/controller/controller.py	2011-03-23 09:30:10.245865481 +0000
+++ sqlmap-dev-l0rda/lib/controller/controller.py	2011-03-23 08:48:58.649631001 +0000
@@ -201,7 +201,10 @@ def start():
                 if conf.forms:
                     message = "[#%d] form:\n%s %s" % (hostCount, conf.method or HTTPMETHOD.GET, targetUrl)
                 else:
-                    message = "url %d:\n%s %s%s" % (hostCount, conf.method or HTTPMETHOD.GET, targetUrl,  " (PageRank: %s)" % get_pagerank(targetUrl) if conf.googleDork else "")
+                    if conf.pagerank:
+                        message = "url %d:\n%s %s%s" % (hostCount, conf.method or HTTPMETHOD.GET, targetUrl,  " (PageRank: %s)" % get_pagerank(targetUrl) if conf.googleDork else "")
+                    else:
+                        message = "url %d:\n%s %s" % (hostCount, conf.method or HTTPMETHOD.GET, targetUrl)
 
                 if conf.cookie:
                     message += "\nCookie: %s" % conf.cookie
--- sqlmap-dev/lib/core/optiondict.py	2011-03-23 09:30:10.488860788 +0000
+++ sqlmap-dev-l0rda/lib/core/optiondict.py	2011-03-23 09:23:41.660372768 +0000
@@ -18,7 +18,8 @@ optDict = {
                                "list":              "string",
                                "requestFile":       "string",
                                "googleDork":        "string",
-                               "configFile":        "string"
+                               "configFile":        "string",
+                               "pagerank":          "boolean"
                              },
 
             "Request":       {
--- sqlmap-dev/sqlmap.conf	2011-03-23 09:30:10.793854896 +0000
+++ sqlmap-dev-l0rda/sqlmap.conf	2011-03-23 09:35:58.469139618 +0000
@@ -29,6 +29,9 @@ requestFile = 
 # Example: +ext:php +inurl:"&id=" +intext:"powered by "
 googleDork = 
 
+# PageRank check
+# google can ban your ip after multiple PR checks
+pagerank = False
 
 # These options can be used to specify how to connect to the target url.
 [Request]

Re: [sqlmap-users] sqlmap on gmane?

[Miroslav S. <mir...@gm...>]

hi.

now you can follow sqlmap also on:
http://news.gmane.org/gmane.comp.security.sqlmap

for the time being only new messages are available there, but
hopefully gmane administrators will manage to import the archive
caring the rest.

kr

On Tue, Mar 1, 2011 at 11:08 AM, Bernardo Damele A. G.
<ber...@gm...> wrote:
> Good idea. We will do so as soon as possible.
>
> Bernardo Damele A. G.
>
> This message was sent from a smartphone
>
> On 1 Mar 2011, at 00:39, "bu...@gm..." <bu...@gm...> wrote:
>
>> I find the current mailing list archive not very pleasant.
>> What do you think about subscribing the mailinglist to gmane?
>>
>> http://gmane.org/subscribe.php
>



-- 
Miroslav Stampar

E-mail: miroslav.stampar (at) gmail.com
PGP Key ID: 0xB5397B1B

Re: [sqlmap-users] Oracle --sql-shell read multiple entries

[Miroslav S. <mir...@gm...>]

hi Vladimir.

could you please retry it now with the latest commit?

kr

On Mon, Mar 21, 2011 at 7:24 PM, Владимир Гопиенко <war...@gm...> wrote:
> [20:02:31] [CRITICAL] unhandled exception in sqlmap/0.9-dev, retry your run
> with
>  the latest development version from the Subversion repository. If the
> exception
>  persists, please send by e-mail to sql...@li... the
> follo
> wing text and any information required to reproduce the bug. The developers
> will
>  try to reproduce the bug, fix it accordingly and get back to you.
> sqlmap version: 0.9-dev (r3453)
> Python version: 2.7.1
> Operating system: nt
> Command line: sqlmap.py -u
> *****************************************************
> ****************** --proxy=http://127.0.0.1:8889
> --cookie=PHPSESSID=fjlmnmlnq
> 5sb7ggedfddns3cn0 --is-dba --sql-shell
> Technique: UNION
> Back-end DBMS: Oracle (fingerprinted)
> Traceback (most recent call last):
>   File "sqlmap.py", line 82, in main
>     start()
>   File "C:\Users\Allen\sqlmap-dev\lib\controller\controller.py", line 424,
> in st
> art
>     action()
>   File "C:\Users\Allen\sqlmap-dev\lib\controller\action.py", line 115, in
> action
>
>     conf.dbmsHandler.sqlShell()
>   File "C:\Users\Allen\sqlmap-dev\plugins\generic\enumeration.py", line
> 2053, in
>  sqlShell
>     output = self.sqlQuery(query)
>   File "C:\Users\Allen\sqlmap-dev\plugins\generic\enumeration.py", line
> 1999, in
>  sqlQuery
>     output = inject.getValue(query, fromUser=True)
>   File "C:\Users\Allen\sqlmap-dev\lib\request\inject.py", line 430, in
> getValue
>     value = __goInband(query, expected, sort, resumeValue, unpack, dump)
>   File "C:\Users\Allen\sqlmap-dev\lib\request\inject.py", line 382, in
> __goInban
> d
>     output = unionUse(expression, unpack=unpack, dump=dump)
>   File "C:\Users\Allen\sqlmap-dev\lib\techniques\inband\union\use.py", line
> 247,
>  in unionUse
>     value += output
> UnicodeDecodeError: 'ascii' codec can't decode byte 0xd0 in position 49:
> ordinal
>  not in range(128)
>
> [*] shutting down at: 20:02:31
>
>
> ------------------------------------------------------------------------------
> Enable your software for Intel(R) Active Management Technology to meet the
> growing manageability and security demands of your customers. Businesses
> are taking advantage of Intel(R) vPro (TM) technology - will your software
> be a part of the solution? Download the Intel(R) Manageability Checker
> today! http://p.sf.net/sfu/intel-dev2devmar
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>



-- 
Miroslav Stampar

E-mail: miroslav.stampar (at) gmail.com
PGP Key ID: 0xB5397B1B

Re: [sqlmap-users] unknown charset

[Miroslav S. <mir...@gm...>]

hi.

find it fixed in the latest commit.

kr

On Sun, Mar 20, 2011 at 9:22 PM, syssecurity.info
<sys...@go...> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
>
> Hi List,
>
> I like to report a bug in sqlmap-dev last revision:
>
>
> [WARNING] unknown charset 'iso-8858-15'. Please report by e-mail to sql...@li....
>
>
> Thanks and regards
>
> syssecurity
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG/MacGPG2 v2.0.14 (Darwin)
>
> iEYEARECAAYFAk2GYgcACgkQzzej3O6DJA/P/ACfZkF3Ez8/hV0dyTxQdKH+MFcA
> UCkAn2ZE88Kl5Q50XPQh0fW7ba2rmsfr
> =Hsl5
> -----END PGP SIGNATURE-----
>
> ------------------------------------------------------------------------------
> Enable your software for Intel(R) Active Management Technology to meet the
> growing manageability and security demands of your customers. Businesses
> are taking advantage of Intel(R) vPro (TM) technology - will your software
> be a part of the solution? Download the Intel(R) Manageability Checker
> today! http://p.sf.net/sfu/intel-dev2devmar
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>



-- 
Miroslav Stampar

E-mail: miroslav.stampar (at) gmail.com
PGP Key ID: 0xB5397B1B

[sqlmap-users] Oracle --sql-shell read multiple entries

[Владимир Г. <war...@gm...>]

[20:02:31] [CRITICAL] unhandled exception in sqlmap/0.9-dev, retry your run
with
 the latest development version from the Subversion repository. If the
exception
 persists, please send by e-mail to sql...@li... the
follo
wing text and any information required to reproduce the bug. The developers
will
 try to reproduce the bug, fix it accordingly and get back to you.
sqlmap version: 0.9-dev (r3453)
Python version: 2.7.1
Operating system: nt
Command line: sqlmap.py -u
*****************************************************
****************** --proxy=http://127.0.0.1:8889--cookie=PHPSESSID=fjlmnmlnq
5sb7ggedfddns3cn0 --is-dba --sql-shell
Technique: UNION
Back-end DBMS: Oracle (fingerprinted)
Traceback (most recent call last):
  File "sqlmap.py", line 82, in main
    start()
  File "C:\Users\Allen\sqlmap-dev\lib\controller\controller.py", line 424,
in st
art
    action()
  File "C:\Users\Allen\sqlmap-dev\lib\controller\action.py", line 115, in
action

    conf.dbmsHandler.sqlShell()
  File "C:\Users\Allen\sqlmap-dev\plugins\generic\enumeration.py", line
2053, in
 sqlShell
    output = self.sqlQuery(query)
  File "C:\Users\Allen\sqlmap-dev\plugins\generic\enumeration.py", line
1999, in
 sqlQuery
    output = inject.getValue(query, fromUser=True)
  File "C:\Users\Allen\sqlmap-dev\lib\request\inject.py", line 430, in
getValue
    value = __goInband(query, expected, sort, resumeValue, unpack, dump)
  File "C:\Users\Allen\sqlmap-dev\lib\request\inject.py", line 382, in
__goInban
d
    output = unionUse(expression, unpack=unpack, dump=dump)
  File "C:\Users\Allen\sqlmap-dev\lib\techniques\inband\union\use.py", line
247,
 in unionUse
    value += output
UnicodeDecodeError: 'ascii' codec can't decode byte 0xd0 in position 49:
ordinal
 not in range(128)

[*] shutting down at: 20:02:31

[sqlmap-users] unknown charset

[syssecurity.info <sys...@go...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Hi List,

I like to report a bug in sqlmap-dev last revision:


[WARNING] unknown charset 'iso-8858-15'. Please report by e-mail to sql...@li....


Thanks and regards

syssecurity
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.14 (Darwin)

iEYEARECAAYFAk2GYgcACgkQzzej3O6DJA/P/ACfZkF3Ez8/hV0dyTxQdKH+MFcA
UCkAn2ZE88Kl5Q50XPQh0fW7ba2rmsfr
=Hsl5
-----END PGP SIGNATURE-----

Re: [sqlmap-users] bug report

[Miroslav S. <mir...@gm...>]

hi m4l1c3.

it's fixed in the latest commit but i believe that you maybe have
problems with some other parts. it's quite strange that you get NULL
column names.

have you tried other switches? do plain switches like --banner work?

kr
On Fri, Mar 18, 2011 at 5:15 PM, m4l1c3 <mal...@gm...> wrote:
> sqlmap version: 0.9-dev (r3432)
> Python version: 2.5.2
> Operating system: posix
> Command line: ./sqlmap.py -u
> ********************************************************* -o --batch
> --columns -D SOME_DB -T TBL --timeout 2000
> Technique: ERROR
> Back-end DBMS: MySQL (fingerprinted)
> Traceback (most recent call last):
>   File "./sqlmap.py", line 82, in main
>     start()
>   File "/pentest/database/sqlmap-dev/lib/controller/controller.py", line
> 424, in start
>     action()
>   File "/pentest/database/sqlmap-dev/lib/controller/action.py", line 97, in
> action
>     conf.dumper.dbTableColumns(conf.dbmsHandler.getColumns())
>   File "/pentest/database/sqlmap-dev/lib/core/dump.py", line 201, in
> dbTableColumns
>     colList.sort(key=lambda x: x.lower())
>   File "/pentest/database/sqlmap-dev/lib/core/dump.py", line 201, in
> <lambda>
>     colList.sort(key=lambda x: x.lower())
> AttributeError: 'NoneType' object has no attribute 'lower'
>
> [*] shutting down at: 12:11:56
>
>
> ------------------------------------------------------------------------------
> Colocation vs. Managed Hosting
> A question and answer guide to determining the best fit
> for your organization - today and in the future.
> http://p.sf.net/sfu/internap-sfd2d
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>



-- 
Miroslav Stampar

E-mail: miroslav.stampar (at) gmail.com
PGP Key ID: 0xB5397B1B

Re: [sqlmap-users] Little suggestion

[Miroslav S. <mir...@gm...>]

hi Andrea.

thing is that you've also stumbled upon a problem/bug here. it seems
that there were some non-ASCII comformant characters inside the
command line results.

now it should be fixed and also implemented the windows update info
you've requested.

kr

On Fri, Mar 18, 2011 at 4:55 PM, Andrea Rossi <and...@ya...> wrote:
> Hi. I have downloaded from your svn the lastest release of sqlmap. I'm
> planning to use it to do some test on windows. I got this error during
> --update
>
> C:\testingLab>python sqlmap.py --update
>
>     sqlmap/0.9-dev - automatic SQL injection and database takeover tool
>     http://sqlmap.sourceforge.net
>
> [*] starting at: 16:02:27
>
> [16:02:28] [INFO] updating sqlmap to latest development version from the
> subvers
> ion repository
> [16:02:28] [INFO] update in progress . quit unexpectedly with return code 1
> Traceback (most recent call last):
>   File "c:\Python26\lib\logging\__init__.py", line 773, in emit
>     stream.write(fs % msg.encode("UTF-8"))
> UnicodeDecodeError: 'ascii' codec can't decode byte 0x8a in position 29:
> ordinal
>  not in range(128)
>
> [*] shutting down at: 16:02:29
>
> Of course is not a real problem. I don't have a command line svn client in
> windows! May i suggest you to simply show a message that svn under windows
> is actually available only as a gui client. A redirection to the site will
> be also nice. (just few lines of code i suppose)
>
> thanks
>
> andrea
>
>
>
> ------------------------------------------------------------------------------
> Colocation vs. Managed Hosting
> A question and answer guide to determining the best fit
> for your organization - today and in the future.
> http://p.sf.net/sfu/internap-sfd2d
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>



-- 
Miroslav Stampar

E-mail: miroslav.stampar (at) gmail.com
PGP Key ID: 0xB5397B1B

[sqlmap-users] bug report

[m4l1c3 <mal...@gm...>]

sqlmap version: 0.9-dev (r3432)
Python version: 2.5.2
Operating system: posix
Command line: ./sqlmap.py -u
********************************************************* -o --batch
--columns -D SOME_DB -T TBL --timeout 2000
Technique: ERROR
Back-end DBMS: MySQL (fingerprinted)
Traceback (most recent call last):
  File "./sqlmap.py", line 82, in main
    start()
  File "/pentest/database/sqlmap-dev/lib/controller/controller.py", line
424, in start
    action()
  File "/pentest/database/sqlmap-dev/lib/controller/action.py", line 97, in
action
    conf.dumper.dbTableColumns(conf.dbmsHandler.getColumns())
  File "/pentest/database/sqlmap-dev/lib/core/dump.py", line 201, in
dbTableColumns
    colList.sort(key=lambda x: x.lower())
  File "/pentest/database/sqlmap-dev/lib/core/dump.py", line 201, in
<lambda>
    colList.sort(key=lambda x: x.lower())
AttributeError: 'NoneType' object has no attribute 'lower'

[*] shutting down at: 12:11:56

[sqlmap-users] Little suggestion

[Andrea R. <and...@ya...>]

Hi. I have downloaded from your svn the lastest release of sqlmap. I'm  planning 
to use it to do some test on windows. I got this error during  --update

C:\testingLab>python sqlmap.py --update

    sqlmap/0.9-dev - automatic SQL injection and database takeover tool
    http://sqlmap.sourceforge.net

[*] starting at: 16:02:27

[16:02:28] [INFO] updating sqlmap to latest development version from the subvers
ion repository
[16:02:28] [INFO] update in progress . quit unexpectedly with return code 1
Traceback (most recent call last):
  File "c:\Python26\lib\logging\__init__.py", line 773, in emit
    stream.write(fs %  msg.encode("UTF-8"))
UnicodeDecodeError: 'ascii' codec can't decode byte 0x8a in position 29: ordinal
 not in range(128)

[*] shutting down at: 16:02:29

Of  course is not a real problem. I don't have a command line svn client in  
windows! May i suggest you to simply show a message that svn under  windows is 
actually available only as a gui client. A redirection to the  site will be also 
nice. (just few lines of code i suppose)

thanks

andrea


      

Re: [sqlmap-users] running sqlmap in background

[Miroslav S. <mir...@gm...>]

hi.

well, generally you can use --batch to disable all prompts (default
values will be used).

in this case answer is Y for dictionary attack which you maybe
wouldn't like to have. well, you can make a quick patch for this.

lib/utils/hash.py (line 245):

you can change:
            test = readInput(message, default="Y")
into this:
            test = readInput(message, default="N")

as of running it as a background process, it should have the same
behavior as all other normal processes (just use --batch).

kr

On Fri, Mar 18, 2011 at 1:42 AM, syssecurity.info
<sys...@go...> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi List,
>
> Just a short question. Is it possible to run sqlmap in background?For example i´d like to run it with nohup when dumping a Database. The only thing bad is the user input for hash cracking. Is it possible to disable ist?
>
> have a nice day and thanks
>
> Dennis
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG/MacGPG2 v2.0.14 (Darwin)
>
> iEYEARECAAYFAk2CqnMACgkQzzej3O6DJA9m8gCfcUpRq2iiL5DudKRTQbGZ3XU1
> j3EAoKttxGlGOI9XOuDscRNDqHj2Q2LP
> =CmfI
> -----END PGP SIGNATURE-----
>
> ------------------------------------------------------------------------------
> Colocation vs. Managed Hosting
> A question and answer guide to determining the best fit
> for your organization - today and in the future.
> http://p.sf.net/sfu/internap-sfd2d
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>



-- 
Miroslav Stampar

E-mail: miroslav.stampar (at) gmail.com
PGP Key ID: 0xB5397B1B

[sqlmap-users] running sqlmap in background

[syssecurity.info <sys...@go...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi List,

Just a short question. Is it possible to run sqlmap in background?For example i´d like to run it with nohup when dumping a Database. The only thing bad is the user input for hash cracking. Is it possible to disable ist?

have a nice day and thanks

Dennis 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.14 (Darwin)

iEYEARECAAYFAk2CqnMACgkQzzej3O6DJA9m8gCfcUpRq2iiL5DudKRTQbGZ3XU1
j3EAoKttxGlGOI9XOuDscRNDqHj2Q2LP
=CmfI
-----END PGP SIGNATURE-----

Re: [sqlmap-users] Update Bug - Kubuntu 10.10

[Miroslav S. <mir...@gm...>]

hi Graziano.

you are using fairly outdated version of sqlmap.

please update to the latest revision from our SVN repository to have it updated:

svn checkout https://svn.sqlmap.org/sqlmap/trunk/sqlmap sqlmap-dev

kr

On Thu, Mar 17, 2011 at 6:40 PM, Graziano Felline <scr...@gm...> wrote:
> radoen@vaio:~/$ sudo sqlmap --update
> [sudo] password for radoen:
> /usr/share/sqlmap/lib/core/convert.py:27: DeprecationWarning: the md5
> module is deprecated; use hashlib instead
>  import md5
> /usr/share/sqlmap/lib/core/convert.py:28: DeprecationWarning: the sha
> module is deprecated; use the hashlib module instead
>  import sha
>
>    sqlmap/0.6.4 coded by Bernardo Damele A. G. <ber...@gm...>
>                      and Daniele Bellucci <dan...@gm...>
>
> [*] starting at: 18:38:25
>
> [18:38:25] [INFO] updating sqlmap
> [18:38:26] [ERROR] unhandled exception in sqlmap/0.6.4, please copy
> the command line and the following text and send by e-mail to
> sql...@li.... The developers will fix it as soon
> as possible:
> sqlmap version: 0.6.4
> Python version: 2.6.6
> Operating system: linux2
> Traceback (most recent call last):
>  File "/usr/bin/sqlmap", line 78, in main
>    init(cmdLineOptions)
>  File "/usr/share/sqlmap/lib/core/option.py", line 770, in init
>    update()
>  File "/usr/share/sqlmap/lib/core/update.py", line 349, in update
>    __updateSqlmap()
>  File "/usr/share/sqlmap/lib/core/update.py", line 246, in __updateSqlmap
>    logger.errMsg(errMsg)
> AttributeError: Logger instance has no attribute 'errMsg'
>
> [*] shutting down at: 18:38:26
>
>
> OS version Kubuntu 10.10
> Kernel Linux vaio 2.6.35-25-generic #44-Ubuntu SMP Fri Jan 21 17:40:44
> UTC 2011 x86_64 GNU/Linux
>
> ------------------------------------------------------------------------------
> Colocation vs. Managed Hosting
> A question and answer guide to determining the best fit
> for your organization - today and in the future.
> http://p.sf.net/sfu/internap-sfd2d
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>



-- 
Miroslav Stampar

E-mail: miroslav.stampar (at) gmail.com
PGP Key ID: 0xB5397B1B

[sqlmap-users] Update Bug - Kubuntu 10.10

[Graziano F. <scr...@gm...>]

radoen@vaio:~/$ sudo sqlmap --update
[sudo] password for radoen:
/usr/share/sqlmap/lib/core/convert.py:27: DeprecationWarning: the md5
module is deprecated; use hashlib instead
  import md5
/usr/share/sqlmap/lib/core/convert.py:28: DeprecationWarning: the sha
module is deprecated; use the hashlib module instead
  import sha

    sqlmap/0.6.4 coded by Bernardo Damele A. G. <ber...@gm...>
                      and Daniele Bellucci <dan...@gm...>

[*] starting at: 18:38:25

[18:38:25] [INFO] updating sqlmap
[18:38:26] [ERROR] unhandled exception in sqlmap/0.6.4, please copy
the command line and the following text and send by e-mail to
sql...@li.... The developers will fix it as soon
as possible:
sqlmap version: 0.6.4
Python version: 2.6.6
Operating system: linux2
Traceback (most recent call last):
  File "/usr/bin/sqlmap", line 78, in main
    init(cmdLineOptions)
  File "/usr/share/sqlmap/lib/core/option.py", line 770, in init
    update()
  File "/usr/share/sqlmap/lib/core/update.py", line 349, in update
    __updateSqlmap()
  File "/usr/share/sqlmap/lib/core/update.py", line 246, in __updateSqlmap
    logger.errMsg(errMsg)
AttributeError: Logger instance has no attribute 'errMsg'

[*] shutting down at: 18:38:26


OS version Kubuntu 10.10
Kernel Linux vaio 2.6.35-25-generic #44-Ubuntu SMP Fri Jan 21 17:40:44
UTC 2011 x86_64 GNU/Linux

Re: [sqlmap-users] --update error report

[Miroslav S. <mir...@gm...>]

hi Fabio.

you are using fairly outdated version of sqlmap.

please update to the latest revision from our SVN repository
to have it up to date:

svn checkout https://svn.sqlmap.org/sqlmap/trunk/sqlmap sqlmap-dev

kr

On Sun, Mar 13, 2011 at 10:23 PM, Fabio Portes <fab...@gm...> wrote:
>
> portes@ubuntu:~/Desktop/btv$ sudo sqlmap --update
> /usr/share/sqlmap/lib/core/convert.py:27: DeprecationWarning: the md5 module
> is deprecated; use hashlib instead
>   import md5
> /usr/share/sqlmap/lib/core/convert.py:28: DeprecationWarning: the sha module
> is deprecated; use the hashlib module instead
>   import sha
>     sqlmap/0.6.4 coded by Bernardo Damele A. G. <ber...@gm...>
>                       and Daniele Bellucci <dan...@gm...>
>
> [*] starting at: 18:21:32
> [18:21:32] [INFO] updating sqlmap
> [18:21:37] [ERROR] unhandled exception in sqlmap/0.6.4, please copy the
> command line and the following text and send by e-mail to
> sql...@li.... The developers will fix it as soon as
> possible:
> sqlmap version: 0.6.4
> Python version: 2.6.6
> Operating system: linux2
> Traceback (most recent call last):
>   File "/usr/bin/sqlmap", line 78, in main
>     init(cmdLineOptions)
>   File "/usr/share/sqlmap/lib/core/option.py", line 770, in init
>     update()
>   File "/usr/share/sqlmap/lib/core/update.py", line 349, in update
>     __updateSqlmap()
>   File "/usr/share/sqlmap/lib/core/update.py", line 246, in __updateSqlmap
>     logger.errMsg(errMsg)
> AttributeError: Logger instance has no attribute 'errMsg'
> [*] shutting down at: 18:21:37
>
> --
> Portes, Fabio.
>
> ------------------------------------------------------------------------------
> Colocation vs. Managed Hosting
> A question and answer guide to determining the best fit
> for your organization - today and in the future.
> http://p.sf.net/sfu/internap-sfd2d
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>



-- 
Miroslav Stampar

E-mail: miroslav.stampar (at) gmail.com
PGP Key ID: 0xB5397B1B

[sqlmap-users] --update error report

[Fabio P. <fab...@gm...>]

portes@ubuntu:~/Desktop/btv$ sudo sqlmap --update
/usr/share/sqlmap/lib/core/convert.py:27: DeprecationWarning: the md5 module
is deprecated; use hashlib instead
  import md5
/usr/share/sqlmap/lib/core/convert.py:28: DeprecationWarning: the sha module
is deprecated; use the hashlib module instead
  import sha

    sqlmap/0.6.4 coded by Bernardo Damele A. G. <ber...@gm...>
                      and Daniele Bellucci <dan...@gm...>

[*] starting at: 18:21:32

[18:21:32] [INFO] updating sqlmap
[18:21:37] [ERROR] unhandled exception in sqlmap/0.6.4, please copy the
command line and the following text and send by e-mail to
sql...@li.... The developers will fix it as soon as
possible:
sqlmap version: 0.6.4
Python version: 2.6.6
Operating system: linux2
Traceback (most recent call last):
  File "/usr/bin/sqlmap", line 78, in main
    init(cmdLineOptions)
  File "/usr/share/sqlmap/lib/core/option.py", line 770, in init
    update()
  File "/usr/share/sqlmap/lib/core/update.py", line 349, in update
    __updateSqlmap()
  File "/usr/share/sqlmap/lib/core/update.py", line 246, in __updateSqlmap
    logger.errMsg(errMsg)
AttributeError: Logger instance has no attribute 'errMsg'

[*] shutting down at: 18:21:37


--
Portes, Fabio.

Re: [sqlmap-users] BUG Finding passwords

[Miroslav S. <mir...@gm...>]

hi again

thank you for your report and find it fixed in the latest commit (r3405)

kr

On Thu, Mar 10, 2011 at 9:05 PM,  <and...@gm...> wrote:
> I can pass the full execution that I was trying but it got to be later. :)
>
> Not on pc rigth now.
>
> AS
>
>
> -----Original Message-----
> From: Miroslav Stampar <mir...@gm...>
> Date: Thu, 10 Mar 2011 21:00:13
> To: <and...@gm...>
> Subject: Re: [sqlmap-users] BUG Finding passwords
>
> i believe i was able to reproduce it
>
> i'll report you back when fixed
>
> kr
>
> On Thu, Mar 10, 2011 at 8:57 PM, Miroslav Stampar
> <mir...@gm...> wrote:
>> in that case could you please in lib/utils/hash.py put the part
>> between #### and report the last INFO you get before crash:
>>
>> def mssql_passwd(password, salt, uppercase=False):
>>    """
>>    Reference(s):
>>        http://www.leidecker.info/projects/phrasendrescher/mssql.c
>>        https://www.evilfingers.com/tools/GSAuditor.php
>>
>>    >>> mssql_passwd(password='testpass', salt='4086ceb6', uppercase=False)
>>    '0x01004086ceb60c90646a8ab9889fe3ed8e5c150b5460ece8425a'
>>    """
>>    ###BEGIN##########
>>    print 'INFO:', repr(password), repr(salt)
>>    ###END############
>>    binsalt = hexdecode(salt)
>>
>> thank you very much in advance
>>
>> kr
>>
>> On Thu, Mar 10, 2011 at 8:53 PM,  <and...@gm...> wrote:
>>> Default one
>>> -----Original Message-----
>>> From: Miroslav Stampar <mir...@gm...>
>>> Date: Thu, 10 Mar 2011 20:47:17
>>> To: André Silva<and...@gm...>
>>> Cc: <sql...@li...>
>>> Subject: Re: [sqlmap-users] BUG Finding passwords
>>>
>>> hi Andre.
>>>
>>> are you using your own dictionary or the default one?
>>>
>>> kr
>>>
>>> On Thu, Mar 10, 2011 at 4:35 PM, André Silva <and...@gm...> wrote:
>>>> Hi all,
>>>>
>>>> Pasted the error on sqlmap.py
>>>>
>>>> "[15:32:33] [INFO] 277016/10006704 words (3%) (user: minSel)
>>>> [15:32:33] [CRITICAL] unhandled exception in sqlmap/0.9-dev, retry your run
>>>> with the latest development version from the Subversion repository. If the
>>>> exception persists, please send by e-mail to
>>>> sql...@li... the following text and any information
>>>> required to reproduce the bug. The developers will try to reproduce the bug,
>>>> fix it accordingly and get back to you.
>>>> sqlmap version: 0.9-dev (r3404)
>>>> Python version: 2.5.2
>>>> Operating system: posix
>>>> Command line: ./sqlmap.py -u ************************************* --data
>>>> strPwd=ajvm&strUserLogin=jvm&Submit_button=Submit --passwords
>>>> Technique: UNION
>>>> Back-end DBMS: Microsoft SQL Server (fingerprinted)
>>>> Traceback (most recent call last):
>>>>   File "./sqlmap.py", line 82, in main
>>>>     start()
>>>>   File "/pentest/database/sqlmap/lib/controller/controller.py", line 424, in
>>>> start
>>>>     action()
>>>>   File "/pentest/database/sqlmap/lib/controller/action.py", line 77, in
>>>> action
>>>>     conf.dbmsHandler.getPasswordHashes(), "password hash")
>>>>   File "/pentest/database/sqlmap/plugins/generic/enumeration.py", line 377,
>>>> in getPasswordHashes
>>>>     attackCachedUsersPasswords()
>>>>   File "/pentest/database/sqlmap/lib/utils/hash.py", line 201, in
>>>> attackCachedUsersPasswords
>>>>     results = dictionaryAttack(kb.data.cachedUsersPasswords)
>>>>   File "/pentest/database/sqlmap/lib/utils/hash.py", line 417, in
>>>> dictionaryAttack
>>>>     current =__functions__[hash_regex](password = word, uppercase = False,
>>>> **kwargs)
>>>>   File "/pentest/database/sqlmap/lib/utils/hash.py", line 104, in
>>>> mssql_passwd
>>>>     retVal = "0100%s%s" % (salt, sha1(unistr + binsalt).hexdigest())
>>>> UnicodeDecodeError: 'ascii' codec can't decode byte 0xee in position 3:
>>>> ordinal not in range(128)"
>>>>
>>>>
>>>> Checked out revision 3404
>>>>
>>>>
>>>> AS
>>>>
>>>> ------------------------------------------------------------------------------
>>>> Colocation vs. Managed Hosting
>>>> A question and answer guide to determining the best fit
>>>> for your organization - today and in the future.
>>>> http://p.sf.net/sfu/internap-sfd2d
>>>>_______________________________________________
>>>> sqlmap-users mailing list
>>>> sql...@li...
>>>> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>>>>
>>>>
>>>
>>>
>>>
>>> --
>>> Miroslav Stampar
>>>
>>> E-mail: miroslav.stampar (at) gmail.com
>>> PGP Key ID: 0xB5397B1B
>>>
>>
>>
>>
>> --
>> Miroslav Stampar
>>
>> E-mail: miroslav.stampar (at) gmail.com
>> PGP Key ID: 0xB5397B1B
>>
>
>
>
> --
> Miroslav Stampar
>
> E-mail: miroslav.stampar (at) gmail.com
> PGP Key ID: 0xB5397B1B
>



-- 
Miroslav Stampar

E-mail: miroslav.stampar (at) gmail.com
PGP Key ID: 0xB5397B1B

Re: [sqlmap-users] BUG Finding passwords

[Miroslav S. <mir...@gm...>]

hi Andre.

are you using your own dictionary or the default one?

kr

On Thu, Mar 10, 2011 at 4:35 PM, André Silva <and...@gm...> wrote:
> Hi all,
>
> Pasted the error on sqlmap.py
>
> "[15:32:33] [INFO] 277016/10006704 words (3%) (user: minSel)
> [15:32:33] [CRITICAL] unhandled exception in sqlmap/0.9-dev, retry your run
> with the latest development version from the Subversion repository. If the
> exception persists, please send by e-mail to
> sql...@li... the following text and any information
> required to reproduce the bug. The developers will try to reproduce the bug,
> fix it accordingly and get back to you.
> sqlmap version: 0.9-dev (r3404)
> Python version: 2.5.2
> Operating system: posix
> Command line: ./sqlmap.py -u ************************************* --data
> strPwd=ajvm&strUserLogin=jvm&Submit_button=Submit --passwords
> Technique: UNION
> Back-end DBMS: Microsoft SQL Server (fingerprinted)
> Traceback (most recent call last):
>   File "./sqlmap.py", line 82, in main
>     start()
>   File "/pentest/database/sqlmap/lib/controller/controller.py", line 424, in
> start
>     action()
>   File "/pentest/database/sqlmap/lib/controller/action.py", line 77, in
> action
>     conf.dbmsHandler.getPasswordHashes(), "password hash")
>   File "/pentest/database/sqlmap/plugins/generic/enumeration.py", line 377,
> in getPasswordHashes
>     attackCachedUsersPasswords()
>   File "/pentest/database/sqlmap/lib/utils/hash.py", line 201, in
> attackCachedUsersPasswords
>     results = dictionaryAttack(kb.data.cachedUsersPasswords)
>   File "/pentest/database/sqlmap/lib/utils/hash.py", line 417, in
> dictionaryAttack
>     current = __functions__[hash_regex](password = word, uppercase = False,
> **kwargs)
>   File "/pentest/database/sqlmap/lib/utils/hash.py", line 104, in
> mssql_passwd
>     retVal = "0100%s%s" % (salt, sha1(unistr + binsalt).hexdigest())
> UnicodeDecodeError: 'ascii' codec can't decode byte 0xee in position 3:
> ordinal not in range(128)"
>
>
> Checked out revision 3404
>
>
> AS
>
> ------------------------------------------------------------------------------
> Colocation vs. Managed Hosting
> A question and answer guide to determining the best fit
> for your organization - today and in the future.
> http://p.sf.net/sfu/internap-sfd2d
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>



-- 
Miroslav Stampar

E-mail: miroslav.stampar (at) gmail.com
PGP Key ID: 0xB5397B1B

Re: [sqlmap-users] crash report

[Miroslav S. <mir...@gm...>]

hi wanglei.

please update to the latest 0.9/dev version from our repository to
have it fixed.

kr

p.s. as you are a windows user you can use TortoiseSVN and enter
https://svn.sqlmap.org/sqlmap/trunk/sqlmap as repository address
p.p.s. on Linux you can use this: svn checkout
https://svn.sqlmap.org/sqlmap/trunk/sqlmap sqlmap-dev

2011/3/10 wanglei <wa...@17...>:
> C:\Documents and Settings\asd\My Documents\下载\sqlmap-0.8_exe\sqlmap-0.8_exe>sq
> lmap.exe -u "http://s5.soccer.kaixin001.com.cn/soccer/i.php?a=1122"
>     sqlmap/0.8 - automatic SQL injection and database takeover tool
>     http://sqlmap.sourceforge.net
> [*] starting at: 02:08:20
> [02:08:20] [ERROR] unhandled exception in sqlmap/0.8, please copy the command li
> ne and the following text and send by e-mail to sql...@li...urceforge.n
> et. The developer will fix it as soon as possible:
> sqlmap version: 0.8
> Python version: 2.6.2
> Operating system: win32
> Traceback (most recent call last):
>   File "sqlmap.py", line 74, in main
>   File "lib\core\option.pyc", line 1141, in init
>   File "lib\parse\queriesfile.pyc", line 229, in queriesParser
>   File "xml\sax\__init__.pyc", line 33, in parse
>   File "xml\sax\expatreader.pyc", line 107, in parse
>   File "xml\sax\xmlreader.pyc", line 119, in parse
>   File "xml\sax\expatreader.pyc", line 111, in prepareParser
> UnicodeEncodeError: 'ascii' codec can't encode characters in position 43-44: ord
> inal not in range(128)
> [*] shutting down at: 02:08:20
>
> 2011-03-11
> ________________________________
> wanglei
> ------------------------------------------------------------------------------
> Colocation vs. Managed Hosting
> A question and answer guide to determining the best fit
> for your organization - today and in the future.
> http://p.sf.net/sfu/internap-sfd2d
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>



-- 
Miroslav Stampar

E-mail: miroslav.stampar (at) gmail.com
PGP Key ID: 0xB5397B1B

[sqlmap-users] crash report

[wanglei <wa...@17...>]

C:\Documents and Settings\asd\My Documents\下载\sqlmap-0.8_exe\sqlmap-0.8_exe>sq
lmap.exe -u "http://s5.soccer.kaixin001.com.cn/soccer/i.php?a=1122"
    sqlmap/0.8 - automatic SQL injection and database takeover tool
    http://sqlmap.sourceforge.net
[*] starting at: 02:08:20
[02:08:20] [ERROR] unhandled exception in sqlmap/0.8, please copy the command li
ne and the following text and send by e-mail to sql...@li...urceforge.n
et. The developer will fix it as soon as possible:
sqlmap version: 0.8
Python version: 2.6.2
Operating system: win32
Traceback (most recent call last):
  File "sqlmap.py", line 74, in main
  File "lib\core\option.pyc", line 1141, in init
  File "lib\parse\queriesfile.pyc", line 229, in queriesParser
  File "xml\sax\__init__.pyc", line 33, in parse
  File "xml\sax\expatreader.pyc", line 107, in parse
  File "xml\sax\xmlreader.pyc", line 119, in parse
  File "xml\sax\expatreader.pyc", line 111, in prepareParser
UnicodeEncodeError: 'ascii' codec can't encode characters in position 43-44: ord
inal not in range(128)
[*] shutting down at: 02:08:20

2011-03-11 



wanglei 

[sqlmap-users] BUG Finding passwords

[André S. <and...@gm...>]

Hi all,

Pasted the error on sqlmap.py

"[15:32:33] [INFO] 277016/10006704 words (3%) (user: minSel)
[15:32:33] [CRITICAL] unhandled exception in sqlmap/0.9-dev, retry your run
with the latest development version from the Subversion repository. If the
exception persists, please send by e-mail to
sql...@li... the following text and any information
required to reproduce the bug. The developers will try to reproduce the bug,
fix it accordingly and get back to you.
sqlmap version: 0.9-dev (r3404)
Python version: 2.5.2
Operating system: posix
Command line: ./sqlmap.py -u ************************************* --data
strPwd=ajvm&strUserLogin=jvm&Submit_button=Submit --passwords
Technique: UNION
Back-end DBMS: Microsoft SQL Server (fingerprinted)
Traceback (most recent call last):
  File "./sqlmap.py", line 82, in main
    start()
  File "/pentest/database/sqlmap/lib/controller/controller.py", line 424, in
start
    action()
  File "/pentest/database/sqlmap/lib/controller/action.py", line 77, in
action
    conf.dbmsHandler.getPasswordHashes(), "password hash")
  File "/pentest/database/sqlmap/plugins/generic/enumeration.py", line 377,
in getPasswordHashes
    attackCachedUsersPasswords()
  File "/pentest/database/sqlmap/lib/utils/hash.py", line 201, in
attackCachedUsersPasswords
    results = dictionaryAttack(kb.data.cachedUsersPasswords)
  File "/pentest/database/sqlmap/lib/utils/hash.py", line 417, in
dictionaryAttack
    current = __functions__[hash_regex](password = word, uppercase = False,
**kwargs)
  File "/pentest/database/sqlmap/lib/utils/hash.py", line 104, in
mssql_passwd
    retVal = "0100%s%s" % (salt, sha1(unistr + binsalt).hexdigest())
UnicodeDecodeError: 'ascii' codec can't decode byte 0xee in position 3:
ordinal not in range(128)"


Checked out revision 3404


AS

Re: [sqlmap-users] UnicodeDecodeError: 'ascii' codec can't decode byte 0xc3 in position 63: ordinal not in range(128)

[Miroslav S. <mir...@gm...>]

hi Emiliano.

i think we've found a problem and fixed.

could you please update to the latest revision and try it again?

kr

On Sat, Mar 5, 2011 at 6:01 AM, Emiliano Bazaes <emi...@7e...> wrote:
> hi, got this error when you perform this test
>
> ./sqlmap.py -u
> "http://xxx/wp-content/plugins/wordtube/myextractXML.php?id=3" --string
> "some text"
>
> ... and get the following:
>
>     sqlmap/0.9-dev - automatic SQL injection and database takeover tool
>     http://sqlmap.sourceforge.net
>
> [*] starting at: 01:56:00
>
> [01:56:01] [INFO] using '~/sqlmap-dev/output/xxx/session' as session file
> [01:56:01] [INFO] testing connection to the target url
> [01:56:03] [INFO] testing if the provided string is within the target URL
> page content
>
> [01:56:05] [CRITICAL] unhandled exception in sqlmap/0.9-dev, retry your run
> with the latest development version from the Subversion repository. If the
> exception persists, please send by e-mail to
> sql...@li... the following text and any information
> required to reproduce the bug. The developers will try to reproduce the bug,
> fix it accordingly and get back to you.
> sqlmap version: 0.9-dev
> Python version: 2.6.5
> Operating system: posix
> Command line: ./sqlmap.py -u
> *********************************************************************************************************
> --string some text
> Technique: None
> Back-end DBMS: None (identified)
> Traceback (most recent call last):
>   File "./sqlmap.py", line 82, in main
>     start()
>   File "~/sqlmap-dev/lib/controller/controller.py", line 255, in start
>     if not checkConnection(suppressOutput=conf.forms) or not checkString()
> or not checkRegexp():
>   File "~/sqlmap-dev/lib/controller/checks.py", line 727, in checkString
>     if conf.string not in page:
> UnicodeDecodeError: 'ascii' codec can't decode byte 0xc3 in position 63:
> ordinal not in range(128)
>
> [*] shutting down at: 01:56:05
>
> __
> regards!
>
> --
>     Emiliano
>
> ------------------------------------------------------------------------------
> What You Don't Know About Data Connectivity CAN Hurt You
> This paper provides an overview of data connectivity, details
> its effect on application quality, and explores various alternative
> solutions. http://p.sf.net/sfu/progress-d2d
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>



-- 
Miroslav Stampar

E-mail: miroslav.stampar (at) gmail.com
PGP Key ID: 0xB5397B1B

Re: [sqlmap-users] BUG

[Miroslav S. <mir...@gm...>]

hi nightman.

thx for reporting. find it fixed in the latest commit (r3392).

kr

On Fri, Mar 4, 2011 at 5:04 PM,  <nig...@em...> wrote:
>
> [17:01:39] [CRITICAL] unhandled exception in sqlmap/0.9-dev, retry your run with the latest developm
> ent version from the Subversion repository. If the exception persists, please send by e-mail to sqlm
> ap-...@li... the following text and any information required to reproduce the bug.
>  The developers will try to reproduce the bug, fix it accordingly and get back to you.
> sqlmap version: 0.9-dev
> Python version: 2.6.6
> Operating system: nt
> Command line: C:\pentest\p\sqlmap-0.9-1\sqlmap.py -u *********
> ******************************************************************************** --auth-type=Basic -
> -auth-cred=**************** --random-agent --retries=6 --level 5 --risk 3 --current-user --current-db --is-dba --dbs
> Technique: UNION
> Back-end DBMS: MySQL (fingerprinted)
> Traceback (most recent call last):
>  File "C:\pentest\p\sqlmap-0.9-1\sqlmap.py", line 82, in main
>
>  start()
>  File "C:\pentest\p\sqlmap-0.9-1\lib\controller\controller.py
> ", line 424, in start
>  action()
>  File "C:\pentest\p\sqlmap-0.9-1\lib\controller\action.py", l
> ine 70, in action
>  conf.dumper.dba(conf.dbmsHandler.isDba())
>  File "C:\pentest\p\sqlmap-0.9-1\plugins\generic\enumeration.
> py", line 138, in isDba
>  query = queries[Backend.getIdentifiedDbms()].is_dba.query % kb.data.currentUser.split("@")[0]
> AttributeError: 'list' object has no attribute 'split'
>
> [*] shutting down at: 17:01:39
>
> ------------------------------------------------------------------------------
> What You Don't Know About Data Connectivity CAN Hurt You
> This paper provides an overview of data connectivity, details
> its effect on application quality, and explores various alternative
> solutions. http://p.sf.net/sfu/progress-d2d
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>



-- 
Miroslav Stampar

E-mail: miroslav.stampar (at) gmail.com
PGP Key ID: 0xB5397B1B

[sqlmap-users] UnicodeDecodeError: 'ascii' codec can't decode byte 0xc3 in position 63: ordinal not in range(128)

[Emiliano B. <emi...@7e...>]

hi, got this error when you perform this test

./sqlmap.py -u "http://xxx/wp-content/plugins/wordtube/myextractXML.php?id=3"
--string "some text"

... and get the following:

    sqlmap/0.9-dev - automatic SQL injection and database takeover tool
    http://sqlmap.sourceforge.net

[*] starting at: 01:56:00

[01:56:01] [INFO] using '~/sqlmap-dev/output/xxx/session' as session file
[01:56:01] [INFO] testing connection to the target url
[01:56:03] [INFO] testing if the provided string is within the target URL
page content

[01:56:05] [CRITICAL] unhandled exception in sqlmap/0.9-dev, retry your run
with the latest development version from the Subversion repository. If the
exception persists, please send by e-mail to
sql...@li... the following text and any information
required to reproduce the bug. The developers will try to reproduce the bug,
fix it accordingly and get back to you.
sqlmap version: 0.9-dev
Python version: 2.6.5
Operating system: posix
Command line: ./sqlmap.py -u
*********************************************************************************************************
--string some text
Technique: None
Back-end DBMS: None (identified)
Traceback (most recent call last):
  File "./sqlmap.py", line 82, in main
    start()
  File "~/sqlmap-dev/lib/controller/controller.py", line 255, in start
    if not checkConnection(suppressOutput=conf.forms) or not checkString()
or not checkRegexp():
  File "~/sqlmap-dev/lib/controller/checks.py", line 727, in checkString
    if conf.string not in page:
UnicodeDecodeError: 'ascii' codec can't decode byte 0xc3 in position 63:
ordinal not in range(128)

[*] shutting down at: 01:56:05

__
regards!

-- 
    Emiliano

[sqlmap-users] BUG

[<nig...@em...>]

[17:01:39] [CRITICAL] unhandled exception in sqlmap/0.9-dev, retry your run with the latest developm
ent version from the Subversion repository. If the exception persists, please send by e-mail to sqlm
ap-...@li... the following text and any information required to reproduce the bug.
 The developers will try to reproduce the bug, fix it accordingly and get back to you.
sqlmap version: 0.9-dev
Python version: 2.6.6
Operating system: nt
Command line: C:\pentest\p\sqlmap-0.9-1\sqlmap.py -u *********
******************************************************************************** --auth-type=Basic -
-auth-cred=**************** --random-agent --retries=6 --level 5 --risk 3 --current-user --current-db --is-dba --dbs
Technique: UNION
Back-end DBMS: MySQL (fingerprinted)
Traceback (most recent call last):
 File "C:\pentest\p\sqlmap-0.9-1\sqlmap.py", line 82, in main

 start()
 File "C:\pentest\p\sqlmap-0.9-1\lib\controller\controller.py
", line 424, in start
 action()
 File "C:\pentest\p\sqlmap-0.9-1\lib\controller\action.py", l
ine 70, in action
 conf.dumper.dba(conf.dbmsHandler.isDba())
 File "C:\pentest\p\sqlmap-0.9-1\plugins\generic\enumeration.
py", line 138, in isDba
 query = queries[Backend.getIdentifiedDbms()].is_dba.query % kb.data.currentUser.split("@")[0]
AttributeError: 'list' object has no attribute 'split'

[*] shutting down at: 17:01:39