sqlmap-users — sqlmap users mailing list

[sqlmap-users] [ERROR] unhandled exception in sqlmap/0.6.3

[Alessandro Di G. <a.d...@gm...>]

*sqlmap -g site:habfans.com -v1*

[21:42:06] [ERROR] unhandled exception in sqlmap/0.6.3, please copy the
command
line and the following text and send by e-mail to
sql...@li...urceforge
.net. The developers will fix it as soon as possible:
sqlmap version: 0.6.3
Python version: 2.5.1
Operating system: win32
Traceback (most recent call last):
  File "sqlmap.py", line 81, in main
  File "lib\controller\controller.pyc", line 178, in start
  File "lib\controller\checks.pyc", line 300, in checkStability
  File "lib\request\connect.pyc", line 267, in queryPage
TypeError: 'NoneType' object is not iterable

[*] shutting down at: 21:42:06

-- 

W. C. Fields  - "I never drink water; that is the stuff that rusts pipes."

Re: [sqlmap-users] [sqlmap-devel] sqlmap 0.6.3 released

[Andres R. <and...@gm...>]

Bernardo,

On Wed, Dec 17, 2008 at 9:57 PM, Bernardo Damele A. G.
<ber...@gm...> wrote:
...
> * Major enhancement to test if the web application technology supports
> stacked queries (multiple statements) by providing option --stacked-test
> which will be then used someday also by takeover functionality;
> * Major enhancement to test if the injectable parameter is affected by a
> time based blind SQL injection technique by providing option --time-test;
...

I see where this is going, and I **LOVE** it.

Regarding my work for sqlmap, I promise that I'll do some work in the
last three weeks of January, and that I'll update the sqlmap plugin of
w3af in order to use the latest sqlmap version.

Cheers,
-- 
Andres Riancho
http://w3af.sourceforge.net/
Web Application Attack and Audit Framework

[sqlmap-users] sqlmap 0.6.3 released

[Bernardo D. A. G. <ber...@gm...>]

Hi,

I am glad to release sqlmap version 0.6.3.

Thanks to anyone of you that contributed with really appreciated and
useful feedback.

Changes
=======

Some of the new features include:

* Major enhancement to get list of targets to test from Burp proxy
(http://portswigger.net/suite/) requests log file path or WebScarab
proxy (http://www.owasp.org/index.php/Category:OWASP_WebScarab_Project)
'conversations/' folder path by providing option -l <filepath>;
* Major enhancement to support Partial UNION query SQL injection
technique too;
* Major enhancement to test if the web application technology supports
stacked queries (multiple statements) by providing option --stacked-test
which will be then used someday also by takeover functionality;
* Major enhancement to test if the injectable parameter is affected by a
time based blind SQL injection technique by providing option --time-test;
* Major bug fix to correctly enumerate columns on Microsoft SQL Server;
* Major bug fix so that when the user provide a SELECT statement to be
processed with an asterisk as columns, now it also work if in the FROM
there is no database name specified;

Complete list of changes at http://sqlmap.sourceforge.net/doc/ChangeLog.


Download
========

You can download it in various formats:

* Source gzip compressed,
http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.3.tar.gz

* Source bzip2 compressed,
http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.3.tar.bz2

* Source zip compressed,
http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.3.zip

* DEB binary package,
http://downloads.sourceforge.net/sqlmap/sqlmap_0.6.3-1_all.deb

* RPM binary package,
http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.3-1.noarch.rpm

* Portable executable for Windows that does not require the Python
interpreter to be installed on the operating system,
http://downloads.sourceforge.net/sqlmap/sqlmap-0.6.3_exe.zip


Documentation
=============

* sqlmap user's manual: http://sqlmap.sourceforge.net/doc/README.pdf

* sqlmap developer's documentation: http://sqlmap.sourceforge.net/dev/


Happy hacking!

-- 
Bernardo Damele A. G.

E-mail / Jabber: bernardo.damele (at) gmail.com
Mobiles: +39-3493821385 (IT), +44-(0)7788962949 (UK)
PGP Key ID: 0x05F5A30F

Re: [sqlmap-users] Feature request: Filter evasion

[Bernardo D. A. G. <ber...@gm...>]

Hi Philippe,

On Tue, Dec 9, 2008 at 13:14, Philippe A. R. Schaeffer
<sc...@co...> wrote:
> ...
> It would be a nice feature to use such evasion techniques as an option
> in sql-map.

The IDS/IPS filter evasion will come in the long run.

Cheers,
-- 
Bernardo Damele A. G.

E-mail / Jabber: bernardo.damele (at) gmail.com
Mobiles: +39-3493821385 (IT), +44-(0)7788962949 (UK)
PGP Key ID: 0x05F5A30F

[sqlmap-users] Feature request: Filter evasion

[Philippe A. R. S. <sc...@co...>]

Hi,

testing an SQL-I (and talking to the responsible admins) I came across a
filter that is blocking any requests containing 2 of the strings given
below.

It seems to be possible to evade the filter by including comments (e.g.
"se/**/lect" - for MSSQL).
I've done some tests by changing xml/queries.xml which is a rather dirty
hack.

It would be a nice feature to use such evasion techniques as an option
in sql-map.

Regards,

Philippe

alter
backup
begin
cast
convert
create
cursor
database
declare
delete
deny
drop
dt_
dump
exec
execute
exists
from
function
grant
identity
index
insert
into
master
ms_
on
procedure
rollback
schema
select
set
sp_
statistics
table
transaction
trigger
truncate
update
user
view
where
xp_

Re: [sqlmap-users] trouble with "Accept-Encoding"

[Bernardo D. A. G. <ber...@gm...>]

Hi Philippe,

Philippe A. R. Schaeffer wrote:
> ...
> using the current svn version sql-map wouldn't find an injection (using
> --string).
> In verbose output I saw that gzip Content-Encoding was used.
> This scrambles the -v5 output badly.
> 
> After removing the appropriate line (390) from ./lib/core/option.py the
> injection was succesfully discovered.
> ...

Thanks for reporting this problem. I fixed it and commited on svn. Now
you can provide extra headers with option --headers and by default
sqlmap only adds Accept, Accept-Language and Accept-Charset, not
Encoding headers anymore.

> if -v5 supplied the decoded response (as an option?).

That will come in the long run.

Cheers,
-- 
Bernardo Damele A. G.

E-mail / Jabber: bernardo.damele (at) gmail.com
Mobiles: +39-3493821385 (IT), +44-(0)7788962949 (UK)
PGP Key ID: 0x05F5A30F

[sqlmap-users] trouble with "Accept-Encoding"

[Philippe A. R. S. <sc...@co...>]

Hi,

using the current svn version sql-map wouldn't find an injection (using
--string).
In verbose output I saw that gzip Content-Encoding was used.
This scrambles the -v5 output badly.

After removing the appropriate line (390) from ./lib/core/option.py the
injection was succesfully discovered.

I didn't look any further. But there seems to be something broken with
the handling of encoded responses.

It would be helpful to be able to disable encoding as an option and if
-v5 supplied the decoded response (as an option?).

BTW, the server was:
web application technology: ASP.NET, Microsoft IIS 6.0, ASP.NET 2.0.50727


Regards,

Philippe

Re: [sqlmap-users] An idea for a feature

[Bernardo D. A. G. <ber...@gm...>]

Hi again Jason,

On Thu, Dec 4, 2008 at 10:15, Bernardo Damele A. G.
<ber...@gm...> wrote:
> ...
> The number of retries is already in the TODO list.
> ...

Implemented both number of retries (set to 3 by default, not
customizable) and seconds to timeout (set to 10 by default,
customizable from user) and commited to svn repository.

>> ...
>> Example, in thread mode, but does the same in single thread but without
>> the traceback
>> ...
>
> I could not get rid of the traceback message when it's within a
> thread. I will have a deep look into this too.

Fixed this too.. also the KeyboardInterrupted exception should not
(always) show an exception when it's raised.

Cheers,
-- 
Bernardo Damele A. G.

E-mail / Jabber: bernardo.damele (at) gmail.com
Mobiles: +39-3493821385 (IT), +44-(0)7788962949 (UK)
PGP Key ID: 0x05F5A30F

Re: [sqlmap-users] An idea for a feature

[Bernardo D. A. G. <ber...@gm...>]

Hi Jason,

On Thu, Dec 4, 2008 at 02:07, Jason Swan <jas...@gm...> wrote:
> After playing around with sqlmap for a while, I noticed the support for
> retries doesn't exist, if for some reason a site doesn't respond in a
> certain amount of time, it errors, and quits the application. What would
> be a nice if you could set the timeout time, AND the option to retry the
> query X many times, if it goes through X many retries then go ahead and
> quit.

The number of retries is already in the TODO list.
The timeout support with Python urllib2 library the way sqlmap uses
it, is not easy to implement. If anybody have suggestions on it and
could have a look at the lib/request/connect.py it would be very much
appreciated.

> ...
> Example, in thread mode, but does the same in single thread but without
> the traceback
> ...

I could not get rid of the traceback message when it's within a
thread. I will have a deep look into this too.

Thanks Jason.

-- 
Bernardo Damele A. G.

E-mail / Jabber: bernardo.damele (at) gmail.com
Mobiles: +39-3493821385 (IT), +44-(0)7788962949 (UK)
PGP Key ID: 0x05F5A30F

[sqlmap-users] An idea for a feature

[Jason S. <jas...@gm...>]

After playing around with sqlmap for a while, I noticed the support for
retries doesn't exist, if for some reason a site doesn't respond in a
certain amount of time, it errors, and quits the application. What would
be a nice if you could set the timeout time, AND the option to retry the
query X many times, if it goes through X many retries then go ahead and
quit.

Just something to think about put in the todo or whatever. :)

Example, in thread mode, but does the same in single thread but without
the traceback

Exception in thread Thread-34:
Traceback (most recent call last):
  File "/usr/lib/python2.4/threading.py", line 442, in __bootstrap
    self.run()
  File "/usr/lib/python2.4/threading.py", line 422, in run
    self.__target(*self.__args, **self.__kwargs)
  File "/root/.sqlmap/sqlmap/lib/techniques/blind/inference.py", line
145, in downloadThread
    val = getChar(curidx)
  File "/root/.sqlmap/sqlmap/lib/techniques/blind/inference.py", line
97, in getChar
    result = Request.queryPage(forgedPayload)
  File "/root/.sqlmap/sqlmap/lib/request/connect.py", line 255, in
queryPage
    page = Connect.getPage(get=get, post=post, cookie=cookie, ua=ua)
  File "/root/.sqlmap/sqlmap/lib/request/connect.py", line 172, in
getPage
    raise sqlmapConnectionException, warnMsg
sqlmapConnectionException: unable to connect to the target url or proxy

Re: [sqlmap-users] sqlmap crash

[Bernardo D. A. G. <ber...@gm...>]

Hi,

from the output message and the traceback it looks like sqlmap was
identifying the back-end DBMS as MSSQL then when confirming that, it
failed because the 25th character of @@version is not 0 (as of 2000),
5 (as of 2005) or 8 (as of 2008) as expected.
I just fixed this issue and now the traceback should have gone. Could
you please update your SVN working copy and run it again? If you have
the chance, run it with --banner and --fingerprint options and send me
the output please just to assure it's MSSQL and not Sybase.

Cheers,
Bernardo


On Mon, Dec 1, 2008 at 19:47,  <ccl...@fl...> wrote:
> ...
> [13:44:48] [INFO] testing Microsoft SQL Server
> [13:44:48] [INFO] query: LTRIM(STR(LEN(7)))
> [13:44:48] [INFO] retrieved: 1
> [13:44:51] [INFO] performed 13 queries in 3 seconds
> [13:44:51] [INFO] query: SELECT SUBSTRING((@@VERSION), 25, 1)
> [13:44:51] [INFO] retrieved:
> [13:44:53] [INFO] performed 6 queries in 1 seconds
> [13:44:53] [ERROR] unhandled exception in sqlmap/0.6.3-rc2, please copy
> the command line and the following text and send by e-mail to
> sql...@li.... The developers will fix it as soon as
> possible:
> sqlmap version: 0.6.3-rc2
> Python version: 2.5.2
> Operating system: linux2
> Traceback (most recent call last):
>  File "./sqlmap.py", line 74, in main
>    start()
>  File "/root/sqlmap/lib/controller/controller.py", line 267, in start
>    action()
>  File "/root/sqlmap/lib/controller/action.py", line 70, in action
>    print "%s\n" % conf.dbmsHandler.getFingerprint()
>  File "/root/sqlmap/plugins/dbms/mssqlserver.py", line 141, in
> getFingerprint
>    value += actVer
> TypeError: cannot concatenate 'str' and 'NoneType' objects
>
> [*] shutting down at: 13:44:53


-- 
Bernardo Damele A. G.

E-mail / Jabber: bernardo.damele (at) gmail.com
Mobiles: +39-3493821385 (IT), +44-(0)7788962949 (UK)
PGP Key ID: 0x05F5A30F

[sqlmap-users] sqlmap crash

[<ccl...@fl...>]

While testing an injectable site:

[13:44:48] [INFO] testing Microsoft SQL Server
[13:44:48] [INFO] query: LTRIM(STR(LEN(7)))
[13:44:48] [INFO] retrieved: 1
[13:44:51] [INFO] performed 13 queries in 3 seconds
[13:44:51] [INFO] query: SELECT SUBSTRING((@@VERSION), 25, 1)
[13:44:51] [INFO] retrieved:
[13:44:53] [INFO] performed 6 queries in 1 seconds
[13:44:53] [ERROR] unhandled exception in sqlmap/0.6.3-rc2, please copy
the command line and the following text and send by e-mail to
sql...@li.... The developers will fix it as soon as
possible:
sqlmap version: 0.6.3-rc2
Python version: 2.5.2
Operating system: linux2
Traceback (most recent call last):
  File "./sqlmap.py", line 74, in main
    start()
  File "/root/sqlmap/lib/controller/controller.py", line 267, in start
    action()
  File "/root/sqlmap/lib/controller/action.py", line 70, in action
    print "%s\n" % conf.dbmsHandler.getFingerprint()
  File "/root/sqlmap/plugins/dbms/mssqlserver.py", line 141, in
getFingerprint
    value += actVer
TypeError: cannot concatenate 'str' and 'NoneType' objects

[*] shutting down at: 13:44:53

[sqlmap-users] Tautology with banned chars in Oracle

[Andres R. <and...@gm...>]

List,

    I'm performing a pentest and I think that one of the parameters is
injectable, BUT there is a filter that filters =,>,< and ' . Is there
a way to create a tautology (OR 1=1) in Oracle without using those
chars?

    More info: it's an integer parameter.

Cheers,
-- 
Andres Riancho
http://w3af.sourceforge.net/
Web Application Attack and Audit Framework

Re: [sqlmap-users] Microsoft SQL 2000

[Jason S. <jas...@gm...>]

Updated and tested it out, seems to work perfect now, thank you
Bernardo.

On Tue, 2008-11-25 at 11:34 +0000, Bernardo Damele A. G. wrote:
> Hi Jason,
> 
> On Tue, Nov 25, 2008 at 06:20, Jason Swan <jas...@gm...> wrote:
> > ...
> > Column enumeration doesn't work, returns a blank field, then returns the
> > first field, and repeats it over and over, and returns a false amount of
> > columns, like 25+ columns when only about 6 exist or so...
> 
> Thanks for reporting this bug.
> Fixed and commited to SVN repository.
> 
> Cheers,

Re: [sqlmap-users] Microsoft SQL 2000

[Bernardo D. A. G. <ber...@gm...>]

Hi Jason,

On Tue, Nov 25, 2008 at 06:20, Jason Swan <jas...@gm...> wrote:
> ...
> Column enumeration doesn't work, returns a blank field, then returns the
> first field, and repeats it over and over, and returns a false amount of
> columns, like 25+ columns when only about 6 exist or so...

Thanks for reporting this bug.
Fixed and commited to SVN repository.

Cheers,
-- 
Bernardo Damele A. G.

E-mail / Jabber: bernardo.damele (at) gmail.com
Mobiles: +39-3493821385 (IT), +44-(0)7788962949 (UK)
PGP Key ID: 0x05F5A30F

[sqlmap-users] Microsoft SQL 2000

[Jason S. <jas...@gm...>]

Having a couple problems with Microsoft SQL 2000...

Database enumeration seems OK
Table enumeration seems OK

Column enumeration doesn't work, returns a blank field, then returns the
first field, and repeats it over and over, and returns a false amount of
columns, like 25+ columns when only about 6 exist or so...

System tested on:
Microsoft SQL Server  2000 - 8.00.2050 (Intel X86) 
Mar  7 2008 21:29:56 
Copyright (c) 1988-2003 Microsoft Corporation
Standard Edition on Windows NT 5.0 (Build 2195: Service Pack 4)

[21:13:32] [INFO] fetching columns for table 'testtable' on database
'testdb'
[21:13:32] [INFO] fetching number of columns for table 'testtable' on
database 'testdb'
[21:13:32] [INFO] query: SELECT ISNULL(CAST(LTRIM(STR(COUNT(name))) AS
VARCHAR(8000)), CHAR(32)) FROM testdb..syscolumns WHERE id=(SELECT id
FROM testdb..sysobjects WHERE
name=CHAR(99)+CHAR(117)+CHAR(115)+CHAR(116)+CHAR(111)+CHAR(109)+CHAR(101)+CHAR(114))
[21:13:32] [INFO] retrieved: 25
[21:13:53] [INFO] performed 20 queries in 21 seconds
[21:13:53] [INFO] query: SELECT TOP 1 ISNULL(CAST(name AS
VARCHAR(8000)), CHAR(32)) FROM (SELECT TOP 0 name FROM
testdb..syscolumns WHERE id=(SELECT id FROM testdb..sysobjects WHERE
name=CHAR(99)+CHAR(117)+CHAR(115)+CHAR(116)+CHAR(111)+CHAR(109)+CHAR(101)+CHAR(114))) CTABLE
[21:13:53] [INFO] retrieved: 
[21:13:56] [INFO] performed 6 queries in 2 seconds
[21:13:56] [INFO] query: SELECT TOP 1 ISNULL(CAST(name AS
VARCHAR(8000)), CHAR(32)) FROM (SELECT TOP 1 name FROM
testdb..syscolumns WHERE id=(SELECT id FROM testdb..sysobjects WHERE
name=CHAR(99)+CHAR(117)+CHAR(115)+CHAR(116)+CHAR(111)+CHAR(109)+CHAR(101)+CHAR(114))) CTABLE
[21:13:56] [INFO] retrieved: accountnumber
[21:15:57] [INFO] performed 97 queries in 121 seconds
[21:15:57] [INFO] query: SELECT TOP 1 ISNULL(CAST(name AS
VARCHAR(8000)), CHAR(32)) FROM (SELECT TOP 2 name FROM
testdb..syscolumns WHERE id=(SELECT id FROM testdb..sysobjects WHERE
name=CHAR(99)+CHAR(117)+CHAR(115)+CHAR(116)+CHAR(111)+CHAR(109)+CHAR(101)+CHAR(114))) CTABLE
[21:15:57] [INFO] retrieved: accountnumber
[21:18:22] [INFO] performed 97 queries in 144 seconds
[21:18:22] [INFO] query: SELECT TOP 1 ISNULL(CAST(name AS
VARCHAR(8000)), CHAR(32)) FROM (SELECT TOP 3 name FROM
testdb..syscolumns WHERE id=(SELECT id FROM testdb..sysobjects WHERE
name=CHAR(99)+CHAR(117)+CHAR(115)+CHAR(116)+CHAR(111)+CHAR(109)+CHAR(101)+CHAR(114))) CTABLE
[21:18:22] [INFO] retrieved: accountnumber
[21:20:45] [INFO] performed 97 queries in 142 seconds
[21:20:45] [INFO] query: SELECT TOP 1 ISNULL(CAST(name AS
VARCHAR(8000)), CHAR(32)) FROM (SELECT TOP 4 name FROM
testdb..syscolumns WHERE id=(SELECT id FROM testdb..sysobjects WHERE
name=CHAR(99)+CHAR(117)+CHAR(115)+CHAR(116)+CHAR(111)+CHAR(109)+CHAR(101)+CHAR(114))) CTABLE

Re: [sqlmap-users] sqlmap on win2k3

[Bernardo D. A. G. <ber...@gm...>]

There is a bug in sqlmap 0.6.2 related to the use of -C command line
option.. bypass the issue by not providing the column name or upgrade
to the development release from subversion repository that fixed this
issue.

On Tue, Nov 18, 2008 at 11:36, Bbb Bbb <hol...@ya...> wrote:
> im trying to do some testing with it but no matter which order i make the
> query, i get the same error
>
> query: sqlmap.exe -u http://www.site.com/page/page.asp?id=3 --proxy
> http://127.0.0.1:80 --dump -T main_table -D testdb -C UserName
>
> error:UnboundLocalError : local variable 'colist' referenced before
> assignment
>
> can you tell me what this means?
>
> thanks

-- 
Bernardo Damele A. G.

E-mail / Jabber: bernardo.damele (at) gmail.com
Mobiles: +39-3493821385 (IT), +44-(0)7788962949 (UK)
PGP Key ID: 0x05F5A30F

Re: [sqlmap-users] sqlmap on win2k3

[Bernardo D. A. G. <ber...@gm...>]

Welcome.

On Tue, Nov 18, 2008 at 10:16, Bbb Bbb <hol...@ya...> wrote:
> thanks i have it running now

-- 
Bernardo Damele A. G.

E-mail / Jabber: bernardo.damele (at) gmail.com
Mobiles: +39-3493821385 (IT), +44-(0)7788962949 (UK)
PGP Key ID: 0x05F5A30F

Re: [sqlmap-users] sqlmap on win2k3

[Bernardo D. A. G. <ber...@gm...>]

It is a command line tool, run cmd.exe, then from there enter the
folder where you unpack sqlmap and run it.
Please, refer to the user's manual for further details. There are
plenty of examples for all options there.

On Tue, Nov 18, 2008 at 05:02, Bbb Bbb <hol...@ya...> wrote:
> hi, sqlmap does not work on win2k3 it just opens then closes straight away.
>
> im not sure if its a bug or if you just coded it for xp

-- 
Bernardo Damele A. G.

E-mail / Jabber: bernardo.damele (at) gmail.com
Mobiles: +39-3493821385 (IT), +44-(0)7788962949 (UK)
PGP Key ID: 0x05F5A30F

Re: [sqlmap-users] SQLMap Bug

[Andres R. <and...@gm...>]

Marc,

On Wed, Nov 12, 2008 at 2:36 AM, Marc-André Laverdière
<mar...@at...> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi guys!
>
> Sorry for causing a thread without me wanting to.
> As a sidenote, its just basic usability to distinguish between a system
> failure (stack trace) and an improper set of usage parameters. I'm 100%
> with Andres on this.

+1

> I wouldn't have sent you a bug report if the output said "RFTM" instead
> of telling me to send you a bug report...

+1

> I think the time taken to change that will be lesser than the time
> you'll spend dealing with RFTM cases...

+1, +1 ,+1, +1 ;)

> Daniele Bellucci wrote:
>> I agree with Bernardo, users shall read documentation before using the
>> tool .. and if the find something wrong they can ask questions. But
>> it's important they read the documentation before posting strange
>> questione to any mailinglist (eg: pen-test) but this!
>>
>> D.
>>
>>
>>
>>
>> On Tue, Nov 11, 2008 at 3:08 PM, Bernardo Damele A. G.
>> <ber...@gm...> wrote:
>>> Hi Andres,
>>>
>>> On Tue, Nov 11, 2008 at 14:00, Andres Riancho <and...@gm...> wrote:
>>>> ...
>>>> I agree that this is the classical "RTFM", but sqlmap shouldn't show a
>>>> traceback in this case. The correct behaviour here should have been
>>>> something like:
>>>>
>>>> print 'The port you selected (value: %s) is invalid' % __hostnamePort[1]
>>> I am using optparse to parse command line parameters, it's handled
>>> automatically. Giving -u="http://..." takes '=http' as target url
>>> which is clearly wrong. Nothing I can/want to fix/change here.
>>>
>>>> ...
>>>> [ERROR] unhandled exception in sqlmap/0.6.2, please copy the command
>>>> line and the following text and send by e-mail to
>>>> sql...@li...
>>> Done!
>>>
>>> Cheers,
>>> --
>>> Bernardo Damele A. G.
>>>
>>> E-mail / Jabber: bernardo.damele (at) gmail.com
>>> Mobiles: +39-3493821385 (IT), +44-(0)7788962949 (UK)
>>> PGP Key ID: 0x05F5A30F
>>>
>>> -------------------------------------------------------------------------
>>> This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
>>> Build the coolest Linux based applications with Moblin SDK & win great prizes
>>> Grand prize is a trip for two to an Open Source event anywhere in the world
>>> http://moblin-contest.org/redirect.php?banner_id=100&url=/
>>> _______________________________________________
>>> sqlmap-users mailing list
>>> sql...@li...
>>> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>>>
>
>
> - --
> Marc-André Laverdière
> Software Security Researcher
> Innovation Labs, Tata Consultancy Services
> Hyderabad, India
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iEYEARECAAYFAkkaXWEACgkQ1pcTV+tDOi4+5QCdFw2nDM4E91oJNtobhtlTT+Xl
> DjcAnjL4XjQaSzER4bO5q4Q3h3p7T7eC
> =pTR/
> -----END PGP SIGNATURE-----
>



-- 
Andres Riancho
http://w3af.sourceforge.net/
Web Application Attack and Audit Framework

Re: [sqlmap-users] SQLMap Bug

[Marc-André L. <mar...@at...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi guys!

Sorry for causing a thread without me wanting to.
As a sidenote, its just basic usability to distinguish between a system
failure (stack trace) and an improper set of usage parameters. I'm 100%
with Andres on this.

I wouldn't have sent you a bug report if the output said "RFTM" instead
of telling me to send you a bug report...

I think the time taken to change that will be lesser than the time
you'll spend dealing with RFTM cases...

Daniele Bellucci wrote:
> I agree with Bernardo, users shall read documentation before using the
> tool .. and if the find something wrong they can ask questions. But
> it's important they read the documentation before posting strange
> questione to any mailinglist (eg: pen-test) but this!
> 
> D.
> 
> 
> 
> 
> On Tue, Nov 11, 2008 at 3:08 PM, Bernardo Damele A. G.
> <ber...@gm...> wrote:
>> Hi Andres,
>>
>> On Tue, Nov 11, 2008 at 14:00, Andres Riancho <and...@gm...> wrote:
>>> ...
>>> I agree that this is the classical "RTFM", but sqlmap shouldn't show a
>>> traceback in this case. The correct behaviour here should have been
>>> something like:
>>>
>>> print 'The port you selected (value: %s) is invalid' % __hostnamePort[1]
>> I am using optparse to parse command line parameters, it's handled
>> automatically. Giving -u="http://..." takes '=http' as target url
>> which is clearly wrong. Nothing I can/want to fix/change here.
>>
>>> ...
>>> [ERROR] unhandled exception in sqlmap/0.6.2, please copy the command
>>> line and the following text and send by e-mail to
>>> sql...@li...
>> Done!
>>
>> Cheers,
>> --
>> Bernardo Damele A. G.
>>
>> E-mail / Jabber: bernardo.damele (at) gmail.com
>> Mobiles: +39-3493821385 (IT), +44-(0)7788962949 (UK)
>> PGP Key ID: 0x05F5A30F
>>
>> -------------------------------------------------------------------------
>> This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
>> Build the coolest Linux based applications with Moblin SDK & win great prizes
>> Grand prize is a trip for two to an Open Source event anywhere in the world
>> http://moblin-contest.org/redirect.php?banner_id=100&url=/
>> _______________________________________________
>> sqlmap-users mailing list
>> sql...@li...
>> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>>


- --
Marc-André Laverdière
Software Security Researcher
Innovation Labs, Tata Consultancy Services
Hyderabad, India
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkkaXWEACgkQ1pcTV+tDOi4+5QCdFw2nDM4E91oJNtobhtlTT+Xl
DjcAnjL4XjQaSzER4bO5q4Q3h3p7T7eC
=pTR/
-----END PGP SIGNATURE-----

Re: [sqlmap-users] SQLMap Bug

[Daniele B. <dan...@gm...>]

I agree with Bernardo, users shall read documentation before using the
tool .. and if the find something wrong they can ask questions. But
it's important they read the documentation before posting strange
questione to any mailinglist (eg: pen-test) but this!

D.




On Tue, Nov 11, 2008 at 3:08 PM, Bernardo Damele A. G.
<ber...@gm...> wrote:
> Hi Andres,
>
> On Tue, Nov 11, 2008 at 14:00, Andres Riancho <and...@gm...> wrote:
>> ...
>> I agree that this is the classical "RTFM", but sqlmap shouldn't show a
>> traceback in this case. The correct behaviour here should have been
>> something like:
>>
>> print 'The port you selected (value: %s) is invalid' % __hostnamePort[1]
>
> I am using optparse to parse command line parameters, it's handled
> automatically. Giving -u="http://..." takes '=http' as target url
> which is clearly wrong. Nothing I can/want to fix/change here.
>
>> ...
>> [ERROR] unhandled exception in sqlmap/0.6.2, please copy the command
>> line and the following text and send by e-mail to
>> sql...@li...
>
> Done!
>
> Cheers,
> --
> Bernardo Damele A. G.
>
> E-mail / Jabber: bernardo.damele (at) gmail.com
> Mobiles: +39-3493821385 (IT), +44-(0)7788962949 (UK)
> PGP Key ID: 0x05F5A30F
>
> -------------------------------------------------------------------------
> This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
> Build the coolest Linux based applications with Moblin SDK & win great prizes
> Grand prize is a trip for two to an Open Source event anywhere in the world
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>

Re: [sqlmap-users] SQLMap Bug

[Bernardo D. A. G. <ber...@gm...>]

Hi Andres,

On Tue, Nov 11, 2008 at 14:00, Andres Riancho <and...@gm...> wrote:
> ...
> I agree that this is the classical "RTFM", but sqlmap shouldn't show a
> traceback in this case. The correct behaviour here should have been
> something like:
>
> print 'The port you selected (value: %s) is invalid' % __hostnamePort[1]

I am using optparse to parse command line parameters, it's handled
automatically. Giving -u="http://..." takes '=http' as target url
which is clearly wrong. Nothing I can/want to fix/change here.

> ...
> [ERROR] unhandled exception in sqlmap/0.6.2, please copy the command
> line and the following text and send by e-mail to
> sql...@li...

Done!

Cheers,
-- 
Bernardo Damele A. G.

E-mail / Jabber: bernardo.damele (at) gmail.com
Mobiles: +39-3493821385 (IT), +44-(0)7788962949 (UK)
PGP Key ID: 0x05F5A30F

Re: [sqlmap-users] SQLMap Bug

[Andres R. <and...@gm...>]

Bernardo,

On Mon, Nov 10, 2008 at 9:11 PM, Bernardo Damele A. G.
<ber...@gm...> wrote:
> Hi Marc-Andre',
>
> Marc-André Laverdière wrote:
>> ...
>> I'm having the following problem on a vanilla install on my Ubuntu 8.10 box:
>>
>> sqlmap -u="http://localhost:8180/securibench-micro/"
>>
>>     sqlmap/0.6.2 coded by Bernardo Damele A. G. <ber...@gm...>
>>                         and Daniele Bellucci <dan...@gm...>
>>
>> [*] starting at: 15:09:51
>>
>> [15:09:51] [ERROR] unhandled exception in sqlmap/0.6.2, please copy the
>> command line and the following text and send by e-mail to
>> ber...@gm.... I will fix it as soon as possible:
>> sqlmap version: 0.6.2
>> Python version: 2.5.2
>> Operating system: linux2
>> Traceback (most recent call last):
>>   File "/usr/bin/sqlmap", line 74, in main
>>     start()
>>   File "/usr/share/sqlmap/lib/controller/controller.py", line 125, in start
>>     initTargetEnv()
>>   File "/usr/share/sqlmap/lib/core/target.py", line 200, in initTargetEnv
>>     parseTargetUrl()
>>   File "/usr/share/sqlmap/lib/core/common.py", line 502, in parseTargetUrl
>>     conf.port = int(__hostnamePort[1])
>> ValueError: invalid literal for int() with base 10: ''
>
> The syntax is -u "http://localhost:8180/securibench-micro/" or
> --url="http://localhost:8180/securibench-micro/".
>
> Refer to the user's manual and sqlmap.py -h next time.

I agree that this is the classical "RTFM", but sqlmap shouldn't show a
traceback in this case. The correct behaviour here should have been
something like:

print 'The port you selected (value: %s) is invalid' % __hostnamePort[1]

Also, you should change

[ERROR] unhandled exception in sqlmap/0.6.2, please copy the command
line and the following text and send by e-mail to
ber...@gm...

with this:

[ERROR] unhandled exception in sqlmap/0.6.2, please copy the command
line and the following text and send by e-mail to
sql...@li...


> Cheers,
> --
> Bernardo Damele A. G.
>
> E-mail / Jabber: bernardo.damele (at) gmail.com
> Mobiles: +39-3493821385 (IT), +44-(0)7788962949 (UK)
> PGP Key ID: 0x05F5A30F
>
> -------------------------------------------------------------------------
> This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
> Build the coolest Linux based applications with Moblin SDK & win great prizes
> Grand prize is a trip for two to an Open Source event anywhere in the world
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>



-- 
Andres Riancho
http://w3af.sourceforge.net/
Web Application Attack and Audit Framework

Re: [sqlmap-users] SQLMap Bug

[Bernardo D. A. G. <ber...@gm...>]

Hi Marc-Andre',

Marc-André Laverdière wrote:
> ...
> I'm having the following problem on a vanilla install on my Ubuntu 8.10 box:
> 
> sqlmap -u="http://localhost:8180/securibench-micro/"
> 
>     sqlmap/0.6.2 coded by Bernardo Damele A. G. <ber...@gm...>
>                         and Daniele Bellucci <dan...@gm...>
> 
> [*] starting at: 15:09:51
> 
> [15:09:51] [ERROR] unhandled exception in sqlmap/0.6.2, please copy the
> command line and the following text and send by e-mail to
> ber...@gm.... I will fix it as soon as possible:
> sqlmap version: 0.6.2
> Python version: 2.5.2
> Operating system: linux2
> Traceback (most recent call last):
>   File "/usr/bin/sqlmap", line 74, in main
>     start()
>   File "/usr/share/sqlmap/lib/controller/controller.py", line 125, in start
>     initTargetEnv()
>   File "/usr/share/sqlmap/lib/core/target.py", line 200, in initTargetEnv
>     parseTargetUrl()
>   File "/usr/share/sqlmap/lib/core/common.py", line 502, in parseTargetUrl
>     conf.port = int(__hostnamePort[1])
> ValueError: invalid literal for int() with base 10: ''

The syntax is -u "http://localhost:8180/securibench-micro/" or
--url="http://localhost:8180/securibench-micro/".

Refer to the user's manual and sqlmap.py -h next time.

Cheers,
-- 
Bernardo Damele A. G.

E-mail / Jabber: bernardo.damele (at) gmail.com
Mobiles: +39-3493821385 (IT), +44-(0)7788962949 (UK)
PGP Key ID: 0x05F5A30F