Hi Windom,
Can you please give it a try to latest sqlmap version from svn
repository? In case you get the same traceback, please get back to me.
Cheers,
Bernardo
On Wed, Oct 7, 2009 at 13:52, Windom Earle <win...@ma...> wrote:
> While doing cookie parameter injection for "--dump-all" option...
>
> Error log:
>
> there were multiple injection points, please select the one to use to go ahead:
> [0] place: User-Agent, parameter: User-Agent, type: numeric (default)
> [1] place: Cookie, parameter: sessiondata, type: numeric
> [q] Quit
>> 1
> [17:35:50] [INFO] testing for parenthesis on injectable parameter
> [17:36:51] [INFO] the injectable parameter requires 3 parenthesis
> [17:36:52] [INFO] testing MySQL
> [17:37:12] [WARNING] the back-end DMBS is not MySQL
> [17:37:12] [INFO] testing Oracle
> [17:37:32] [WARNING] the back-end DMBS is not Oracle
> [17:37:32] [INFO] testing PostgreSQL
> [17:37:54] [WARNING] the back-end DMBS is not PostgreSQL
> [17:37:54] [INFO] testing Microsoft SQL Server
> [17:38:17] [INFO] confirming Microsoft SQL Server
> [17:38:40] [INFO] the back-end DBMS is Microsoft SQL Server
>
> web application technology: Apache 2.2.11, PHP 5.2.9
> back-end DBMS: Microsoft SQL Server 2000
>
> [17:38:40] [INFO] fetching tables
> [17:38:40] [INFO] fetching database names
> [17:38:40] [INFO] fetching number of databases
> [17:38:40] [INFO] retrieved: [17:38:40] [ERROR] unhandled exception in sqlmap/0.
> 7, please copy the command line and the following text and send by e-mail to sql
> map...@li.... The developer will fix it as soon as possible:
> sqlmap version: 0.7
> Python version: 2.6.1
> Operating system: win32
> Traceback (most recent call last):
> File "sqlmap.py", line 84, in main
> File "lib\controller\controller.pyc", line 263, in start
> File "lib\controller\action.pyc", line 120, in action
> File "plugins\generic\enumeration.pyc", line 1081, in dumpAll
> File "plugins\dbms\mssqlserver.pyc", line 337, in getTables
> File "plugins\generic\enumeration.pyc", line 661, in getDbs
> File "lib\request\inject.pyc", line 378, in getValue
> File "lib\request\inject.pyc", line 308, in __goInferenceProxy
> File "lib\request\inject.pyc", line 99, in __goInferenceFields
> File "lib\request\inject.pyc", line 58, in __goInference
> File "lib\techniques\blind\inference.pyc", line 232, in bisection
> File "lib\techniques\blind\inference.pyc", line 105, in getChar
> TypeError: not all arguments converted during string formatting
--
Bernardo Damele A. G.
E-mail / Jabber: bernardo.damele (at) gmail.com
Mobile: +447788962949 (UK 07788962949)
PGP Key ID: 0x05F5A30F
|
