Thread: [sqlmap-users] Error when creating shell-code (--os-bof)

SourceForge Headquarters 225 Broadway Suite 1600 San Diego, CA 92101 +1 (858) 422-6466

Hi again.
I was testing --os-bof in a box with xp_cmdshell and ... :

[16:20:10] [INFO] checking if xp_cmdshell extended procedure is available,
wait..
[16:20:18] [INFO] xp_cmdshell extended procedure is available
[16:20:29] [INFO] creating Metasploit Framework 3 multi-stage shellcode for
the exploit
which connection type do you want to use?
[1] Bind TCP (default)
[2] Bind TCP (No NX)
[3] Reverse TCP
[4] Reverse TCP (No NX)
> 1
which is the back-end DBMS address? [200.169.132.219]
which remote port numer do you want to use? [26333] 7777
which payload do you want to use?
[1] Meterpreter (default)
[2] Shell
[3] VNC
> 1
which payload encoding do you want to use?
[1] No Encoder
[2] Alpha2 Alphanumeric Mixedcase Encoder
[3] Alpha2 Alphanumeric Uppercase Encoder
[4] Avoid UTF8/tolower
[5] Call+4 Dword XOR Encoder
[6] Single-byte XOR Countdown Encoder
[7] Variable-length Fnstenv/mov Dword XOR Encoder
[8] Polymorphic Jump/Call XOR Additive Feedback Encoder
[9] Non-Alpha Encoder
[10] Non-Upper Encoder
[11] Polymorphic XOR Additive Feedback Encoder (default)
[12] Alpha2 Alphanumeric Unicode Mixedcase Encoder
[13] Alpha2 Alphanumeric Unicode Uppercase Encoder
> 11
[16:20:42] [INFO] creation in progress .. quit unexpectedly by signal 1
[16:20:44] [ERROR] failed to create the shellcode

[*] shutting down at: 16:20:44

I tried other encoding types too, and with shell payload.
There's no error, but there is a "unexpectedly quit" .. Is this a bug\error
in code, or the server is really patched?

Thanks alot,
Best Regards,
Gabriel.
-- 
Gabriel Lima