sqlmap-users

[sqlmap-users] --os-shell

[Nicolas K. <kr...@an...>]

Hi again, thanks for the quick fix, there seems to be though another issue 
with --os-shell

the command executed is just sqlmap.py -u "host" --os-shell , the output of 
the command follows:

sqlmap version: 0.7rc2
Python version: 2.5.4
Operating system: linux2
Traceback (most recent call last):
  File "./sqlmap.py", line 84, in main
    start()
  File "/home/dreamer/sqlmap/lib/controller/controller.py", line 263, in 
start
    action()
  File "/home/dreamer/sqlmap/lib/controller/action.py", line 140, in action
    conf.dbmsHandler.osShell()
  File "/home/dreamer/sqlmap/plugins/generic/takeover.py", line 260, in 
osShell
    self.__webBackdoorOsShell()
  File "/home/dreamer/sqlmap/plugins/generic/takeover.py", line 100, in 
__webBackdoorOsShell
    kb.docRoot  = getDocRoot()
  File "/home/dreamer/sqlmap/lib/core/common.py", line 245, in getDocRoot
    index   = absFilePath.index(conf.path)
ValueError: substring not found

Regards,
Nicolas 

[sqlmap-users] --os-shell

[Nicolas K. <kr...@an...>]

Bernardo thank you for the changes, we keep in mind that trunk is not 
stable.
    As you wrote earlier --os-shell option needs to be fixed as it's still 
not operating in the latest revision (744).  It's a very usefull option for 
pen-testing and making the client believe that there is a problem with their 
website, it gives the ability to demonstrate, easy and fast, the flaws in 
the web/database structure of the application.

Regards,
Nicolas 

Re: [sqlmap-users] --os-shell

[Bernardo D. A. G. <ber...@gm...>]

Hi Nicolas,

Fixed and commited.

On Tue, Apr 28, 2009 at 01:09, Nicolas Krassas <kr...@an...> wrote:
> Hi again, thanks for the quick fix, there seems to be though another issue
> with --os-shell
>
> the command executed is just sqlmap.py -u "host" --os-shell , the output of
> the command follows:
>
> sqlmap version: 0.7rc2
> Python version: 2.5.4
> Operating system: linux2
> Traceback (most recent call last):
>  File "./sqlmap.py", line 84, in main
>    start()
>  File "/home/dreamer/sqlmap/lib/controller/controller.py", line 263, in
> start
>    action()
>  File "/home/dreamer/sqlmap/lib/controller/action.py", line 140, in action
>    conf.dbmsHandler.osShell()
>  File "/home/dreamer/sqlmap/plugins/generic/takeover.py", line 260, in
> osShell
>    self.__webBackdoorOsShell()
>  File "/home/dreamer/sqlmap/plugins/generic/takeover.py", line 100, in
> __webBackdoorOsShell
>    kb.docRoot  = getDocRoot()
>  File "/home/dreamer/sqlmap/lib/core/common.py", line 245, in getDocRoot
>    index   = absFilePath.index(conf.path)
> ValueError: substring not found


-- 
Bernardo Damele A. G.

E-mail / Jabber: bernardo.damele (at) gmail.com
Mobiles: +447788962949 (UK), +393493821385 (IT)
PGP Key ID: 0x05F5A30F